> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Forcepoint NGFW

> Connect a Forcepoint NGFW to Myrmex over SSH — create the access account and add the integration.

import { Note, Steps, Step, CardGroup, Card, Tip } from '@mintlify/components';

Connect your **Forcepoint NGFW** so Myrmex can read its configuration in real time, audit its hardening, review your policies, and help with operations. Myrmex reaches the engine over **SSH** through a [Collector](/documentation/agent-endpoint-security/collector-mode) on your network.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Read & troubleshoot" icon="magnifying-glass">
    Inspect engine status, interfaces, routing, sessions, and policy state — read-only diagnostics, on demand.
  </Card>

  <Card title="Hardening audit" icon="shield-halved">
    Run a [Security Posture](/documentation/security-posture/overview) audit against the engine configuration.
  </Card>

  <Card title="Policy review" icon="broom">
    Review access rules and NAT policies and surface unused or overly broad entries.
  </Card>

  <Card title="Operations support" icon="floppy-disk">
    Help document and — on approval — apply operational changes.
  </Card>
</CardGroup>

## Before You Start

* A **Collector** deployed on a network that can reach the engine's management IP over SSH. See [Deploying the agent](/documentation/agent-endpoint-security/installation).
* **SSH access enabled** on the engine (Forcepoint NGFW engines are managed from the Security Management Center).
* An **account** Myrmex can use to log in over SSH.

## Step 1 — Create the Access Account on Forcepoint

<Steps>
  <Step title="Enable SSH on the engine">
    In the Security Management Center (Management Client), open the engine's properties and enable SSH access for the node so the Collector can connect.
  </Step>

  <Step title="Set the login credentials">
    Ensure the engine has an account with command-line access and set a strong password for it.
  </Step>

  <Step title="Note the credentials">
    Record the **username** and **password** — you'll enter them in Myrmex. Disable SSH again in the SMC when it is no longer needed.
  </Step>
</Steps>

<Tip>
  Restrict SSH on the engine to the Collector's address so only Myrmex can reach the command line.
</Tip>

## Step 2 — Add the Integration in Myrmex

From the **Directory**, choose **Add Integration → Forcepoint Firewall**, then fill in:

| Field             | Description                                                                                           |
| ----------------- | ----------------------------------------------------------------------------------------------------- |
| **Name**          | A unique name for this engine.                                                                        |
| **Description**   | Optional note to identify the device.                                                                 |
| **IP / Hostname** | The engine management IP or hostname the Collector can reach.                                         |
| **SSH Port**      | The SSH port (default `22`).                                                                          |
| **Username**      | The account username created in Step 1.                                                               |
| **Password**      | That account's password.                                                                              |
| **Model**         | Select your Forcepoint NGFW model series.                                                             |
| **Version**       | Select the software version (or **Other**).                                                           |
| **Collector**     | The [Collector](/documentation/agent-endpoint-security/collector-mode) that opens the SSH connection. |

## Connect

Click **Connect** to validate the SSH connection and finish. The engine then appears under **Environment → Integrations**, and you can start asking the AI about it in the Workspace.