Forcepoint Next Generation Firewall How-To How to deploy Forcepoint Next Generation Firewall in the Amazon Web Services cloud

Home
Deploy NGFW in AWS
Introduction
You can deploy Forcepoint Next Generation Firewall in the Amazon Web Services (AWS) cloud to provide VPN connectivity, access control, and inspection for services in the AWS cloud.
Use cases for Forcepoint NGFW in the AWS cloud
These deployment examples show how you can use Forcepoint NGFW in the AWS cloud environment.

Deploy NGFW in AWS
- Introduction
  You can deploy Forcepoint Next Generation Firewall in the Amazon Web Services (AWS) cloud to provide VPN connectivity, access control, and inspection for services in the AWS cloud.
  - Licensing models for Forcepoint NGFW in the AWS cloud
    Two licensing models are supported for Forcepoint NGFW in the AWS cloud.
  - Considerations for deploying Forcepoint NGFW in the AWS cloud
    There are some additional considerations when you deploy Forcepoint NGFW in the AWS cloud.
  - Use cases for Forcepoint NGFW in the AWS cloud
    These deployment examples show how you can use Forcepoint NGFW in the AWS cloud environment.
    - Remote access connectivity
      You can use Forcepoint NGFW as a cloud edge gateway to connect your remote users to Amazon Virtual Private Cloud (VPC).
    - Corporate data center connectivity
      Physical and virtual Forcepoint NGFW gateways securely connect your corporate on-premises data centers to your virtual ones in AWS VPCs.
    - VPN CloudHub
      Securely connect remote branch offices using the AWS VPN CloudHub, operating on a simple hub-and-spoke model, for primary and backup connectivity between remote offices.
    - VPC-to-VPC routing between regions
      Create secure VPN tunnels between two or more Forcepoint NGFW Engines to connect VPCs across multiple AWS regions.
- Deploying Forcepoint NGFW in the AWS cloud
  You can deploy Forcepoint NGFW in the AWS cloud using 1-Click Launch or using Manual Launch when you have an existing SMC installation.
- Configure HA
  After you have deployed two NGFW Engines, configure high availability (HA).
- AWS Transit Gateway
- Managing Forcepoint NGFW Engines using the SSM Agent
  You can use the AWS Systems Manager Agent (SSM Agent) to manage Forcepoint NGFW Engines that are deployed in the AWS cloud using the same AWS tools that are used for other AWS resources.
- Maintenance
  All configuration information for the NGFW Engines is stored on the Management Server component of the SMC. After deployment, you can manage NGFW Engines in the AWS cloud using the Management Client component of the SMC in the same way as other NGFW Engines.
- Troubleshooting in the AWS console
  You can use diagnostics information provided by the AWS console for troubleshooting.
- Example deployment
  This example shows a deployment in an example network environment.
- Configuring VPC ingress routing for an Internet gateway
  VPC ingress routing can direct all traffic from an edge location, such as the Internet or a VPN gateway, through the Forcepoint NGFW Engine before reaching its final destination. These instructions describe how to configure VPC ingress routing for an Internet gateway.
- Configuring a route-based VPN to AWS with BGP
  The configuration for this scenario includes a virtual private cloud (VPC) with a public subnet and private subnets. A virtual private gateway enables communication with your own on-premises network over an IPsec VPN tunnel. All routing configuration is done using BGP.
- Find product documentation
  In the Forcepoint Customer Hub, you can find information about a released product, including product documentation, technical articles, and more.

Use cases for Forcepoint NGFW in the AWS cloud

These deployment examples show how you can use Forcepoint NGFW in the AWS cloud environment.

Remote access connectivity
You can use Forcepoint NGFW as a cloud edge gateway to connect your remote users to Amazon Virtual Private Cloud (VPC).
Corporate data center connectivity
Physical and virtual Forcepoint NGFW gateways securely connect your corporate on-premises data centers to your virtual ones in AWS VPCs.
VPN CloudHub
Securely connect remote branch offices using the AWS VPN CloudHub, operating on a simple hub-and-spoke model, for primary and backup connectivity between remote offices.
VPC-to-VPC routing between regions
Create secure VPN tunnels between two or more Forcepoint NGFW Engines to connect VPCs across multiple AWS regions.

© 2022 Forcepoint
Published 14 October 2022