Configure Web Security Cloud to receive traffic from Forcepoint NGFW

To configure Forcepoint Web Security Cloud to receive traffic from the NGFW Engine, add the NGFW Engine as an Edge Device in the cloud Security Portal.

1. Log on to the cloud Security Portal at https://⁠admin.forcepoint.net/portal.
2. Browse to Web > Device Management.
3. Click Add > Add Edge Device.
   
   
   
4. Select IPsec Advanced as the Tunneling Type.
5. In the General section, enter a name and an optional description for the Edge Device.
6. Select Forcepoint NGFW from the Device type drop-down list.
7. In the Device Authentication section, select IKEv2 from the IKE version drop-down list.
8. Select the type of IKE identity (Phase-1 ID) to use from the IKE identity drop-down list, then enter the value for the identity.
   You can use a DNS name or public IP address as the identity. If you use a DNS name, the value can be a host name or a fully qualified domain name (FQDN). The value does not need to be an existing DNS name or IP address, but it must be the same value that you configure in the SMC Management Client.
9. Enter a pre-shared key in the Pre-shared key field.
   The pre-shared key is the shared secret that must be used when you later configure the VPN in the SMC Management Client.
   Tip: To generate a pre-shared key, select Auto generated new key from the Pre-shared key drop-down list.
10. In the Data Centers section, select two locations from the list of available data centers.
    When you later configure the VPN in the SMC Management Client, you can enable either or both (for high availability) of the data centers in the properties of the Web Security Cloud VPN Gateway. The NGFW Engine does not prioritize one data center over the other.
11. In the Policy Assignment section, set the default policy for traffic from the NGFW Engine.
12. Click Save.