Forcepoint Next Generation Firewall Hardware Guide User Guide

: August 16, 2024
: Forcepoint

Table of Contents

Forcepoint Next Generation Firewall Hardware Guide
Product Information
Product Usage Instructions
Introduction
Model N120 features
Model N120W features
Model N120WL features
Model N120L and N125L features
Indicator lights
Ethernet port indicators
Install the appliance
Maintenance
Compliance information
FAQ
References
Read User Manual Online (PDF format)
Download This Manual (PDF format)

Forcepoint Next Generation Firewall Hardware Guide

Specifications

Models : N120W (APP-120C1), N120WL (APP-120C2), N120 (APP-120C3), N120L (APP-120C4), N125L (APP-120-C5)
Internet Security Device
Next-Generation Firewall 120 Series

Product Information

Model N120 Features
The N120 model features a front panel with a USB port, indicators for Ethernet interface port activity and link status, indicators for status, management, high availability, power over Ethernet, power, and disk activity. The back panel includes a grounding point and power connectors for 12V DC power and optionally 54V DC power for PoE ports.

Model N120W Features
The N120W model features a front panel with a USB port, indicators for Ethernet interface port activity and link status, indicators for status, management, high availability, power over Ethernet, wireless LAN connectivity, power, and disk activity. The back panel includes wireless LAN antenna connectors, a grounding point, and power connectors for 12V DC power and optionally 54V DCpower for PoE ports. It also has fixed Ethernet ports for various connections.

Product Usage Instructions

Installation

Familiarize yourself with the appliance ports and indicators
Ensure the appliance is safely installed by following the guidelines in the hardware guide.

Maintenance
Regularly check the appliance for any signs of damage or wear. Clean the appliance as needed following the maintenance instructions provided in the hardware guide.

Introduction

Thank you for choosing a Forcepoint appliance.
Familiarize yourself with the appliance ports and indicators and learn how to install the appliance safely.

Find product documentation In the Forcepoint Customer Hub, you can find information about a released product, including product documentation, technical articles, and more. You can get additional information and support for your product in the Forcepoint Customer Hub at https://support.forcepoint.com. There, you can access product documentation, release notes, Knowledge Base articles, downloads, cases, and contact information. You might need to log on to access the Forcepoint Customer Hub. If you do not yet have credentials, create a customer account. See https://support.forcepoint.com/CreateAccount.

Model N120 features

The figures and tables show the appliance components and features.

Front panel
This panel has the following parts.

USB port
Indicators for Ethernet interface port activity and link status
Indicators for status, management (MGMT), high availability (HA), and power over Ethernet (PoE)
Indicators for power (PWR) and disk activity (SSD)

Back panel
This panel has the following parts.

1 Grounding point
2 Power connector DC IN 1 — Provides 12V DC power for the appliance.
3 Power connector DC IN 2 — Optionally provides 54V DC power for the power over Ethernet (PoE) ports.
Note: PoE is an optional feature. A power adapter and power cable for PoE are not included with the delivery. To use PoE, you must purchase them separately.
4 Fixed Ethernet ports 6 and 7 from top to bottom. When a power adapter is connected to power connector DC IN 2, fixed Ethernet ports 6 and 7 provide power over the Ethernet cable for other devices that are compatible with the 802.3at standard. PoE on these ports is active and uses LLDP for power negotiation.
Fixed Ethernet ports 4 and 5 from top to bottom.
Fixed Ethernet ports 2 and 3 from top to bottom. If you use the appliance in an NGFW Engine cluster, use fixed Ethernet port 2 for the heartbeat connection between the nodes.
Fixed Ethernet ports 1 and 0 from left to right. Ethernet ports 1 and 0 are intended for the WAN connection.
Reset button.
Note : The Reset button functionality is only supported on engine version 7.0.1 or later.
Console port (speed 115,200 bps) and USB port
Power button.

Model N120W features

The figures and tables show the components and features of the N120W (APP- 120C1) appliance.

Front panel
This panel has the following parts.

USB port
Indicators for Ethernet interface port activity and link status
Indicators for status, management (MGMT), high availability (HA), and power over Ethernet (PoE)
Indicators for wireless LAN (WLAN) connectivity, power (PWR), and disk activity (SSD)

Back panel
This panel has the following parts.

Wireless LAN antenna connectors
Grounding point
Power connector DC IN 1 — Provides 12V DC power for the appliance.
Power connector DC IN 2 — Optionally provides 54V DC power for the power over Ethernet (PoE) ports.
Note: PoE is an optional feature. A power adapter and power cable for PoE are not included with the delivery. To use PoE, you must purchase them separately.
Fixed Ethernet ports 6 and 7 from top to bottom. When a power adapter is connected to power connector DC IN 2, fixed Ethernet ports 6 and 7 provide power over the Ethernet cable for other devices that are compatible with the 802.3at standard.PoE on these ports is active and uses LLDP for power negotiation.
Fixed Ethernet ports 4 and 5 from top to bottom.
Fixed Ethernet ports 2 and 3 from top to bottom. If you use the appliance in an NGFW Engine cluster, use fixed Ethernet port 2 for the heartbeat connection between the nodes
Fixed Ethernet ports 1 and 0 from left to right. Ethernet ports 1 and 0 are intended for the WAN connection.
Reset button.
Note: The Reset button functionality is only supported on engine version 7.0.1 or later.
Console port (speed 115,200 bps) and USB port
Power button.

Model N120WL features

The figures and tables show the components and features of the N120WL appliance.

Front panel
This panel has the following parts.

SIM card slot
USB port
Indicators for Ethernet interface port activity and link status
Indicators for status, management (MGMT), high availability (HA), and power over Ethernet (PoE)
Indicators for LTE, wireless LAN (WLAN) connectivity, power (PWR), and disk activity (SSD)

Back panel
This panel has the following parts.

Wireless LAN antenna connectors
Grounding point
Power connector DC IN 1 — Provides 12V DC power for the appliance.
Power connector DC IN 2 — Optionally provides 54V DC power for the power over Ethernet (PoE) ports.
Note: PoE is an optional feature. A power adapter and power cable for PoE are not included with the delivery. To use PoE, you must purchase them separately.
Fixed Ethernet ports 6 and 7 from top to bottom. When a power adapter is connected to power connector DC IN 2, fixed Ethernet ports 6 and 7 provide power over the Ethernet cable for other devices that are compatible with the 802.3at standard. PoE on these ports is active and uses LLDP for power negotiation.
Fixed Ethernet ports 4 and 5 from top to bottom.
Fixed Ethernet ports 2 and 3 from top to bottom. If you use the appliance in an NGFW Engine cluster, use fixed Ethernet port 2 for the heartbeat connection between the nodes.
Fixed Ethernet ports 1 and 0 from left to right. Ethernet ports 1 and 0 are intended for the WAN connection.
Reset button.
Note: The Reset button functionality is only supported on engine version 7.0.1 or later.
Console port (speed 115,200 bps) and USB port
Power button.

Side panel
This panel has the following parts.

LTE antenna connector (two on each side)

Important
There are vents on the sides of the appliance. Keep other objects at least 100mm (4 inches) away from the appliance to ensure good air flow. Do not stack appliances.

Model N120L and N125L features

The figures and tables show the components and features of the N120L and N125L appliance.

Front panel
This panel has the following parts.

SIM card slot
USB port
Indicators for Ethernet interface port activity and link status
Indicators for status, management (MGMT), high availability (HA), and power over Ethernet (PoE)
Indicators for LTE/5G signal strength, power (PWR) and disk activity (SSD)

Back panel
This panel has the following parts.

Grounding point
Power connector DC IN 1 — Provides 12V DC power for the appliance.
Power connector DC IN 2 — Optionally provides 54V DC power for the power over Ethernet (PoE) ports.
Note: PoE is an optional feature. A power adapter and power cable for PoE are not included with the delivery. To use PoE, you must purchase them separately.
Fixed Ethernet ports 6 and 7 from top to bottom. When a power adapter is connected to power connector DC IN 2, fixed Ethernet ports 6 and 7 provide power over the Ethernet cable for other devices that are compatible with the 802.3at standard. PoE on these ports is active and uses LLDP for power negotiation.
Fixed Ethernet ports 4 and 5 from top to bottom.
Fixed Ethernet ports 2 and 3 from top to bottom. If you use the appliance in an NGFW Engine cluster, use fixed Ethernet port 2 for the heartbeat connection between the nodes.
Fixed Ethernet ports 1 and 0 from left to right. Ethernet ports 1 and 0 are intended for the WAN connection.
Reset button.
Note: The Reset button functionality is only supported on engine version 7.0.1 or later.
Console port (speed 115,200 bps) and USB port
Power button.

Side panel
This panel has the following parts.

LTE antenna connector (two on each side)

Important
There are vents on the sides of the appliance. Keep other objects at least 100mm (4 inches) away from the appliance to ensure good air flow. Do not stack appliances.

Indicator lights

Indicator lights show the status of the appliance and any fixed Ethernet ports.

Indicator| Color| Description|
---|---|---|---
Activity/| Unlit| No link.|
link status

light for

|
Green| Link OK. Flashes on activity.|
each| | |
Ethernet| | |
port| | |
(Activity)| | |
Indicator| Color| Description
---|---|---
Link speed light for each Ethernet port (Link)| Unlit| 10 Mbps link.
Amber| 100 Mbps link.
Green| 1 Gbps link.
Status| Unlit| The initial configuration has not yet been generated.
Amber| Flashes while initial contact is being established. Steady amber when initial contact has been established, but the NGFW Engine is offline.

Alternates with green when the NGFW Engine is in the standby state.

Green| Flashes when initial contact is established, but a policy has not been installed. Steady green when the NGFW Engine is online.
MGMT| Unlit| The NGFW Engine has made initial contact but no policy is yet installed.
Green| Flashes when the NGFW Engine tries to make initial contact or when the NGFW Engine is reconnecting to the Log Server. Steady green when initial contact with the Management Server has been made, the management connection has been established, and a policy has been installed.
HA| Unlit| The NGFW Engine does not have a clustering configuration.
Green| The NGFW Engine has a clustering configuration.
PoE| Unlit| There is no power feed to any of the Ethernet ports that support power over Ethernet (PoE).
Green| Power feed is active on at least one of the Ethernet ports that support PoE.
LTE/5G (N120WL, N120L

and N125L

only)

| Unlit| There is no LTE/5G connection.
Amber| The signal strength of the LTE/5G connection is weak.
Amber and Green| The signal strength of the LTE/5G connection is medium
Green| The signal strength of the LTE/5G connection is good.
WLAN (N120W

and N120WL

only)

| Unlit| No WLAN access point is available for clients to connect to.

Note: This indicator is not available in N120L appliance.

Green| A WLAN access point is available for clients to connect to.

Note: This indicator is not available in N120L appliance.

Ethernet port indicators

Ethernet port indicators show the status and speed of the network ports.

Activity/link indicator
Link speed indicator

Indicator	Color	Description
Activity/link indicator	Green	Steady when link is present. Flashes on

Precautions
The precautions provide safety guidance when working with Forcepoint appliances and electrical equipment

CAUTION
Forcepoint appliances cannot be serviced by end users. Never open the appliance covers for any reason. Doing so can lead to serious injury and void the hardware warranty. For additional safety information, see the Forcepoint Product Safety and Regulatory Compliance Guide.

General safety precautions
Read the safety information and follow these rules to ensure general safety whenever you are working with electronic equipment.

Keep the area around the appliance clean and free of clutter.
Use a regulating uninterruptible power supply (UPS) to keep your system operating during power failures and to protect the appliance from power surges and voltage spikes.
If you need to turn off or unplug the appliance, always wait at least five seconds before turning on or plugging in the appliance again.

Operating precautions
Follow these precautions when operating the appliance.

Do not open the power adapter casing. Only the manufacturer’s qualified technician can access and service power adapters.
For this specific appliance model, it is recommended to use the power supply that is shipped with the appliance or additional spare unit from Forecepoint.

WLAN precautions for models N120W and N120WL
Data traffic by a wireless connection might allow unauthorized third parties to receive data. Take the necessary steps to secure your radio network.

See https://www.wi-fi.org for information about securing your WLAN.

Restrictions and requirements might apply for authorizing wireless devices. Check with your local authorities for additional information.

Electrical safety precautions
Follow basic electrical safety precautions to protect yourself from harm and the appliance from damage.

Know the locations of the power on/off button and the emergency turn-off switch, disconnection switch, or electrical outlet for the room. If an electrical accident occurs, you can quickly turn off power to the system.
When working with high-voltage components, do not work alone.
When working with electrical equipment that is turned on, use only one hand. This is to avoid making a complete circuit, which causes an electric shock. Use extreme caution when using metal tools, which can easily damage any electrical components or circuit boards the tools come into contact with.
Do not use mats designed to decrease electrostatic discharge as protection from electric shock. Instead, use rubber mats that have been designed as electrical insulators.
If the power supply cable includes a grounding plug, the plug must be plugged into a grounded electrical outlet.
Use only the power cable or cables supplied with the appliance.
Outdoor devices connected to the appliance must be placed on the same building as where the appliance is located. The devices must also be installed so they are protected from lightning strikes, for example under a roof.

Note
Standby power is supplied to the appliance even when the appliance is turned off.

AC power supply safety precautions
The appliance power inlet is the disconnect device on the appliance.

Install the appliance

There are several tasks that must be completed before the appliance is installed.

These tasks and the installation of the appliance might be done by the same person or by different persons:

The Security Management Center (SMC) administrator is responsible for the tasks that are needed before the appliance is installed.
The on-site installer is responsible for installing the appliance. For more information, see the Forcepoint Next Generation Firewall Installation Guide.

To prepare for the appliance installation, the SMC administrator must do the following:

If the SMC has not yet been installed, install the SMC.
Important: Do not install the SMC on the NGFW appliance. The SMC can manage many NGFW appliances.
In the Management Client component of the SMC, create and configure the NGFW Engine element that represents the appliance.
In the Management Client component of the SMC, save the initial configuration.

The SMC administrator must either:

Upload the initial configuration to the Installation Server for plug-and-play configuration of the appliance.
Note: There are additional requirements for plug-and play configuration. See Knowledge Base article 9662.
Give the on-site installer a USB drive that contains an initial configuration file for each appliance.

The on-site installer must do the following:

Inspect the appliance, delivery box, and all components included in the shipment.
Important
Do not use damaged appliances or components.
Connect all necessary power, network cables and other components, and then press the power button to turn on the appliance.
If the plug-and-play configuration method is not used, the on-site installer must insert the USB drive that contains the initial configuration files to configure the NGFW Engine software to an USB port before the appliance is turned on. By default, only one power supply is shipped with the appliance. However, an additional power supply can be ordered and connected for redundancy. Power supply monitoring is automatically enabled when the appliance is powered on using two power adapters. When power supply monitoring is enabled and only one power supply is present, a warning is provided in SMC engine info status pane.
When you have finished installing the appliance, inform the SMC administrator so that the administrator can check the status of the appliance in the Management Client.

Insert a SIM card for models N120WL, N120L and N125L
To use the LTE modem in N120WL, N120L and N125L models, you must insert a separately purchased SIM card into the appliance.

Before you begin
Before you insert or replace a SIM card, turn off the appliance. The SIM card must be a Nano-SIM card. Full-sized SIM cards, Mini-SIM cards, and Micro-SIM cards are not supported.

Note
To use the mobile connection for plug-and-play configuration, make sure that the PIN code query is disabled on the SIM card. For more information, see Knowledge Base article 17249.

Steps

To release the SIM card tray, gently push the SIM card tray.
Remove the SIM card tray.
With the SIM card contacts facing down, insert the SMC card into the tray, then gently push the tray back into the SIM card slot.

Attach antennas for models N120W, N120WL, N120L and N125L
Attach the antennas included in the delivery to the appliance.

Before you begin
Before you attach or replace the antennas, you must turn off the appliance.

The following antennas are included with the delivery:

Wireless LAN antennas — 3 pieces, round whip antennas
LTE antennas — 4 pieces, flat whip (only for models N120WL and N120L)

CAUTION
To avoid damaging the antennas or the appliance, makes sure to attach the correct antennas to the correct connectors. Wireless LAN antennas have recessed connectors. LTE antennas have protruding connectors.

Steps

Locate the antennas included in the appliance delivery.
Attach the wireless LAN antennas to the connectors on the back panel of the appliance.
Attach the LTE antennas to the connectors on the side panels of the appliance (only for models N120WL and N120L).
Tighten the knurled nuts at the base of the antennas to secure them firmly to the appliance.
While holding the base of the antennas, position the antennas.

Mount the N120, N120W, N120WL, N120L, or N125L appliance on a wall
You can optionally mount the N120, N120W, N120W, N120L, or N125L appliance on a wall.

Important
There are vents on the sides of the appliance. Keep other objects at least 100mm (4 inches) away from the appliance to ensure good air flow. Do not stack appliances.

Mounting the appliance on a wall has the following requirements:

You can mount the appliance in a horizontal orientation only with the connectors for the cables facing down.
The distance between the holes that you drill for the appliance in the wall must be 120mm (4.7 inches).
Depending on the wall material, you might need to insert nylon plugs into the mounting holes that you drill for the appliance. No nylon plugs are supplied with the appliance.
Two flat undercut screws are required. No screws are supplied with the appliance.

The diameter of the screw heads must be 5.5mm (7/32 inch) and the thickness of the screw heads must be 2mm (5/64 inch). Select screws that are suitable for the wall material and long enough to provide a firm mounting point for the appliance. If you have attached the four provided rubber feet to the bottom of the appliance, make sure that the screws are long enough to provide a firm mounting point for the appliance with the feet attached. Make sure that the heads of the screws fit into the mounting holes on the bottom of the appliance before you drill the mounting holes in the wall.

Steps

Drill two holes 120mm (4.7 inches) apart in the wall in a horizontal orientation. Make sure that you leave enough clearance around the appliance.
If required, insert nylon plugs into the holes.
Insert the two screws into the holes and tighten the screws. Make sure that the screws are protruding from the wall to provide a firm mounting point for the appliance.
Align the mounting holes on the appliance with the screws, then place the appliance on the screws so that the cables are below the appliance. After the appliance is mounted on the wall and you have connected the cables, do not pull on the cables.

CAUTION
If you need to disconnect any cables after the appliance is mounted on the wall, hold the appliance in place while you disconnect the cables.

Connect the cables
Connect the network and power cables. Use at least CAT5e-rated cables for gigabit networks. Network interfaces at both ends of each cable must have identical speed and duplex settings. These settingsinclude the automatic negotiation setting. If one end of the cable uses auto-negotiation, the other end must also use auto-negotiation. Gigabit standards require interfaces to use auto-negotiation. Fixed settings are not allowed at gigabit speeds.

Connect network cables
Ethernet ports are mapped to interface IDs during the initial configuration. Determine which Ethernet ports to use for connecting to your networks.

Steps

Connect network cables to the Ethernet ports. If you use the plug-and-play configuration method for a single NGFW appliance, the appliance uses Ethernet port 0 to contact the Installation Server. If the appliance is a node in an NGFW Engine cluster, connect the cable for the heartbeat connection between the nodes to Ethernet port 2. Web-based NGFW Configuration Wizard runs on port labeled as LAN (port 2).
Connect the cables to the ports that are used for the integrated switch.

Connect the power adapters
Use the power cable to plug in the appliance.

Note
We recommend using a UPS to ensure continuous operation and minimize the risk of damage to the appliance in case of sudden loss of power.

Steps

Attach a suitable power plug for your region to the 12V power adapter for the appliance. Standard power plugs for several regions are included with the delivery.
Connect the 12V power adapter for the appliance to the DC IN power connector on the back of the appliance.
(Optional) To use PoE to provide power for other devices, connect the 54V power adapter for PoE to the DC IN 2 power connector on the back of the appliance.
Note : PoE is an optional feature. A power adapter and power cable for PoE are not included with the delivery. To use PoE, you must purchase them separately.
Plug the power connector or power connectors into a high-quality power strip that offers protection from electrical noise and power surges.

Next steps
To use PoE to provide power for other devices that are compatible with the 802.3at standard, connect the devices to Ethernet ports 6 or 7 on the back of the appliance. Port settings for plug-and-play configuration method If you use the plug-and-play configuration method for a single NGFW appliance, the appliance uses Ethernet port 0 to contact the Installation Server. On the N120WL model, the appliance uses modem interface 0 to contact the Installation Server. If modem interface 0 is not available, Ethernet port 0 is used. To use the mobile connection for plug-and-play configuration, make sure that the PIN code query is disabled on the SIM card. To use the plug-and-play configuration method, the interface that corresponds to Ethernet port 0 in the initial configuration must have a dynamic IPv4 address.

How the integrated switch works
An integrated switch represents the switch functionality on purpose-built Forcepoint NGFW appliances. Integrated switches eliminate the need for an external switch device and reduce costs and clutter. This Forcepoint NGFW appliance has a software-integrated switch. You can configure one or more integrated switches. You can configure one port group on each integrated switch. The Forcepoint NGFW engine does not inspect traffic between ports in the same port group.

Note
You can only use the integrated switch if the appliance has been configured as a Single Firewall. You cannot use the integrated switch as an external switch device without Forcepoint NGFW properly configured and running.

When the Forcepoint NGFW engine is in the initial configuration state and no configuration has been saved to the integrated switch, there are no ports in the integrated switch and the integrated switch does not yet route traffic. After a configuration has been saved, traffic is allowed between ports in the same port group according to the configuration, even if you reboot the appliance. If you turn off the appliance, traffic between the ports in the same port group is interrupted. The last saved port group configuration is automatically applied to the appliance when the appliance is turned on again.

Note
The ports in the integrated switch do not support VLAN tagging or PPPoE. You cannot use ports on the integrated switch as the control interface.

For more information, see the Forcepoint Next Generation Firewall Installation Guide and the Forcepoint Next Generation Firewall Product Guide.

Maintenance

Some Forcepoint NGFW appliances ship with replaceable components.

Restoring appliance settings
You can use one of the following methods to restore the appliance settings to the factory default settings:

Note
Restoring appliance settings does not impact the current software version. The software version will remain as the latest installed version.

To initiate the restore of the appliance settings if the appliance is connected to the management client, do the following:

From the management client in the SMC, select Configuration.
Browse to Engine.
Right-click an engine for which you want to restore the appliance settings to factory default settings.
Select Commands > Reset to Factory Settings.

To initiate and complete the reset without using appliance console, do the following:

Connect to the appliance using SSH.
Run the following CLI command to restore the factory default settings on the engine: sg-clear-all –fast
- To initiate the restore of appliance settings from the local console, select Boot > System restore.
- To initiate restoring of appliance settings by using the Reset button, press and hold the Reset button for few seconds until you can see the red colored power LEDs.

Note

This method can only work, if the appliance is powered on and must have run for at least 2 minutes.
The Reset button is present right next to the Console and USB ports. For example, the Reset button can be pressed by using a small pen tip.
The system restore is ready, when the appliance is set to standby powered state (power off). The standby powered state is indicated by red colored power LEDs.
If the serial console is in use, the following messages are displayed in the console:
Factory default settings restored
reboot : Power down

This indicates that the system restore is completed successfully and is ready to use.

Turn off the appliance
Most Forcepoint NGFW appliance hardware components are not hot-swappable. Turn off the appliance from the NGFW Engine command line.

Tip
The SMC administrator can also turn off the appliance remotely using the Management Client. For more information, see the Forcepoint Next Generation Firewall Product Guide.

Steps

Connect to the NGFW Engine command line. Depending on the appliance type, use one of the following options:
- Connect a computer running a terminal emulator program to the appliance console port, then press Enter.
- Connect using SSH.
  Note: SSH access is not enabled by default.
- Connect a keyboard to a USB port and a monitor to the VGA port, then press Enter.
Enter the logon credentials. The user name is root and the password is the one you set for the appliance.
Enter the following command: halt
Wait until the power indicator light turns red or is unlit, then unplug all power cables from the appliance.

Replace the SIM card for models N120WL, N120L, and N125L
You might need to replace the SIM card for the LTE modem in the models N120WL, N120L, and N125L if you change mobile operators, or if you get a new SIM card from the same mobile operator.

Steps

To release the SIM card tray, gently push the SIM card tray.
Remove the SIM card tray.
Remove the old SIM card from the tray.
With the SIM card contacts facing down, insert the SMC card into the tray, then gently push the tray back into the SIM card slot.
Press the power button to start up the appliance.
If PIN code query is enabled on the new SIM card and the modem interface is used for the management connection, change the PIN code.

Note
If the PIN code for the new SIM card is the same as the PIN code for the old SIM card, it is not necessary to change the PIN code.

Log on to the appliance. The user name is root and the password is the one you set for the appliance.
To start the NGFW Configuration Wizard, enter the following command: sg-reconfigure
In the NGFW Configuration Wizard, enter the PIN code.
To restart the appliance, enter the following command: reboot
In the Management Client, enter the PIN code in the modem interface properties, then refresh the policy on the NGFW Engine.

Note
Tasks in the Management Client are intended to be done by the SMC administrator.

Power over Ethernet
The N120W, N120WL, N120, N120L, and N125L models complies with the PoE+ (802.3at) standard and can provide a maximum power consumption of 25.5 Watts to each of the attached devices.

Compliance information

Forcepoint NGFW appliances that have wireless support are in compliance with certain EU directives and FCC standards for wireless devices intended for home and office use. This information is valid for all dual band products (2.4 GHz, IEEE 802.11b/g/n, and 5 GHz, IEEE 802.11a/n/ac). The supported channels and frequencies are listed by country in the Management Client. The wireless configuration is transferred to the appliance when you install the policy on the NGFW Engine.

EU Directives
This appliance is in compliance with:

EMC directive 2014/30/EU
LVD directive 2014/35/EU
RED directive 2014/53/EU

The frequencies and maximum transmitted power in the EU are:

2.41-2.47 GHz: 18.86 dBm (EIRP)
5.15-5.25 GHz: 21.62 dBm (EIRP)
5.95-6.41 GHz: LPI:20.75 dBm / VLP:11.51dBm (EIRP)

Operations in the 5150-5250 MHz band are restricted to indoor usage only.

FCC Standards
This appliance is in compliance with FCC Part 15.

Applied technologies
The appliance uses these technologies.

Safety — Dual band products
Electromagnetic Compatibility (EMC) — Dual band products

National restrictions and requirements for authorization

These appliances can be operated within FCC DFS2 band or ETSI/EC DFS band, or other countries that regulate or plan to regulate mid-5 GHz band.
The usage of mid-5 GHz band is subject to the regulatory approval alone with the resided devices.
The requirements for any country or area might change. We recommend that you check with your local authorities for the latest status of national requirements for 2.4 GHz and 5 GHz wireless LANs.

Industry Canada statement
This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions:

this device may not cause interference, and
this device must accept any interference, including interference that may cause undesired operation of the device.

This Class B digital apparatus complies with Canadian ICES-003.
This device and its antenna(s) must not be co-located or operating in conjunction with any other antenna or transmitter, except tested built-in radios.
The County Code Selection feature is disabled for products marketed in the US/ Canada.

This radio transmitter (identify the device by certification number) has been approved by Industry Canada to operate with the antenna types listed below with the maximum permissible gain indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device.

List of antenna information	Peak EIRP
Components	Frequency (MHz)

Radiation Exposure Statement:
This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.

Caution:

the device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems
for devices with detachable antenna(s), the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits as appropriate;
Operation of transmitters in the 5.925-7.125GHz band is prohibited for control of or communications with unmanned aircraft systems.

Federal Communication Commission Interference Statement

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

This device may not cause harmful interference, and
this device must accept any interference received, including interference that may cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.

FCC Caution:

Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate this equipment.
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
Operation of transmitters in the 5.925-7.125GHz band is prohibited for control of or communications with unmanned aircraft systems.

Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.

Note
The country code selection is for non-US model only and is not available to all US model. Per FCC regulation, all WiFi product marketed in US must fixed to US operation channels only.

Forcepoint and the FORCEPOINT logo are trademarks of Forcepoint. All other trademarks used in this document are the property of their respective owners. Published 21 June 2023

FAQ

Q: Is PoE included with the delivery?
A: PoE is an optional feature. A power adapter and power cable for PoE are not included with the delivery. To use PoE, you must purchase them separately

Q: What are the fixed Ethernet ports used for on the N120W model?
A: The fixed Ethernet ports on the N120W model are used for various connections, including providing power over Ethernet for compatible devices following the 802.3at standard.

Forcepoint Next Generation Firewall Hardware Guide

Product Information

Product Usage Instructions

Introduction

Model N120 features

Model N120W features

Model N120WL features

Model N120L and N125L features

Indicator lights

Ethernet port indicators

Install the appliance

Maintenance

Compliance information

FAQ

References

Read User Manual Online (PDF format)

Download This Manual (PDF format)

Related Manuals