Forcepoint Appliances Getting Started Guide

1 Forcepoint Appliances Getting Started Guide V Series, X Series, & Virtual Appliances v8 .5 .x 2020 Forcepoint 2020 Forcepoint . Forcepoint and the Forcepoint logo are trademarks of Forcepoint . All other trademarks used in this document are the property of their respective Published 2020. Every effort has been made to ensure the accuracy of this document. However, Forcepoint makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose. Forcepoint shall not be liable for any error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the examples herein.

2 The information in this documentation is subject to change without notice. Last modified 08-Jun-2020. Contents Topic 1 Forcepoint Appliances .. 1. Supported software.. 2. Forcepoint Email Security.. 2. Forcepoint Web Security.. 2. Forcepoint URL Filtering .. 2. Forcepoint DLP .. 3. Appliance platforms .. 4. V Series .. 4. X Series .. 4. Forcepoint Virtual Appliances .. 5. Decryption Port Mirror Expansion .. 6. Features.. 6. Platform hardening .. 6. Command-line interface .. 6. Forcepoint Security Appliance Manager.. 7. Custom appliance user account management.

3 7. Forcepoint appliance platform API .. 8. Stacking module on X10G .. 8. 10 GBe PCI NIC on V10K.. 8. Deployment .. 8. Configuration and management .. 8. Documentation .. 9. Topic 2 Deploying Forcepoint Appliances .. 11. Deployment planning .. 11. Deployment big picture .. 13. Required off-appliance components .. 14. Web protection deployments.. 15. Forcepoint Email Security deployments .. 20. Deployment activity summary .. 21. Forcepoint appliance installation summary .. 21. Topic 3 V Series Hardware Setup.. 23. V10000 or V20000 hardware setup.

4 24. V10000 or V20000 with Forcepoint Web Security .. 24. V10000 or V20000 with Forcepoint Email Security .. 24. V5000 hardware setup .. 25. Getting Started i Contents Using the iDRAC .. 26. Connecting directly to the appliance .. 27. Topic 4 X Series Hardware Setup.. 29. X10G hardware setup .. 29. Receiving and racking the hardware .. 30. Unloading at your shipping dock .. 30. X10G Quick Start poster .. 31. Security blade slots.. 31. iDRAC and interface IP address planning .. 32. X10G chassis cabling .. 33. Power on .. 35. Set up the CMC IP Address.

5 36. Assigning blade slot iDRAC addresses .. 37. iDRAC Virtual Console .. 38. Topic 5 Forcepoint Virtual Appliance Setup .. 41. Creating a Forcepoint esxi vmware virtual appliance.. 41. Virtual appliance creation summary .. 41. Creating the virtual machine .. 42. Topic 6 Firstboot Wizard .. 43. The firstboot wizard (initial command-line configuration) .. 43. Gather data for firstboot .. 44. Run firstboot .. 46. Topic 7 Configure Appliances (post-firstboot) .. 49. SSH access to the CLI .. 49. Verify firstboot configuration settings .. 50. Configuration basics.

6 50. Appliance management interface (C) .. 51. System time and time synchronization with Forcepoint servers.. 51. Add an appliance description .. 52. Establish a filestore.. 53. Set an email address for password recovery.. 53. Configure additional network interfaces .. 54. Support for IPv6 .. 54. Appliance management interface (C) .. 55. Content Gateway (web proxy) interfaces (P1 and P2) .. 55. Web protection: Network Agent interface (N) .. 57. Forcepoint Email Security interfaces (E1 and E2, or P1 and P2) .. 58. Interface bonding.. 60. Configure routes.

7 61. ii Forcepoint Appliances Contents Static routes .. 61. Component routes .. 62. SNMP polling and alerting.. 62. SNMP traps .. 63. Topic 8 Installation of Off-Appliance Components .. 65. Getting Started iii Contents iv Forcepoint Appliances 1 Forcepoint Appliances Getting Started | Forcepoint Appliances | Version Related topics: Supported software, page 2. Appliance platforms, page 4. Features, page 6. Deployment, page 8. Configuration and management, page 8. Documentation Forcepoint Appliances are purpose-built machines for core components of Forcepoint DLP, Forcepoint Email Security, Forcepoint Web Security, and Forcepoint URL.

8 Filtering. Forcepoint Appliances are security-hardened (see Platform hardening and optimized for performance, reliability, and ease of use. This Guide provides general information about Forcepoint Appliances , as well as in-depth information about deploying Forcepoint Appliances with Forcepoint Email Security, Forcepoint Web Security, and Forcepoint URL Filtering. For detailed information about Forcepoint DLP on Forcepoint Appliances , including Forcepoint DLP Cloud Email (Microsoft Azure), see the Forcepoint DLP section of the Forcepoint documentation page.)

9 For detailed information about Forcepoint Web Security Cloud with I Series appliance, see the Forcepoint I Series Appliance section of the Forcepoint documentation page. Forcepoint Appliances : Getting Started 1. Forcepoint Appliances Supported software Forcepoint Appliances support: Forcepoint Email Security with integrated data loss prevention Forcepoint Web Security with integrated data loss prevention Forcepoint URL Filtering V5000 and vmware virtual Appliances Forcepoint DLP. Protector Mobile Agent Forcepoint DLP Cloud Email (Microsoft Azure).

10 Forcepoint Email Security Forcepoint Email Security provides comprehensive on-premises email security. Each message is processed by a robust set of analytics to prevent infected and other unwanted email from being delivered. Domain and IP address based message routing ensures reliable, accurate delivery of email. The optional Forcepoint Email Security Hybrid Module adds support for pre-filtering messages in the cloud. For more information, see Deploying Email Protection Solutions in the Forcepoint Deployment and Installation Center. Forcepoint Web Security Forcepoint Web Security provides protection against malware entering the network via Web channels, such as HTTP, HTTPS, and FTP.