Next Generation Firewall 7.0 Installation Guide

Home
Appendices
Example network (Firewall/VPN)
This example gives you a better understanding of how Forcepoint NGFW in the Firewall/VPN role fits into a network.
Example Headquarters management network
This example shows a sample management network.

Introduction to the Forcepoint Next Generation Firewall solution
Before setting up Forcepoint Next Generation Firewall (Forcepoint NGFW), it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
Security Management Center deployment
SMC is the management component of the Forcepoint NGFW system. SMC must be installed and running before you can deploy the Forcepoint NGFW engines.
Forcepoint NGFW deployment
Forcepoint NGFW deployment consists of adding and configuring engine elements in the SMC, and configuring the Forcepoint NGFW software on the engine.
Maintenance
To maximize the benefit of Forcepoint NGFW, upgrade the SMC and Forcepoint NGFW regularly.
Appendices
- Default communication ports
  There are default ports used in connections between SMC components and default ports that SMC components use with external components.
- Command line tools
  There are command line tools for the SMC and the NGFW Engines.
- Installing SMC Appliance software on a virtualization platform
  You can install the SMC Appliance software as a virtual machine on virtualization platforms such as VMware ESX.
- Installing Forcepoint NGFW on a virtualization platform
  You can install the Forcepoint NGFW software as a virtual machine on virtualization platforms such as VMware ESX or KVM.
- Installing Forcepoint NGFW software on third-party hardware
  You can install the Forcepoint NGFW software on third-party hardware that meets the hardware requirements.
- Installing the SMC with external certificate management
  When you install the SMC, you can use certificates issued by an external CA for internal TLS communication between system components.
- Example network (Firewall/VPN)
  This example gives you a better understanding of how Forcepoint NGFW in the Firewall/VPN role fits into a network.
  - Example Firewall Cluster
    This example shows Firewall Cluster interfaces in the example network.
  - Example Single Firewall
    The Branch Office firewall is a Single Firewall located in the Branch Office network.
  - Example Headquarters management network
    This example shows a sample management network.
    - HQ Firewall
      The HQ firewall provides NAT for the headquarters management network.
    - SMC Servers
      The example network includes a Management Server and a Log Server.
- Example network (IPS)
  To give you a better understanding of how Forcepoint NGFW in the IPS role fits into a network, this example outlines a network with IPS engines.
- Cluster installation worksheet instructions
  For planning the configuration of network interfaces for the engine nodes, use the worksheet.

Example headquarters management network

This example shows a sample management network.

HQ firewall
The HQ firewall provides NAT for the headquarters management network.
SMC Servers
The example network includes a Management Server and a Log Server.