Next Generation Firewall 7.0 Installation Guide

Home
Introduction to the Forcepoint Next Generation Firewall solution
Before setting up Forcepoint Next Generation Firewall (Forcepoint NGFW), it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
Preparing for installation
Before installing Forcepoint NGFW, identify the components of your installation and how they integrate into your environment.
Clustering
There are special considerations when you deploy an NGFW Engine as a Firewall Cluster, IPS Cluster, or Layer 2 Firewall Cluster.

Introduction to the Forcepoint Next Generation Firewall solution
Before setting up Forcepoint Next Generation Firewall (Forcepoint NGFW), it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
- Introduction to Forcepoint NGFW
  The Forcepoint Next Generation Firewall solution consists of Forcepoint NGFW Engines and the Forcepoint NGFW Security Management Center (SMC). The SMC is the management component of the Forcepoint NGFW solution.
- Preparing for installation
  Before installing Forcepoint NGFW, identify the components of your installation and how they integrate into your environment.
  - Supported platforms
    Several platforms are supported for deploying Forcepoint NGFW and SMC components.
  - Clustering
    There are special considerations when you deploy an NGFW Engine as a Firewall Cluster, IPS Cluster, or Layer 2 Firewall Cluster.
    - Heartbeat connection and state synchronization
      The nodes in a cluster use a heartbeat connection to monitor the other nodes’ operation and to synchronize their state tables.
    - Hardware for Firewall Cluster nodes
      You can run different nodes of the same cluster on different types of hardware.
  - Deployment options for IPS and Layer 2 Firewalls
    There are several ways to deploy Forcepoint NGFW Engines depending on how you want to inspect and respond to traffic.
  - Cable connection guidelines
    Follow these cable connection guidelines when connecting cables to Forcepoint NGFW hardware and the SMC Appliance.
  - Speed and duplex
    Mismatched speed and duplex settings are a frequent source of networking problems.
  - Obtain installation files
    If you did not receive an installation DVD for the Forcepoint NGFW software or the SMC, download installation files.
  - Licensing Forcepoint NGFW components
    Generate and download a license for each SMC server and NGFW Engine node before you start installing the Forcepoint NGFW.
  - Installation overview
    The process of installing Forcepoint NGFW consists of several high-level steps.
Security Management Center deployment
SMC is the management component of the Forcepoint NGFW system. SMC must be installed and running before you can deploy the Forcepoint NGFW engines.
Forcepoint NGFW deployment
Forcepoint NGFW deployment consists of adding and configuring engine elements in the SMC, and configuring the Forcepoint NGFW software on the engine.
Maintenance
To maximize the benefit of Forcepoint NGFW, upgrade the SMC and Forcepoint NGFW regularly.
Appendices

Clustering

There are special considerations when you deploy an NGFW Engine as a Firewall Cluster, IPS Cluster, or Layer 2 Firewall Cluster.

Heartbeat connection and state synchronization for clusters
The nodes in a cluster use a heartbeat connection to monitor the other nodes’ operation and to synchronize their state tables.
Hardware for Firewall Cluster nodes
You can run different nodes of the same cluster on different types of hardware.

© 2023 Forcepoint
Published 25 August 2023