Next Generation Firewall 7.0 Installation Guide

Home
Maintenance
To maximize the benefit of Forcepoint NGFW, upgrade the SMC and Forcepoint NGFW regularly.
Upgrading NGFW engines
When a new version of Forcepoint Next Generation Firewall introduces features that you want to use, upgrade the Forcepoint NGFW engines.

Introduction to the Forcepoint Next Generation Firewall solution
Before setting up Forcepoint Next Generation Firewall (Forcepoint NGFW), it is useful to know what the different components do and what engine roles are available. There are also tasks that you must complete to prepare for installation.
Security Management Center deployment
SMC is the management component of the Forcepoint NGFW system. SMC must be installed and running before you can deploy the Forcepoint NGFW engines.
Forcepoint NGFW deployment
Forcepoint NGFW deployment consists of adding and configuring engine elements in the SMC, and configuring the Forcepoint NGFW software on the engine.
Maintenance
To maximize the benefit of Forcepoint NGFW, upgrade the SMC and Forcepoint NGFW regularly.
- Upgrading licenses
  You must upgrade licenses if you upgrade the SMC, the SMC Appliance, or the NGFW Engines to a new major release.
- Maintaining the Security Management Center
  When there is a new version available, upgrade the SMC before upgrading NGFW Engines.
- SMC Appliance maintenance
  The SMC Appliance has a specific patching process that keeps the SMC software, operating system, and appliance firmware up-to-date.
- Upgrading NGFW engines
  When a new version of Forcepoint Next Generation Firewall introduces features that you want to use, upgrade the Forcepoint NGFW engines.
  - How engine upgrades work
    You can remotely upgrade engines using the Management Client or locally on the engine command line.
  - Obtain installation files
    If the Management Server is not set up to download engine upgrades automatically or if you want to upgrade engines locally, download the installation files manually.
  - Prepare NGFW Engine upgrade files
    Prepare the NGFW Engine upgrade files depending on the type of files you downloaded and how you plan to upgrade.
  - Upgrade engines remotely
    The Management Server can remotely upgrade NGFW Engine components that it manages.
  - Upgrade engines locally
    You can upgrade the engines on the engine command line.
Appendices

Upgrading NGFW Engines

When a new version of Forcepoint Next Generation Firewall introduces features that you want to use, upgrade the Forcepoint NGFW engines.

How engine upgrades work
You can remotely upgrade engines using the Management Client or locally on the engine command line.
Obtain NGFW Engine upgrade files
If the Management Server is not set up to download engine upgrades automatically or if you want to upgrade engines locally, download the installation files manually.
Prepare NGFW Engine upgrade files
Prepare the NGFW Engine upgrade files depending on the type of files you downloaded and how you plan to upgrade.
Upgrade NGFW Engines remotely
The Management Server can remotely upgrade NGFW Engine components that it manages.
Upgrade engines locally
You can upgrade the engines on the engine command line.

© 2023 Forcepoint
Published 25 August 2023