Forcepoint Next Generation Firewall How-To How to deploy Forcepoint Next Generation Firewall in the Amazon Web Services cloud

Home
Deploy NGFW in AWS
Deploying Forcepoint NGFW in the AWS cloud
You can deploy Forcepoint NGFW in the AWS cloud using 1-Click Launch or using Manual Launch when you have an existing SMC installation.
Deploy Forcepoint NGFW using 1-Click Launch
Create a Forcepoint NGFW instance, then deploy the SMC on your own hardware or in a separate instance on AWS.

Deploy NGFW in AWS
- Introduction
  You can deploy Forcepoint Next Generation Firewall in the Amazon Web Services (AWS) cloud to provide VPN connectivity, access control, and inspection for services in the AWS cloud.
- Deploying Forcepoint NGFW in the AWS cloud
  You can deploy Forcepoint NGFW in the AWS cloud using 1-Click Launch or using Manual Launch when you have an existing SMC installation.
  - Deploy Forcepoint NGFW using 1-Click Launch
    Create a Forcepoint NGFW instance, then deploy the SMC on your own hardware or in a separate instance on AWS.
    - Create a Forcepoint NGFW instance using 1-Click Launch
      Configure and launch an instance of the Forcepoint NGFW AMI using 1-Click Launch.
    - Deploy the SMC
      When the NGFW Engine launch is complete, deploy the SMC.
    - Configure the SMC
      Configure the network connections and contact addresses for the SMC.
    - Create Single Firewall elements
      Create a Single Firewall element for each Forcepoint NGFW engine that you deploy in the AWS cloud.
    - Connect the NGFW Engine to the SMC
      Establish contact between the NGFW Engine and the Management Server.
  - Deploy Forcepoint NGFW in AWS when you have an existing SMC installation
    If you already have an existing SMC installation, you can deploy additional NGFW Engines in AWS.
- Configure HA
  After you have deployed two NGFW Engines, configure high availability (HA).
- AWS Transit Gateway
- Managing Forcepoint NGFW Engines using the SSM Agent
  You can use the AWS Systems Manager Agent (SSM Agent) to manage Forcepoint NGFW Engines that are deployed in the AWS cloud using the same AWS tools that are used for other AWS resources.
- Maintenance
  All configuration information for the NGFW Engines is stored on the Management Server component of the SMC. After deployment, you can manage NGFW Engines in the AWS cloud using the Management Client component of the SMC in the same way as other NGFW Engines.
- Troubleshooting in the AWS console
  You can use diagnostics information provided by the AWS console for troubleshooting.
- Example deployment
  This example shows a deployment in an example network environment.
- Configuring VPC ingress routing for an Internet gateway
  VPC ingress routing can direct all traffic from an edge location, such as the Internet or a VPN gateway, through the Forcepoint NGFW Engine before reaching its final destination. These instructions describe how to configure VPC ingress routing for an Internet gateway.
- Configuring a route-based VPN to AWS with BGP
  The configuration for this scenario includes a virtual private cloud (VPC) with a public subnet and private subnets. A virtual private gateway enables communication with your own on-premises network over an IPsec VPN tunnel. All routing configuration is done using BGP.
- Find product documentation
  In the Forcepoint Customer Hub, you can find information about a released product, including product documentation, technical articles, and more.

Deploy Forcepoint NGFW using 1-Click Launch

Create a Forcepoint NGFW instance, then deploy the SMC on your own hardware or in a separate instance on AWS.

Create a Forcepoint NGFW instance using 1-Click Launch
Configure and launch an instance of the Forcepoint NGFW AMI using 1-Click Launch.
Deploy the SMC
When the NGFW Engine launch is complete, deploy the SMC.
Configure the SMC
Configure the network connections and contact addresses for the SMC.
Create Single Firewall elements
Create a Single Firewall element for each Forcepoint NGFW engine that you deploy in the AWS cloud.
Connect the NGFW Engine to the SMC
Establish contact between the NGFW Engine and the Management Server.

© 2022 Forcepoint
Published 14 October 2022