Forcepoint V10000 Appliance Upgrade Manual
  1. Manuals
  2. Brands
  3. Forcepoint Manuals
  4. Firewall
  5. V10000
  6. Appliance upgrade manual

Forcepoint V10000 Appliance Upgrade Manual

V-series, triton ap-web, triton ap-email, web filter & security
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
V - S e r i e s A p p l i a n c e U p g r a d e G u i d e
TRITON AP-WEB, TRITON AP-EMAIL, Web Filter & Security
Models: V10000, V5000
U pg r a de s f r o m 7 . 6 . x
through 8.3.x

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the V10000 and is the answer not in the manual?

Questions and answers

Related Manuals for Forcepoint V10000

Summary of Contents for Forcepoint V10000

  • Page 1 V - S e r i e s A p p l i a n c e U p g r a d e G u i d e TRITON AP-WEB, TRITON AP-EMAIL, Web Filter & Security Models: V10000, V5000 U pg r a de s f r o m 7 . 6 . x...
  • Page 2 Forcepoint LLC Every effort has been made to ensure the accuracy of this manual. However, Forcepoint LLC, makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose. Forcepoint LLC, shall not be liable for any error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the examples herein.
  • Page 3 Contents Upgrading V-Series Appliances........1 Chapter 1 Upgrading V-Series appliances from v7.6.x to 7.7.x .
  • Page 4 Contents Upgrading V-Series appliances from v7.8.x, 8.0.x, or 8.1.x to v8.2.x..60 Estimates of time to complete upgrade ......62 Pre-upgrade activities .
  • Page 5 Upgrading V-Series Appliances In this guide: ● page Upgrading V-Series appliances from v7.8.4, 8.0.x, 8.1.x, or v8.2.x to 8.3.x, ● page 60 Upgrading V-Series appliances from v7.8.x, 8.0.x, or 8.1.x to v8.2.x, ● page 49 Upgrading V-Series appliances from v7.8.x or 8.0.x to 8.1.x, ●...

  • Page 6: Chapter 1 Upgrading V-Series Appliances

    Internet. Upgrading does not repair a non- functional system. Important Forcepoint V5000 G2R2 Appliance customers may encounter a memory shortage after upgrading to version 8.2 or later. This issue is the result of newer versions of software requiring additional memory, and was only captured under a very heavy load.
  • Page 7 Upgrading V-Series Appliances Follow the steps in the Deployment and Installation Center that are prescribed for each solution or combination of solutions. Upgrading V-Series Appliances ...

  • Page 8: Table Of Contents

    ● Email Security Gateway and Email Security Gateway Anywhere ● V10000 G1*, V10000 G2, and V5000 G2, V10000 G3 *The latest version available for the V10000 G1 appliance is 7.7.3. No later versions are planned for the V10000 G1 appliance.

  • Page 9: V-Series Appliance Upgrade Guide | Upgrades To V7.7.X

    V5000 G2 V5000 G2 Web Security Gateway 30 minutes filtering only The following provides a basic sample scenario: Approximate total upgrade time, beginning to end, for all upgrade tasks: ● 1 Dual mode V10000 G2 appliance Upgrading V-Series Appliances ...

  • Page 10: Estimates Of Time To Complete

    Upgrading V-Series Appliances ● 2 Windows R2 2008 servers: 1 for the TRITON console, 1 for Web and Email Log Server Approximately 3 to 4 hours The download speed for each patch that you’re going to apply depends on your network environment and can vary significantly.
  • Page 11 Upgrading V-Series Appliances Back up appliance configuration and settings Perform a full appliance configuration backup: 1. Log on to Appliance Manager and go to Administration > Backup Utility. 2. Under Perform Backup, select Full Appliance Configuration as the backup type. 3.
  • Page 12 Upgrading V-Series Appliances In this case, record your Network Agent settings (configured in TRITON - Web Security) before performing the upgrade. Go to the Local Settings page for each Network Agent instance (Settings > Network Agent > agent_IP_address) and record all of its settings.

  • Page 13: Upgrade

    Click Upload. After a few seconds, the upgrade is listed in the Available patches list. This is an efficient method when your deployment has many appliances because the download from Forcepoint occurs only once. Other appliances can upload the patch from the local location. Upgrading V-Series Appliances...

  • Page 14: Upgrading Multiple V-Series Appliances

    Upgrading V-Series Appliances 7. Click Install to apply the upgrade. Important When patch installation begins, a dialog box indicates that the patch will take 5 to 10 minutes to apply. This is incorrect. The time is significantly longer. See Estimates of page time to complete upgrade,...
  • Page 15 Upgrading V-Series Appliances If the appliance includes Web Security mode It is a best practice to upgrade the Full policy source appliance first, then the User directory and filtering, then Filtering only appliances, and finally the off-appliance TRITON components. Best practice for upgrade sequence if Full policy source is on V-Series appliance Follow this sequence whether the Full policy source is a Web mode (only) or Web and Email mode appliance.

  • Page 16: Activities

    Upgrading V-Series Appliances 2. On that secondary appliance, in the V-Series console, navigate to Configuration > Web Security Components. 3. For Policy Source, select Full policy source. Save the setting. 4. Upgrade this appliance to version 7.7.x. The appliance automatically restarts when the upgrade finishes.
  • Page 17 Upgrading V-Series Appliances If you are upgrading to version 7.7.3, see the Content Gateway Release Notes information about enhancements and changes in version 7.7.3. Verify Network Agent settings If you had to record your Network Agent settings prior to upgrade (Network Agent page 6), restore them after the TRITON console has been upgraded.

  • Page 18: Upgrading V-Series Appliances From V7.7.X To 7.8.1

    ● Web Security, Web Security Gateway, and Web Security Gateway Anywhere ● Email Security Gateway and Email Security Gateway Anywhere ● V10000 G2 and G3 and V5000 G2 appliances Note For an overview of this upgrade process, see the support...

  • Page 19: Estimates Of Time To Complete Upgrade

    The following provides a basic sample scenario: Approximate total upgrade time, beginning to end, for all upgrade tasks: ● 1 Dual mode V10000 G2 appliance ● 2 Windows R2 2008 servers: 1 for the TRITON console, 1 for Web and Email Log Server Approximately 5.5 to 6 hours...

  • Page 20: Preparing For The Appliance Upgrade

    Upgrading V-Series Appliances ● 40 to 60 minutes to run the installer to upgrade on the TRITON management server and the Log Server host ● 5 minutes to restart the Windows servers and verify that the upgrade was successful Service disruption during upgrade Appliance services are disrupted while the upgrade is applied and until the appliance finishes automatically restarting twice.
  • Page 21 Upgrading V-Series Appliances 2. Select the Websense Content Gateway module and then Download entire log file. 3. Click Submit and specify a location to save the file. Policy databases and TRITON databases are not affected by the upgrade. Content Gateway Integrated Windows Authentication (IWA) settings The upgrade process backs up and restores the IWA configuration, preserving the pre- existing domain memberships (joins).
  • Page 22 Upgrading V-Series Appliances ● Use this NIC to monitor traffic ● Monitor List ● Monitor List Exceptions Save your record where you can easily access it when the upgrade is complete Administrator accounts Make sure the administrator accounts authenticated by a directory service have an email address specified in the directory service.

  • Page 23: Upgrade Instructions

    Upgrading V-Series Appliances Integration mode If you are using Web Security (no Gateway) appliances, make sure your integration mode is one of these supported modes: ● Stand-alone (Network Agent only) ● Microsoft TMG ● Citrix ● Cisco ASA Upgrade instructions V-Series Appliance Upgrade Guide | Upgrades to v7.8.1 Important V-Series appliance services are not available while the...
  • Page 24 Ready to install. If you have several appliances and do not want to download the hotfix from www.forcepoint.com multiple times, you can use the Save to network location link to copy the downloaded hotfix to a convenient location on your network, and then, on each appliance, use the Upload Hotfix Manually button to upload the file to the appliance.
  • Page 25 As an alternative to steps 8, 9, and 10, the patch can be downloaded from www.forcepoint.com and uploaded to the appliance. a. Go to My Account (formerly MyWebsense) and select the Downloads tab.

  • Page 26: Upgrading Multiple V-Series Appliances

    Upgrading V-Series Appliances 15. After the appliance has automatically restarted twice, log on to the Appliance manager, and go to Administration > Patches/Hotfixes > Patches tab. Under Patch History, for version 7.8.1, it should say “Upgrade Succeeded” in the Comments section. In the Appliance manager, you can also check the appliance version number by going to the Configuration >...
  • Page 27 Upgrading V-Series Appliances If the appliance includes Web Security mode It is a best practice to upgrade the Full policy source appliance first, then the User directory and filtering, then Filtering only appliances, and finally the off-appliance TRITON components. Best practice for upgrade sequence if Full policy source is on V-Series appliance Follow this sequence whether the Full policy source is a Web mode (only) or Web and Email mode appliance.

  • Page 28: Post-Upgrade Activities

    Upgrading V-Series Appliances 3. Upgrade this appliance to version 7.8.1. The appliance automatically restarts when the upgrade is done. After the original Full policy source appliance has been upgraded, replaced, or re-imaged, change the upgraded temporary Full policy source machine to point to the original Full policy source again for its policy information.
  • Page 29 Upgrading V-Series Appliances Verify Network Agent settings If you had to record your Network Agent settings prior to upgrade (Network Agent page 16), restore them after the TRITON console has been upgraded. settings, 1. Log on to the Web Security manager. 2.

  • Page 30: To 7.8.4

    TRITON components and platforms: ● Web Security, Web Security Gateway, and Web Security Gateway Anywhere ● Email Security Gateway and Email Security Gateway Anywhere ● V10000 G2 and G3 and V5000 G2 appliances Important V10000 G4 and V5000 G3 appliances running 7.8.1, 7.8.2, or 7.8.3 cannot be upgraded to a higher version of...
  • Page 31 Upgrading V-Series Appliances To upgrade To this version Step One Step Two Step Three from 7.7.x 7.8.3 Apply HF 90 Upgrade to 7.8.1 Upgrade to 7.8.3 7.7.x 7.8.4 Apply HF 90 Upgrade to 7.8.1 Upgrade to 7.8.4 7.8.1 7.8.4 Upgrade to 7.8.4 7.8.2 7.8.4 Upgrade to 7.8.4...

  • Page 32: Estimates Of Time To Complete Upgrade

    The following provides a basic sample scenario: Approximate total upgrade time, beginning to end, for all upgrade tasks: ● 1 Dual mode V10000 G2 appliance ● 2 Windows R2 2008 servers: 1 for the TRITON console, 1 for Web and Email Log...

  • Page 33: Preparing For The Appliance Upgrade

    Upgrading V-Series Appliances ● 10 minutes to back up the V-Series appliance ● 70 to 90 minutes for the patch to perform the upgrade ● 10 minutes to restart the V-Series and verify that the upgrade was successful ● 20 minutes to download the version 7.8.x TRITON Unified Installer ●...
  • Page 34 Upgrading V-Series Appliances Content Gateway logs If the appliance hosts Web Security Gateway (Anywhere), during the upgrade, depending on their size, older Content Gateway logs may be automatically removed by the upgrade procedure to make room for the new version. To ensure that all Content Gateway logs are retained, you can download the Content Gateway logging directory.

  • Page 35: Upgrade Instructions

    Upgrading V-Series Appliances ● Port Monitoring ● Ignore Port ● Debug Setting NIC Configuration settings (from the Settings > Network Agent > NIC Configuration page for each NIC) are also not preserved: ● Use this NIC to monitor traffic ● Monitor List ●...
  • Page 36 (7.8.2, 7.8.3, or 7.8.4) should be listed in the Table of available patches. If it’s not, click Check for Patches. The patch should be listed as available. Alternatively, the patch can be downloaded from www.forcepoint.com and uploaded to the appliance. a. Go to My Account (formerly MyWebsense) and select the Downloads tab.

  • Page 37: Upgrading Multiple V-Series Appliances

    Upgrading V-Series Appliances successfully” in the Comments section. In the Appliance manager, you can also check the appliance version number by going to the Configuration > System page and looking under System Information. On the Configuration > System page, you can also confirm and adjust, if necessary, the Time and Date settings, paying particular attention to the time zone setting.
  • Page 38 Upgrading V-Series Appliances 3. After all appliances have been upgraded, upgrade off-box components. Best practice for upgrade sequence if Full policy source is not on V-Series appliance If you have multiple V-Series appliances and the policy source (Policy Broker and Policy Server) is located off-appliance: 1.

  • Page 39: Post-Upgrade Activities

    Upgrading V-Series Appliances 4. Use the version 7.8.x installer to upgrade remaining off-appliance components. Upgrading Websense Web Security Solutions for instructions. To see all upgrade instructions go to Upgrading V-Series appliances from v7.8.1 to page 7.8.2 and from v7.8.1, v7.8.2 or 7.8.3 to 7.8.4, Post-upgrade activities V-Series Appliance Upgrade Guide | Upgrades to v7.8.x...
  • Page 40 Upgrading V-Series Appliances ■ Web Security Release Notes ■ Content Gateway Release Notes ■ Email Security Gateway Release Notes For the 7.8.4 release, please review the release notes below. ■ Web Security Release Notes ■ Content Gateway Release Notes ■ Email Security Gateway Release Notes Verify Network Agent settings If you had to record your Network Agent settings prior to upgrade...

  • Page 41: Upgrading V-Series Appliances From V7.8.X To 8.0.X

    Important Not all models of V-Series appliances support version 8.0.x. Older V10000 G2 and V5000 G2 appliances, known as revision 1 (or R1) appliances are not supported with version 8.0.0 and higher. Forcepoint stopped shipping these models: ● V10000 G2 R1 Third quarter, 2011 ●...
  • Page 42 Upgrading V-Series Appliances The table lists the various upgrade paths to version 8.0.x. The table also includes the path for upgrading from version 7.7.x to 7.8.1. You must upgrade to version 7.8.1 (or later) before upgrading to version 8.0.x: To upgrade To this version Step One Step Two...

  • Page 43: V-Series Appliance Upgrade Guide | Upgrades To V8.0.X

    The table below provides estimates of the time needed for the 8.0.0 patch to be installed on an appliance. The amount of time varies, as indicated. Not all V-Series configurations are shown. System Configuration Elapsed time V10000 Dual mode: 50 - 70 minutes Web Security Gateway (now TRITON AP-WEB) Full policy source...
  • Page 44 The following provides a basic sample scenario: Approximate total upgrade time, beginning to end, for all upgrade tasks: ● 1 Dual mode V10000 appliance ● 2 Windows R2 2008 servers: 1 for the TRITON Manager, 1 for Web and Email...

  • Page 45: Preparing For The Appliance Upgrade

    Upgrading V-Series Appliances Service disruption during upgrade Appliance services are disrupted while the upgrade is applied and until the appliance completes restarting. See page Estimates of time to complete upgrade, Note Service is not disrupted while the off-box components are upgraded.
  • Page 46 Upgrading V-Series Appliances Content Gateway Integrated Windows Authentication (IWA) settings IWA domain joins should be preserved through the upgrade process. However, in the event that the IWA domain joins are dropped during the upgrade, make a record of the settings in advance. Log on to Content Gateway and record the IWA settings, including the names of domains to which IWA is joined.

  • Page 47: Upgrade Instructions

    8.0.x should be listed in the Table of available patches. If it’s not, click Check for Patches. The patch should be listed as available. Alternatively, the patch can be downloaded from www.forcepoint.com and uploaded to the appliance. a. Go to My Account (formerly MyWebsense) and select the Downloads tab.
  • Page 48 This is an efficient method when your deployment has many appliances because the download from Forcepoint occurs only once. Other appliances can upload the patch from the local location. 7. Click Install to apply the upgrade. Note that patch installation may take significantly longer than warned.

  • Page 49: Instructions

    Upgrading V-Series Appliances Upgrading multiple V-Series appliances V-Series Appliance Upgrade Guide | Upgrades to v8.0.x When multiple V-Series appliances are deployed in the same network, it is very important that they be upgraded in the prescribed order. If the appliance is an Email mode (only) appliance Apply the upgrade patch for the version you want before upgrading the off-appliance components.

  • Page 50: Post-Upgrade Activities

    Upgrading V-Series Appliances If the Full policy source appliance is down or unavailable Best practice is to upgrade the Full policy source appliance first, then the User directory and filtering, then Filtering only appliances, and finally the off-appliance TRITON components. However, if your site must upgrade a User directory and filtering or Filtering only appliance before the Full policy source appliance, or if your Full policy source appliance is unavailable, is being replaced, or is being re-imaged, then set a User...

  • Page 51: Activities

    For more information about how these changes may affect you, or to change the add-on modules activated by your subscription, contact your sales partner or Forcepoint Sales representative. Depending on the solutions installed on your appliances, after upgrade perform the following: ●...
  • Page 52 Upgrading V-Series Appliances Email Security Gateway (TRITON AP-EMAIL) users may be interested in the on-premises secure message delivery feature, providing a secure portal in which an organization’s customers may view, send, and manage email that contains sensitive information. Email Security Gateway Anywhere users will be interested in the phishing detection and education feature, part of the TRITON File Sandbox (formerly ThreatScope) add-on functionality.
  • Page 53 Upgrading V-Series Appliances ● If Filtering Service is unavailable ● Proxies and Caches ● Port Monitoring ● Ignore Port ● Debug Setting Also, check the Settings > Network Agent > NIC Configuration page for each NIC: ● Use this NIC to monitor traffic ●...

  • Page 54: Upgrading V-Series Appliances From V7.8.X Or 8.0.X To 8.1.X

    Post-upgrade activities, Important Not all V-Series models support versions 8.x. Older V10000 G2 and V5000 G2 appliances, known as revision 1 (or R1) appliances are not supported with version 8.0.0 and higher. Websense stopped shipping these models: ● V10000 G2 R1 Third quarter, 2011 ●...
  • Page 55 Upgrading V-Series Appliances The table lists the upgrade paths to version 8.1.x. The table also includes the path for upgrading from version 7.7.x to 7.8.1. You must upgrade to version 7.8.1 (or later) before upgrading to version 8.1.x: To upgrade To this version Step One Step Two...
  • Page 56 Upgrading V-Series Appliances Important If you have multiple appliances, and: ● They are running version 7.8.1 or 7.8.2 ● And, you plan to download the upgrade patch and then upload it to other appliances You need to apply hotfix 10 before you upload the upgrade patch.

  • Page 57: Estimates Of Time To Complete Upgrade

    The following provides a basic sample scenario: Approximate total upgrade time, beginning to end, for all upgrade tasks: ● 1 Dual mode V10000 appliance ● 2 Windows 2012 servers: 1 for the TRITON Manager, 1 for Web and Email Log...

  • Page 58: Preparing For The Appliance Upgrade

    Upgrading V-Series Appliances ● 10 minutes to back up the V-Series appliance ● 60 to 70 minutes for the patch to perform the upgrade and to verify that the upgrade was successful ● 20 minutes to download the version 8.1.x TRITON Unified Installer ●...

  • Page 59: Upgrade Instructions

    Upgrading V-Series Appliances Content Gateway logs If the appliance hosts TRITON AP-WEB (Web Security Gateway / Anywhere), during the upgrade, depending on their size, older Content Gateway logs may be automatically removed by the upgrade procedure to make room for the new version. To ensure that all Content Gateway logs are retained, you can download the Content Gateway logging directory.
  • Page 60 Administration > Patches/Hotfixes > Patches tab. The upgrade patch for version 8.1.x should be listed in the Table of available patches. If it’s not, click Check for Patches. The patch should be listed as available. Alternatively, the patch can be downloaded from www.forcepoint.com and uploaded to the appliance. Important If you are upgrading from 7.8.1 or 7.8.2, you need to apply...

  • Page 61: Upgrading Multiple V-Series Appliances

    Upgrading V-Series Appliances If the subscription agreement is not displayed within 60 seconds, close and re-open the browser, return to the Patches / Hotfixes > Patches page, and initiate the patch installation again. Note that patch installation may take significantly longer than warned. See page Estimates of time to complete upgrade,...
  • Page 62 Upgrading V-Series Appliances If the appliance is an Email mode (only) appliance Apply the upgrade patch for the version you want before upgrading the off-appliance components. If the appliance includes a Web protection mode It is a best practice to upgrade the Full policy source appliance first, then the User directory and filtering, then Filtering only appliances, and finally the off-appliance TRITON components.

  • Page 63: Post-Upgrade Activities

    Upgrading V-Series Appliances appliance is unavailable, is being replaced, or is being re-imaged, then set a User directory and filtering or Filtering only appliance (temporarily) to be the Full policy source. To do this: 1. Back up the Full backup file of the User directory and filtering or Filtering only appliance in case changing the policy source fails.
  • Page 64 For more information about how these changes may affect you, or to change the add-on modules activated by your subscription, contact your sales partner or Forcepoint Sales representative. Depending on the solutions installed on your appliances, after upgrade perform the following: ●...

  • Page 65: Upgrading V-Series Appliances From V7.8.X, 8.0.X, Or 8.1.X To V8.2.X

    68 Post-upgrade activities, This upgrade process applies to the following TRITON solutions and platforms: ● V10000 and V5000 appliances; see V-Series appliances supported with v8.x a list of supported models ● TRITON AP-WEB and Web Filter & Security ● Web Security, Web Security Gateway, and Web Security Gateway Anywhere ●...

  • Page 66: Version

    Upgrading V-Series Appliances The table lists the upgrade paths to version 8.2.x. The table also includes the path for upgrading from version 7.7.x to 7.8.1. You must upgrade to version 7.8.1 (or later) before upgrading to version 8.2.x: upgrade To this from version Step One...

  • Page 67: Estimates Of Time To Complete Upgrade

    The following provides a basic sample scenario: Approximate total upgrade time, beginning to end, for all upgrade tasks: ● 1 Dual mode V10000 appliance ● 2 Windows 2012 servers: 1 for the TRITON Manager, 1 for Web and Email Log...

  • Page 68: Pre-Upgrade Activities

    Upgrading V-Series Appliances ● 10 minutes to back up the V-Series appliance ● 60 to 70 minutes for the patch to perform the upgrade and to verify that the upgrade was successful ● 20 minutes to download the version 8.2.x TRITON Unified Installer ●...

  • Page 69: Upgrade Instructions

    In versions 7.8.1 and later, an email address is required for each administrator account (except group accounts). Content Gateway changes See the Forcepoint Web Protection Release Notes for information about enhancements and changes in version 8.2.0. Upgrade instructions V-Series Appliance Upgrade Guide | Upgrades to v8.2.x...
  • Page 70 8.2.x should be listed in the Table of available patches. If it’s not, click Check for Patches. The patch should be listed as available. Alternatively, the patch can be downloaded from www.forcepoint.com and uploaded to the appliance. a. Go to My Account (formerly MyWebsense), and select the Downloads tab.

  • Page 71: Upgrading Multiple V-Series Appliances

    Upgrading V-Series Appliances 11. A confirmation message tells you that during the upgrade you are logged out of the Appliance manager and the appliance restarts. Click OK to begin the upgrade. While the upgrade is performed, services are unavailable to users. 12.
  • Page 72 Each time the upgrade completes on an appliance, the appliance automatically restarts. 3. Sequentially apply the upgrade to all Filtering only appliances. 4. Use the version 8.2.x Forcepoint installer to upgrade remaining off-appliance components. See Upgrading Web Protection Solutions for instructions.

  • Page 73: Post-Upgrade Activities

    The TRITON Unified Security Center is now known as TRITON Manager. For more information about how these changes may affect you, or to change the add-on modules activated by your subscription, contact your sales partner or Forcepoint Sales representative. Upgrading V-Series Appliances ...
  • Page 74 Upgrading V-Series Appliances Depending on the solutions installed on your appliances, after upgrade perform the following: ● If your appliance includes TRITON AP-EMAIL, perform the TRITON AP-EMAIL Post-upgrade activities. ● If your appliance hosts a Web Protection Policy Server (is a User directory and filtering appliance), log onto the TRITON Manager, go to the Web module Settings >...

  • Page 75: Upgrading V-Series Appliances From V7.8.4, 8.0.X, 8.1.X, Or V8.2.X To 8.3.X

    Upgrading V-Series Appliances Upgrading V-Series appliances from v7.8.4, 8.0.x, 8.1.x, or v8.2.x to 8.3.x Related topics: ● page 72 Estimates of time to completion, ● Rollback, page 73 ● page 74 Summary of upgrade procedure, ● page 74 Pre-upgrade activities, ●...
  • Page 76 V-Series Appliances: Visual Primer for the v8.3 Appliance CLI. This upgrade process applies to the following platforms and TRITON solutions: ● V10000 and V5000 appliances. For a list of supported models, see V-Series appliances supported with v8.x. ● TRITON AP-WEB and Web Filter & Security, v8.0 and higher ●...

  • Page 77: Estimates Of Time To Completion

    Below are estimates of the time it takes for the 8.3.0 upgrade patch to run. The amount of time is variable, as indicated. As a best practice, allow the patch to run at least 90 minutes before aborting the install and contacting Forcepoint Technical Support.

  • Page 78: Rollback

    The following is a sample start-to-finish upgrade scenario: Approximate total upgrade time for all upgrade tasks: ■ 1 TRITON AP-WEB V10000 appliance ■ 2 Windows 2012 servers: 1 for the TRITON Manager, 1 for Web Log Server Approximate upgrade time: 3 to 4 hours The download speed for each patch depends on your network environment and can vary significantly.

  • Page 79: Summary Of Upgrade Procedure

    Upgrading V-Series Appliances Summary of upgrade procedure 1. Perform the pre-upgrade activities. 2. Download the v8.3.x TRITON Unified Installer. 3. Download the appliance upgrade patch file. 4. If the appliance hosts TRITON AP-WEB or Web Filter & Security, upgrade the Full policy source machine (hosts Policy Broker/Policy Database).
  • Page 80 ● Custom patches ● Hand updated files ● Extra packages added by hand ● Extra files added, binary or configuration Post-upgrade, Forcepoint Technical Support may be able to help restore some files from your pre-upgrade file system. Upgrading V-Series Appliances ...
  • Page 81 Upgrading V-Series Appliances SNMP settings Upgrade to v8.3.0 does not preserve SNMP settings. Document your existing settings for reapplication after upgrade. Back up appliance configuration and settings Perform a full appliance configuration backup: 1. Log on to Appliance Manager and go to the Administration > Backup Utility page.

  • Page 82: Upgrade Procedure

    Alternatively, the patch can be downloaded from www.forcepoint.com and uploaded to the appliance. a. Go to My Account (formerly MyWebsense) and select the Downloads tab. Find your Forcepoint appliance model (for example, V10000) and click 8.3.0. Upgrading V-Series Appliances ...
  • Page 83 Upgrading V-Series Appliances b. Click on v8.3 V-Series upgrade patch and on the resulting page, click Download. c. Log on to the Appliance manager and navigate to Administration > Patches /Hotfixes. d. Click Upload Patch Manually, then Browse, and then select the upgrade file for version 8.3.x.

  • Page 84: Upgrading Multiple V-Series Appliances

    Upgrading V-Series Appliances 14. Upgrade all TRITON components that you haven’t already upgraded and which run off the appliance. These may include Web and Email Log Server, transparent identification agents, and the TRITON Manager. If Policy Broker and Policy Server are on the same off-appliance server as the TRITON Manager, you should have already upgraded all components on that box.
  • Page 85 2. Upgrade all User directory and filtering appliances. Each time the upgrade completes on an appliance, the appliance automatically restarts. 3. Upgrade all Filtering only appliances. 4. Use the version 8.3.x Forcepoint installer to upgrade remaining off-appliance components. See Upgrading Web Protection Solutions for instructions.

  • Page 86: Post-Upgrade Activities

    For more information about how these changes may affect you, or to change the add-on modules activated by your subscription, contact your sales partner or Forcepoint Sales representative. Depending on the solutions installed on your appliances, after upgrade perform the...
  • Page 87 Upgrading V-Series Appliances Hardware_platform : V10000 G4 Appliance_version : 8.3.0 Mode : TRITON AP-WEB Policy_mode : Filtering only Policy_source_ip: : 10.222.21.10 ■ View the upgrade history. show upgrade --history ■ Check appliance status. show appliance status show <module> If expected system services are not running, restart the module that hosts the service restart <module>...
  • Page 88 Upgrading V-Series Appliances ■ The protocol to use to connect and move files to and from the filestore. Supported protocols include ftp, tftp, and samba. ■ Optionally, the name of a user (account) with permissions on the filestore. To define a filestore: set filestore --alias <name>...
  • Page 89 Upgrading V-Series Appliances ■ v8.0.1 Web Protection Release Notes ■ v8.0.0 Web Protection Release Notes ■ v8.0.1 TRITON AP-EMAIL Release Notes ■ v8.0.0 TRITON AP-EMAIL Release Notes ■ v8.0.1 TRITON AP-DATA Release Notes ■ v8.0.0 TRITON AP-DATA Release Notes Upgrading V-Series Appliances ...
  • Page 90 Upgrading V-Series Appliances Upgrading V-Series Appliances ...

This manual is also suitable for:

V5000V5000 g2V10000 g2V10000 g3

Table of Contents