Managing edge devices

Related topics:

Adding or editing edge device information

Import multiple edge devices via a CSV file

Generating device certificates

Select Edge Devices and Services in the left selection pane of the Device Management table to view or add your edge devices for tunneling connectivity.

GRE tunneling is used to forward traffic to the cloud service over a GRE tunnel via a virtual point-to-point connection.

IPsec Advanced tunneling is our next generation IPsec service, supporting wide device interoperability, and devices with dynamic IP addresses using pre-shared key authentication.

The number of configured devices is displayed below the table. By default, you can create 200 tunnel connections for your account. To add more connections, contact your account manager to discuss your requirements.

The table displays the following elements for each device. Not all columns are relevant for each tunneling type, and some columns are hidden when the right detail pane is expanded.


Item	Description
Status	An icon indicating the current connection status of the device's tunnels, based on connectivity and tunnel status. (See the table below.) When an IPsec Advanced device is added or edited, a Configuring icon displays. This process can take several minutes per device to complete. Refresh the screen to confirm that the Provisioned icon has replaced the Configuring icon. If any tunnels for the device have a warning or error, the status indicator for the worst condition will be shown in the status column. Hover over the status icon to display the status for each tunnel.
Name	Device name, specified when a device is added or edited.
Description	Optional device description, specified when an edge device is added or edited.
Folder	The folder containing the device. When you drill down into a folder, this column is not displayed.
Authentication	Options are PSK (pre-shared key), Certificate, or N/A. GRE tunnels do not use authentication.
Device Type	Device model, specified when a device is added or edited. An entry of "Not configured" indicates that the device was added without a device type specified. You can update this property for your devices using the Edit Edge Device page. (Device type is a required property for newly added devices.)
Tunneling	The type of tunnel connection this device is using. Options are IPsec Advanced or GRE.
Point of Presence	The data center or local point of presence configured for the device. If the information displays with there is a redundancy issue that should be corrected.

You can filter the list to find specific devices based on the authentication type, tunneling type, device type, or devices that use a specific policy. Click a filter name under Edge Devices and Services in the left-hand pane, or select a filter from the drop-down menu above the list.

The device status icons are shown in the following table. If a device has multiple tunnels, hovering over the status indicator in the list reveals the status for each tunnel.


Icon	Description	Explanation
	Up	The tunnel has successfully connected.
	Unavailable	The tunnel has previously connected to the cloud service, but may be experiencing connectivity issues.
	Down	The tunnel could not be established, or the device is disconnected. This may be due to a configuration or connectivity issue.
	Configuring	Used for GRE and IPsec Advanced devices, the device is being configured.
	Provisioned	Used for GRE and IPsec Advanced devices, the device has been configured and can now be connected. Note that a refresh of the screen is required before this icon will display for newly configured devices.
	Status Unknown	No connection attempts have been detected for this tunnel. This may be due to a configuration or connectivity issue.

When a device is selected, the right detail pane shows additional information for each device and tunnel. The Status section displays the following connectivity information:


Item	Description
Point of Presence	The location of the PoP to which the device is connected.
Server name	The name of the server currently hosting the connection. (For GRE devices, the server name is shown in brackets after the PoP name.)
Average speed	An indicative sample of the data transfer rate over the last few minutes, in Mbps (IPsec Advanced tunnels only).
Tunnel uptime	The length of time the tunnel has been established, in days, hours, and minutes (IPsec Advanced tunnels only.
Last activity	The date and time traffic was last received from the device via this tunnel.

The Configuration section shows setup information for the device. The information shown here depends upon the tunneling type your device is using. The following items are shown for all devices:

Device type

Tunneling type

Primary PoP (and Secondary PoP): the name and identifier of the point of presence to which each tunnel connects.

Default policy - an entry of "N/A" indicates that the device was assigned to a policy, but the cloud service does not recognize the policy name.

Other policies (if any) assigned to internal networks managed by the device

For devices connecting via IPsec Advanced tunneling, the following additional information is shown:

Service Address: address to which the edge device should connect.

Pre-shared key details include the egress IP address and IKE ID. Administrators also have the option to view the key.

For devices connecting via GRE tunneling, the following additional information is shown for each tunnel:

Public IP

Destination IP: address for the remote (PoP) end of the GRE tunnel, assigned by the cloud service.

Source IP: address for the local (edge device) end of the GRE tunnel, assigned by the cloud service.

Service address: address to which the edge device should connect..


	Note You must configure two points of presence for redundancy when you configure GRE or IPsec tunnels. The above information is repeated for each connection.

To import a CSV file containing edge device information, click the Add button and select Import Edge Devices. See Import multiple edge devices via a CSV file.

To edit an existing device, select the device in the table, then click the Update button in the detail pane. See Adding or editing edge device information.

Note

For detailed guidance on configuring your edge device, see the following guides:

Forcepoint IPsec Advanced Guide

Forcepoint GRE Guide