Forcepoint V10000, Appliance Upgrade Manual

Page: 15 / 90

Upgrading V-Series Appliances

11
Upgrading V-Series Appliances
If the appliance includes Web Security mode
It is a best practice to upgrade the
Full policy source
appliance first, then the
User
directory and filtering
, then
Filtering only
appliances, and finally the off-appliance
TRITON components.
Best practice for upgrade sequence if Full policy source is on V-Series
appliance
Follow this sequence whether the Full policy source is a Web mode (only) or Web and
Email mode appliance.
Upgrade the Full policy source V-Series appliance. Each time the upgrade completes,
the appliance automatically restarts.
1. Sequentially apply the upgrade to all User directory and filtering appliances.
2. Sequentially apply the upgrade to all Filtering only appliances.
3. After all appliances have been upgraded, upgrade off-box components.
Best practice for upgrade sequence if Full policy source is not on V-Series
appliance
If you have multiple V-Series appliances and the policy source (Policy Broker and
Policy Server) is located off-appliance:
1. Make sure Policy Broker and Policy Server are upgraded to version 7.7.x and are
running. You should simultaneously upgrade all TRITON services that are
installed on the off-appliance server with Policy Broker and Policy Server. Use the
version 7.7.x TRITON Unified Installer to upgrade the Policy Broker system. See
Upgrading Websense Web Security Solutions for instructions.
2. Sequentially apply the upgrade to all User directory and filtering appliances.
Each time the upgrade completes on an appliance, the appliance automatically
restarts.
3. Sequentially apply the upgrade to all Filtering only appliances.
4. Use the version 7.7.x TRITON installer to upgrade remaining off-appliance
components. See Upgrading Websense Web Security Solutions for instructions.
If the Full policy source appliance is down or unavailable
Best practice is to upgrade the
Full policy source
appliance first, then the
User
directory and filtering
, then
Filtering only
appliances, and finally the off-appliance
components.
However, if your site must upgrade a
User directory and filtering
or
Filtering only
appliance before the
Full policy source
appliance, or if your
Full policy source
appliance is unavailable, is being replaced, or is being re-imaged, then set a
User
directory and filtering
or
Filtering only
appliance (temporarily) to be the Full policy
source. To do this:
1. Back up the Full backup file of the User directory and filtering or Filtering only
appliance in case changing the policy source fails.