Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Introduction
Introduction
Forcepoint IPsec Advanced Guide | Forcepoint Web Security Cloud
IPsec Advanced is Forcepoint's next generation IPsec service, based on Forcepoint's NGFW technology. IPsec Advanced is used to forward traffic securely from your network's edge devices to the cloud service over a virtual private network (VPN). This guide covers the Forcepoint Advanced IPsec solution, introduced in July 2019, and provides information on planning and deploying IPsec for your network.
 
Important 
Introduction to Forcepoint IPsec Advanced
Internet Protocol Security (IPsec) is an extension to the IP protocol that provides secure traffic tunneling by authenticating and encrypting information sent over a network. The IPsec protocol uses Internet Key Exchange (IKE) to establish session keys for encryption and decryption, and Encapsulating Security Payload (ESP) to provide data confidentiality and integrity. Traffic to the Forcepoint IPsec Advanced service can be fully encapsulated in tunnel mode, providing complete traffic encryption.
Forcepoint IPsec Advanced supports transparent end user identification via NTLM, allowing users to browse the Internet without explicitly providing logon credentials.
Typical uses for the IPsec Advanced service include providing Forcepoint Web Security Cloud protection for:
*
*
*
*
*
*
*
A typical site-to-site IPsec tunneling deployment is shown in the following diagram.
Benefits
Using IPsec Advanced to forward traffic to the cloud service can provide a number of benefits. These include:
*
*
*
*
*
*
Capacity planning
Forcepoint IPsec Advanced supports up to 5Gbps throughput per tunnel and 1,000,000 concurrent connections.
By default, tunnels are configured for 200Mbps throughput. Customers requiring more than the default can submit a request to Forcepoint Technical Support.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Introduction
Copyright 2019 Forcepoint. All rights reserved.