Next Generation Firewall 7.0 Installation Guide

Home
Security Management Center deployment
SMC is the management component of the Forcepoint NGFW system. SMC must be installed and running before you can deploy the Forcepoint NGFW engines.
Installing the SMC
The SMC is the management component of the Forcepoint NGFW solution. The SMC manages and controls the other components in the system. You must install the SMC before you can install Forcepoint NGFW Engines.
Start the SMC after installation
Proceed through the following sections to start the SMC for the first time.

Introduction to the Forcepoint Next Generation Firewall solution
Before setting up Forcepoint Next Generation Firewall (Forcepoint NGFW), it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
Security Management Center deployment
SMC is the management component of the Forcepoint NGFW system. SMC must be installed and running before you can deploy the Forcepoint NGFW engines.
- Installing the SMC
  The SMC is the management component of the Forcepoint NGFW solution. The SMC manages and controls the other components in the system. You must install the SMC before you can install Forcepoint NGFW Engines.
  - SMC installation options
    You can install SMC server components on your own hardware or use an all-in-one SMC Appliance.
  - SMC installation overview
    The process of installing SMC consists of several high-level steps.
  - Install the SMC
    You can install the SMC using a graphical user interface installation wizard in Windows and Linux.
  - Install the SMC in Demo Mode
    The Demo Mode installation creates a simulated network environment for evaluation.
  - Install the SMC in Linux from the command line
    In Linux, you can install the Security Management Center on the command line.
  - Install the SMC Appliance
    The SMC Appliance ships with the Management Server and a Log Server pre-installed on it. Starting the SMC Appliance initiates an installation wizard.
  - Start the SMC after installation
    Proceed through the following sections to start the SMC for the first time.
    - Start the Management Server
      If the Management Server does not start automatically, you must start it.
    - Start the Management Client
      After you have started the Management Server, start the Management Client.
    - Log on to the SMC
      The Management Client connects to the Management Server and to Log Servers.
    - Accept the Management Server certificate
      As a precaution, to make sure that you are communicating with your Management Server, check the Certificate Authority fingerprint.
    - Install licenses for SMC servers
      Install the SMC server licenses that you downloaded while preparing for installation.
    - Bind Management Server POL-bound licenses to servers
      You must bind Management Server POL-bound licenses for Log Servers and Web Portal Servers to specific Server elements.
    - Start SMC servers
      If the Log Server or Web Portal Server does not start automatically, you must manually start them.
    - Generate SMC server certificates
      If necessary, you can manually certify an SMC server or generate an SMC server certificate.
  - Post-installation SMC configuration
    After installation, you can configure settings for system communication and enable more features for the SMC.
- Configuring the SMC
  After initial installation is complete, configure the SMC to allow adding the other components for your system.
Forcepoint NGFW deployment
Forcepoint NGFW deployment consists of adding and configuring engine elements in the SMC, and configuring the Forcepoint NGFW software on the engine.
Maintenance
To maximize the benefit of Forcepoint NGFW, upgrade the SMC and Forcepoint NGFW regularly.
Appendices

Start the SMC after installation

Proceed through the following sections to start the SMC for the first time.

Start the Management Server
If the Management Server does not start automatically, you must start it.
Start the Management Client
After you have started the Management Server, start the Management Client.
Log on to the SMC
The Management Client connects to the Management Server and to Log Servers.
Accept the Management Server certificate
As a precaution, to make sure that you are communicating with your Management Server, check the Certificate Authority fingerprint.
Install licenses for SMC servers
Install the SMC server licenses that you downloaded while preparing for installation.
Bind Management Server POL-bound licenses to servers
You must bind Management Server POL-bound licenses for Log Servers and Web Portal Servers to specific Server elements.
Start SMC servers
If the Log Server or Web Portal Server does not start automatically, you must manually start them.
Generate SMC server certificates
If necessary, you can manually certify an SMC server or generate an SMC server certificate.

© 2023 Forcepoint
Published 25 August 2023