Forcepoint™ Security Management Center Service Online Documentation

Home
VPN
VPN configuration
Setting up VPN Gateway on security engine
VPNs allow creating secure, private connections through networks that are not otherwise secure.

Preface
This guide provides the information you need to work with your Forcepoint product.
Introduction to SMC as a Service
The SMC as a Service provides centralized access for configuring, managing, logging, and monitoring NGFWs that secure network connectivity and control business operations.
Getting Started
Routing
Policy Creation and Administration
Monitoring
VPN
- VPN types & architecture
  A VPN extends a secured private network over public networks by encrypting connections so that they can be transported over insecure links without compromising confidential data.
- VPN configuration
  - Setting up VPN Gateway on security engine
    VPNs allow creating secure, private connections through networks that are not otherwise secure.
    - VPN configuration overview
      Many steps might be required to configure a VPN, depending on the complexity of the configuration.
    - Define a custom Gateway Profile element
      The Gateway Profile element introduces information about the features and options available so that the VPN configuration can be automatically validated.
    - Defining VPN gateways
      VPN Gateway and External VPN Gateway elements represent the physical devices that establish the VPN in the configuration.
    - Define VPN Traffic Selector elements
      VPN Traffic Selector elements allow you to define the IP addresses, protocols, and ports used by a specific host in a VPN site.
    - Defining VPN profiles
      VPN Profile elements contain settings related to authentication, integrity checking, and encryption.
  - Example VPN configurations
    The following example configurations outline common VPN use cases.
  - Automatic VPN site management
    The Site element defines the internal IP addresses that can send or receive traffic through the VPN.
  - Adjusting VPN-specific site settings for gateways
    Site elements allow you to adjust how the Site is used in each VPN.
  - Creating and managing VPN Profile elements
    If the default VPN Profile elements do not meet your needs, create a custom VPN Profile element.
- VPN authentication & certificates
  A digital certificate is a proof of identity. SMCaaS supports using certificates for authenticating gateways and the Forcepoint VPN Client.
- Application Access Portal
- Mobile VPN & VPN client
- VPN & access rules
- Reconfiguring existing VPNs
  You can reconfigure and tune existing VPNs.

Setting up VPN Gateway on security engine

VPNs allow creating secure, private connections through networks that are not otherwise secure.

VPN configuration overview
Many steps might be required to configure a VPN, depending on the complexity of the configuration.
Define a custom Gateway Profile element
The Gateway Profile element introduces information about the features and options available so that the VPN configuration can be automatically validated.
Defining VPN gateways
VPN Gateway and External VPN Gateway elements represent the physical devices that establish the VPN in the configuration.
Define VPN Traffic Selector elements
VPN Traffic Selector elements allow you to define the IP addresses, protocols, and ports used by a specific host in a VPN site.
Defining VPN profiles
VPN Profile elements contain settings related to authentication, integrity checking, and encryption.

Copyright © 2026 Forcepoint LLC