Next Generation Firewall 7.0 Installation Guide

Home
Forcepoint NGFW deployment
Forcepoint NGFW deployment consists of adding and configuring engine elements in the SMC, and configuring the Forcepoint NGFW software on the engine.
Configuring NGFW Engines as Master NGFW Engines and Virtual NGFW Engines
Configuring engine elements in the SMC prepares the SMC to manage Master NGFW Engines and Virtual NGFW Engines.

Introduction to the Forcepoint Next Generation Firewall solution
Before setting up Forcepoint Next Generation Firewall (Forcepoint NGFW), it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
Security Management Center deployment
SMC is the management component of the Forcepoint NGFW system. SMC must be installed and running before you can deploy the Forcepoint NGFW engines.
Forcepoint NGFW deployment
Forcepoint NGFW deployment consists of adding and configuring engine elements in the SMC, and configuring the Forcepoint NGFW software on the engine.
- Configuring Forcepoint NGFW for the Firewall/VPN role
  Configuring engine elements in the SMC prepares the SMC to manage NGFW Engines in the Firewall/VPN role.
- Configuring Forcepoint NGFW for the IPS role
  Configuring engine elements in the SMC prepares the SMC to manage Forcepoint NGFW in the IPS role.
- Configuring Forcepoint NGFW for the Layer 2 Firewall role
  Configuring engine elements in the SMC prepares the SMC to manage NGFW Engines in the Layer 2 Firewall role.
- Configuring NGFW Engines as Master NGFW Engines and Virtual NGFW Engines
  Configuring engine elements in the SMC prepares the SMC to manage Master NGFW Engines and Virtual NGFW Engines.
  - Master Engine and Virtual Security Engine configuration overview
    Virtual NGFW Engines are logically separate virtual engine instances on a physical engine device. A Master NGFW Engine is a physical engine device that provides resources for Virtual NGFW Engines. One physical Master NGFW Engine can support multiple Virtual NGFW Engines.
  - Install licenses for NGFW engines
    Install the NGFW Engine licenses that you downloaded while preparing for installation.
  - Add a Master Engine element
    To introduce a new Master NGFW Engine to the SMC, add a Master NGFW Engine element that stores the configuration information for the Master NGFW Engine and Virtual NGFW Engines.
  - Create Virtual Firewall elements
    Virtual Firewall elements store the configuration information related to the Virtual Firewalls.
  - Create Virtual IPS elements
    Virtual IPS elements store the configuration information related to the Virtual IPS engines.
  - Create Virtual Layer 2 Firewall elements
    Virtual Layer 2 Firewall elements store the configuration information related to the Virtual Layer 2 Firewalls.
- Configuring routing
  After creating the NGFW Engine elements and defining the interfaces, you can configure the basic routing.
- Initial configuration of Forcepoint NGFW software
  After configuring the NGFW Engines in the Management Client, apply the initial configuration of the NGFW Engine and contact the Management Server.
- Creating and installing policies
  After successfully applying the initial configuration and establishing contact between the NGFW Engines and the Management Server, the NGFW Engine is in the initial configuration state. Now you can create and install policies for access control or inspecting traffic.
Maintenance
To maximize the benefit of Forcepoint NGFW, upgrade the SMC and Forcepoint NGFW regularly.
Appendices

Configuring NGFW Engines as Master NGFW Engines and Virtual NGFW Engines

Configuring engine elements in the SMC prepares the SMC to manage Master NGFW Engines and Virtual NGFW Engines.

Master NGFW Engine and Virtual NGFW Engine configuration overview
Virtual NGFW Engines are logically separate virtual engine instances on a physical engine device. A Master NGFW Engine is a physical engine device that provides resources for Virtual NGFW Engines. One physical Master NGFW Engine can support multiple Virtual NGFW Engines.
Install licenses for NGFW Engines
Install the NGFW Engine licenses that you downloaded while preparing for installation.
Add Master NGFW Engine elements
To introduce a new Master NGFW Engine to the SMC, add a Master NGFW Engine element that stores the configuration information for the Master NGFW Engine and Virtual NGFW Engines.
Create Virtual Firewalls
Virtual Firewall elements store the configuration information related to the Virtual Firewalls.
Create Virtual IPS engines
Virtual IPS elements store the configuration information related to the Virtual IPS engines.
Add Virtual Layer 2 Firewall elements
Virtual Layer 2 Firewall elements store the configuration information related to the Virtual Layer 2 Firewalls.

© 2023 Forcepoint
Published 25 August 2023