Next Generation Firewall 7.0 Installation Guide

Home
Forcepoint NGFW deployment
Forcepoint NGFW deployment consists of adding and configuring engine elements in the SMC, and configuring the Forcepoint NGFW software on the engine.
Configuring Forcepoint NGFW for the Layer 2 Firewall role
Configuring engine elements in the SMC prepares the SMC to manage NGFW Engines in the Layer 2 Firewall role.

Introduction to the Forcepoint Next Generation Firewall solution
Before setting up Forcepoint Next Generation Firewall (Forcepoint NGFW), it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
Security Management Center deployment
SMC is the management component of the Forcepoint NGFW system. SMC must be installed and running before you can deploy the Forcepoint NGFW engines.
Forcepoint NGFW deployment
Forcepoint NGFW deployment consists of adding and configuring engine elements in the SMC, and configuring the Forcepoint NGFW software on the engine.
- Configuring Forcepoint NGFW for the Firewall/VPN role
  Configuring engine elements in the SMC prepares the SMC to manage NGFW Engines in the Firewall/VPN role.
- Configuring Forcepoint NGFW for the IPS role
  Configuring engine elements in the SMC prepares the SMC to manage Forcepoint NGFW in the IPS role.
- Configuring Forcepoint NGFW for the Layer 2 Firewall role
  Configuring engine elements in the SMC prepares the SMC to manage NGFW Engines in the Layer 2 Firewall role.
  - Types of interfaces for NGFW Engines in the IPS and Layer 2 Firewall roles
    Interface definitions are an important part of IPS and Layer 2 Firewall elements.
  - Install licenses for NGFW engines
    Install the NGFW Engine licenses that you downloaded while preparing for installation.
  - Defining Layer 2 firewalls
    Layer 2 Firewall elements are a tool for configuring nearly all aspects of your Layer 2 Firewalls.
  - Bind engine licenses to Layer 2 Firewall elements
    After you have configured the Layer 2 Firewall elements, you must manually bind Management Server POL-bound licenses to specific Layer 2 Firewall elements.
- Configuring NGFW Engines as Master NGFW Engines and Virtual NGFW Engines
  Configuring engine elements in the SMC prepares the SMC to manage Master NGFW Engines and Virtual NGFW Engines.
- Configuring routing
  After creating the NGFW Engine elements and defining the interfaces, you can configure the basic routing.
- Initial configuration of Forcepoint NGFW software
  After configuring the NGFW Engines in the Management Client, apply the initial configuration of the NGFW Engine and contact the Management Server.
- Creating and installing policies
  After successfully applying the initial configuration and establishing contact between the NGFW Engines and the Management Server, the NGFW Engine is in the initial configuration state. Now you can create and install policies for access control or inspecting traffic.
Maintenance
To maximize the benefit of Forcepoint NGFW, upgrade the SMC and Forcepoint NGFW regularly.
Appendices

Configuring Forcepoint NGFW for the Layer 2 Firewall role

Configuring engine elements in the SMC prepares the SMC to manage NGFW Engines in the Layer 2 Firewall role.

Types of interfaces for NGFW Engines in the IPS and Layer 2 Firewall roles
Interface definitions are an important part of IPS and Layer 2 Firewall elements.
Install licenses for NGFW Engines
Install the NGFW Engine licenses that you downloaded while preparing for installation.
Configuring Layer 2 Firewalls
Layer 2 Firewall elements are a tool for configuring nearly all aspects of your Layer 2 Firewalls.
Bind engine licenses to Layer 2 Firewall elements
After you have configured the Layer 2 Firewall elements, you must manually bind Management Server POL-bound licenses to specific Layer 2 Firewall elements.

© 2023 Forcepoint
Published 25 August 2023