Forcepoint V10000 Appliance Upgrade Manual Download Page 65

Page: 65 / 90

Upgrading V-Series Appliances



Upgrading V-Series Appliances

Version 7.8.3
■

v7.8.3 Web Security Release Notes

■

v7.8.3 Content Gateway Release Notes

■

v7.8.3 Email Security Gateway Release Notes

Version 7.8.2
■

v7.8.2 Web Security Release Notes

■

v7.8.2 Content Gateway Release Notes

■ v7.8.2 Email Security Gateway Release Notes

Upgrading V-Series appliances from v7.8.x, 8.0.x, or 8.1.x
to v8.2.x

V-Series Appliance Upgrade Guide | Upgrades to v8.2.x

This upgrade process applies to the following TRITON solutions and platforms:

● V10000 and V5000 appliances; see

V-Series appliances supported with v8.x

for

a list of supported models

● TRITON AP-WEB and Web Filter & Security
● Web Security, Web Security Gateway, and Web Security Gateway Anywhere
● TRITON AP-EMAIL, Email Security Gateway, and Email Security Gateway

Anywhere

If you are upgrading TRITON APX, see

Upgrading to TRITON APX v8.2

If you are upgrading TRITON AP-DATA, see

Upgrading to TRITON AP-DATA

v8.2.x

Summary of Contents for V10000

Page 1: ...V Series Appliance Upgrade Guide Upgrades from 7 6 x through 8 3 x TRITON AP WEB TRITON AP EMAIL Web Filter Security Models V10000 V5000...

Page 2: ...egistered trademarks of Intel Corporation This product includes software developed by the Apache Software Foundation www apache org Copyright c 2000 The Apache Software Foundation All rights reserved...

Page 3: ...ances 21 Post upgrade activities 23 Upgrading V Series appliances from v7 8 1 to 7 8 2 and from v7 8 1 v7 8 2 or 7 8 3 to 7 8 4 25 Estimates of time to complete upgrade 27 Preparing for the appliance...

Page 4: ...ities 63 Upgrade instructions 64 Upgrading multiple V Series appliances 66 Post upgrade activities 68 Upgrading V Series appliances from v7 8 4 8 0 x 8 1 x or v8 2 x to 8 3 x 70 Estimates of time to c...

Page 5: ...s from v7 8 1 to 7 8 2 and from v7 8 1 v7 8 2 or 7 8 3 to 7 8 4 page 25 Upgrading V Series appliances from v7 7 x to 7 8 1 page 13 Upgrading V Series appliances from v7 6 x to 7 7 x page 3 Use the inf...

Page 6: ...e Important The upgrade process is designed for functional appliances in a functional deployment Required network interfaces must have reliable connections to TRITON components and the Internet Upgrad...

Page 7: ...Upgrading V Series Appliances 3 Upgrading V Series Appliances Follow the steps in the Deployment and Installation Center that are prescribed for each solution or combination of solutions...

Page 8: ...x You must upgrade to version 7 7 0 before upgrading to 7 7 3 At version 7 7 0 or 7 7 3 you can upgrade to 7 8 1 See Upgrading V Series appliances from v7 7 x to 7 8 1 page 13 Direct upgrade to versi...

Page 9: ...rades to version 7 7 3 are applied to V Series appliances via a software patch Patches are installed via the Appliance Manager under the Administration Patches Hotfixes Patches page You must be runnin...

Page 10: ...sion 7 7 x TRITON Unified Installer 40 to 60 minutes to run the installer to upgrade the TRITON management server and the Log Server host 5 minutes to restart the Windows servers and verify that the u...

Page 11: ...cation to save the file Policy databases and databases are not affected by the upgrade Content Gateway Integrated Windows Authentication IWA settings IWA settings are not preserved in the upgrade If y...

Page 12: ...ly access it when the upgrade is complete Administrator accounts Make sure administrator accounts authenticated by a directory service have an email address specified in the directory service In versi...

Page 13: ...pliance Manager go to the Administration Patches Hotfixes Patches tab The 7 7 x upgrade patch should be listed in the Table of available patches If it s not click Check for Patches The 7 7 x patch sho...

Page 14: ...ing the next appliance and then the next one and so forth See Upgrading multiple V Series appliances page 9 11 Upgrade all TRITON components that run off the appliance These may include Web and Email...

Page 15: ...TRITON services that are installed on the off appliance server with Policy Broker and Policy Server Use the version 7 7 x TRITON Unified Installer to upgrade the Policy Broker system See Upgrading We...

Page 16: ...instructions go to Upgrading V Series appliances from v7 6 x to 7 7 x page 3 Post upgrade activities V Series Appliance Upgrade Guide Upgrades to v7 7 x If your appliance includes Email Security Gate...

Page 17: ...ole has been upgraded Log on to TRITON Web Security and go to Settings Network Agent Local Settings Select the IP address of the affected Network Agent installations and check and restore all values p...

Page 18: ...versions of 7 7 x 7 7 0 7 7 3 Appliances running earlier versions must be upgraded to version 7 7 0 first before upgrading to version 7 8 1 Related topics Versions supported for upgrade page 13 Estim...

Page 19: ...pgrade hotfix 10 minutes to apply the hotfix and restart the appliance After the hotfix is applied you must manually restart it 3 5 hours to download the version 7 8 1 appliance upgrade patch file if...

Page 20: ...ee Preparing for the upgrade Back up appliance configuration and settings Note that at the start of the upgrade process you are given the chance to run the backup and save the backup file to a remote...

Page 21: ...e installation There is an off appliance Network Agent installation that uses the Filtering Service on the Filtering only appliance and uses the Policy Server on the Policy Broker machine When the abo...

Page 22: ...nager https C interface IP address 9447 appmng 2 Under Configuration select Web Security Components 3 Under TRITON Web Security select Disabled 4 Click Save The disabling process may take several minu...

Page 23: ...of the upgrade process 4 If Policy Broker and Policy Database are installed on an off appliance server make sure they re upgraded to version 7 8 1 and are running You should simultaneously upgrade all...

Page 24: ...ces and do not want to download the hotfix from www forcepoint com multiple times you can use the Save to network location link to copy the downloaded hotfix to a convenient location on your network a...

Page 25: ...tch tarball into the two files d Log on to the Appliance Manager and navigate to Administration Patches Hotfixes Patches tab e Via the Upload Patch Manually button browse for and select the patch to o...

Page 26: ...er are on the same off appliance server as the TRITON manager you should have already upgraded all components on that box earlier See Upgrading Websense Web Security Solutions and Upgrading Email Secu...

Page 27: ...ITON services that are installed on the off appliance server with Policy Broker and Policy Server Use the version 7 8 1 TRITON installer to upgrade the Policy Broker system See Upgrading Websense Web...

Page 28: ...ance includes Email Security Gateway Anywhere perform the Email Security Gateway Post upgrade activities If your appliance hosts a Web Security Policy Server is a user directory and filtering applianc...

Page 29: ...the Network Agent instance you want to configure 3 Check and restore all values paying particular attention to Filtering Service IP address If Filtering Service is unavailable Proxies and Caches Port...

Page 30: ...page 27 Preparing for the appliance upgrade page 28 Upgrade instructions page 30 Upgrading multiple V Series appliances page 32 Post upgrade activities page 34 Important V10000 G4 and V5000 G3 applian...

Page 31: ...ware patch Patches are installed via the Appliance console under the Administration Patches Hotfixes Patches page Similar to upgrading from 7 6 x to v7 7 x with the exception that you must use a 7 8 3...

Page 32: ...onment and can vary significantly Activity breakout 1 hour to download the version 7 8 x appliance upgrade patch file if the download speed is 512 kilobytes per second This is the estimated time per p...

Page 33: ...e Guide Upgrades to v7 8 2 and 7 8 3 Before applying the 7 8 2 7 8 3 or 7 8 4 patch perform these tasks and be aware of the following issues If you are not already familiar with the preparation requir...

Page 34: ...you can easily retrieve it after upgrade is complete Network Agent settings In the majority of deployments upgrade preserves all Network Agent settings However when the following conditions are both t...

Page 35: ...on about enhancements and changes in version 7 8 2 See the Content Gateway Release Notes for information about enhancements and changes in version 7 8 3 See the Content Gateway Release Notes for infor...

Page 36: ...ration Patches Hotfixes d Click Upload Patch Manually then Browse and then select the upgrade file for the version you want 7 8 2 7 8 3 or 7 8 4 e Click Upload After a few seconds the upgrade is liste...

Page 37: ...ox earlier See Upgrading Websense Web Security Solutions and Upgrading Email Security Gateway to v7 8 x for instructions If the upgrade fails contact Technical Support Upgrading multiple V Series appl...

Page 38: ...y and filtering then Filtering only appliances and finally the off appliance TRITON components However if your site must upgrade a User directory and filtering or Filtering only appliance before the F...

Page 39: ...ity users may be especially interested in improvements made to Policy Broker replication Filtering Service User Service Directory Agent Log Server LogonApp the Installer and the Web Security manager F...

Page 40: ...nt settings page 29 restore them after the TRITON console has been upgraded Log on to TRITON Web Security and go to Settings Network Agent Local Settings Select the IP address of the affected Network...

Page 41: ...e appliance upgrade page 28 Upgrade instructions page 30 Upgrading multiple V Series appliances page 32 Post upgrade activities page 34 Important Not all models of V Series appliances support version...

Page 42: ...o 8 0 x is Applied to V Series appliances via a software patch Patches are installed via the Appliance console under the Administration Patches Hotfixes Patches page To upgrade from To this version St...

Page 43: ...g Service instances with the same IP address in Settings Network Agent Global To avoid this problem before upgrading a filtering only appliance from v7 8 x to 8 0 x 1 Switch filtering only mode to ful...

Page 44: ...your upgrade may involve more than one patch 10 minutes to back up the V Series appliance 70 to 90 minutes for the patch to perform the upgrade 10 minutes to restart the V Series and verify that the u...

Page 45: ...kup 1 Log on to Appliance Manager and go to the Administration Backup Utility page 2 Under Perform Backup select Full Appliance Configuration as the backup type 3 Click Run Backup Now 4 When the backu...

Page 46: ...liance or an off appliance software installation There is an off appliance Network Agent installation that uses the Filtering Service on the Filtering only appliance and uses the Policy Server on the...

Page 47: ...ngs page 40 4 Restart the appliance in Appliance Manager Status General Restart Appliance 5 If Policy Broker and Policy Database are installed on an off appliance server make sure they re upgraded to...

Page 48: ...e is performed services are unavailable to users 12 After the appliance has automatically restarted log on to the Appliance manager and go to Administration Patches Hotfixes Patches tab Under Patch Hi...

Page 49: ...ially apply the upgrade to all User directory and filtering appliances 2 Sequentially apply the upgrade to all Filtering only appliances 3 After all appliances have been upgraded upgrade off box compo...

Page 50: ...matically restarts when the upgrade finishes After the original Full policy source appliance has been upgraded replaced or re imaged change the upgraded temporary Full policy source machine to point t...

Page 51: ...rk Agent module Verify Network Agent settings page 47 Review the Release Notes for the TRITON solutions on your appliances links provided below There are several new features that may require some con...

Page 52: ...eway users may be interested in how an email DLP policy action plan in Data Security may now include a filter action created in the Email Security manager The on premises secure messaging portal end u...

Page 53: ...is unavailable Proxies and Caches Port Monitoring Ignore Port Debug Setting Also check the Settings Network Agent NIC Configuration page for each NIC Use this NIC to monitor traffic Monitor List Monit...

Page 54: ...e upgrade page 52 Preparing for the appliance upgrade page 53 Upgrade instructions page 54 Upgrading multiple V Series appliances page 56 Post upgrade activities page 58 Important Not all V Series mod...

Page 55: ...ion Step One Step Two Step Three 7 7 x 7 8 1 Apply HF 90 Upgrade to 7 8 1 7 7 x 7 8 2 Apply HF 90 Upgrade to 7 8 1 Upgrade to 7 8 2 7 7 x 7 8 3 Apply HF 90 Upgrade to 7 8 1 Upgrade to 7 8 3 7 7 x 7 8...

Page 56: ...es a file size limit that otherwise prevents the patch file from successfully uploading from the local storage location This problem does not exist in v7 8 3 no hotfix is available or needed for that...

Page 57: ...nd can vary significantly Activity breakout 1 hour to download the 8 1 x upgrade patch file assuming the download speed is 512 kilobytes per second This is the estimated time per patch Depending on th...

Page 58: ...ppliance Upgrade Guide Upgrades to v8 1 x Before applying the 8 1 x patch perform these tasks and be aware of the following issues If you are not already familiar with the preparation required for upg...

Page 59: ...wever in case the IWA domain joins are dropped make a record of the settings before starting the upgrade Log on to Content Gateway and record the IWA settings including the names of domains to which I...

Page 60: ...be listed as available Alternatively the patch can be downloaded from www forcepoint com and uploaded to the appliance a Go to My Account formerly MyWebsense and select the Downloads tab Click Hotfix...

Page 61: ...en installed successfully in the Comments section In the Appliance manager you can also check the appliance version number by going to the Configuration System page and looking under System Informatio...

Page 62: ...Series appliances and the policy source Policy Broker and Policy Server is located off appliance 1 Make sure Policy Broker and Policy Server are upgraded to the version you want and are running You s...

Page 63: ...de is done the appliance automatically restarts 2 On the previously upgraded secondary appliance in the V Series console navigate to Configuration Web Security Components 3 For Policy Source select Us...

Page 64: ...es tab and register the appliance If your appliance includes TRITON AP WEB perform the Content Gateway Post upgrade activities Review the Release Notes for the TRITON solutions on your appliances New...

Page 65: ...o the following TRITON solutions and platforms V10000 and V5000 appliances see V Series appliances supported with v8 x for a list of supported models TRITON AP WEB and Web Filter Security Web Security...

Page 66: ...n Patches Hotfixes Patches page To upgrade from To this version Step One Step Two Step Three Step Four 7 8 4 8 0 x 8 1 x 8 2 x Upgrade to 8 2 x 7 8 1 7 8 2 7 8 3 8 2 x Upgrade to 7 8 4 Upgrade to 8 2...

Page 67: ...nd can vary significantly Activity breakout 1 hour to download the 8 2 x upgrade patch file assuming the download speed is 512 kilobytes per second This is the estimated time per patch Depending on th...

Page 68: ...e Upgrade Guide Upgrades to v8 2 x Before applying the 8 2 x patch perform these tasks and be aware of the following issues If you are not already familiar with the preparation required for upgrade of...

Page 69: ...s are dropped make a record of the settings before starting the upgrade Log on to Content Gateway and record the IWA settings Keep this record where you can easily retrieve it after the upgrade Admini...

Page 70: ...down select your appliance model In the Version drop down select 8 2 x b Download the upgrade patch c Log on to the Appliance manager and navigate to Administration Patches Hotfixes d Click Upload Pa...

Page 71: ...age 66 14 Upgrade all TRITON components that you haven t already upgraded and which run off the appliance These may include Web and Email Log Server transparent identification agents and the TRITON Ma...

Page 72: ...appliances 4 Use the version 8 2 x Forcepoint installer to upgrade remaining off appliance components See Upgrading Web Protection Solutions for instructions If the Full policy source appliance is do...

Page 73: ...raded from version 7 8 4 or earlier you need to know that version 8 0 0 and later use simplified product naming and grouping of the familiar TRITON product line The TRITON Unified Security Center is n...

Page 74: ...the appliance If your appliance includes TRITON AP WEB perform the Content Gateway Post upgrade activities Review the Release Notes for the TRITON solutions on your appliances New features may require...

Page 75: ...curity TRITON AP EMAIL Upgrading email protection solutions Related topics Estimates of time to completion page 72 Rollback page 73 Summary of upgrade procedure page 74 Pre upgrade activities page 74...

Page 76: ...ith a software patch and is initiated in the Appliance Manager on the Administration Patches Hotfixes Patches page The upgrade procedure ends with some tasks performed in the TRITON Appliances command...

Page 77: ...ernet Upgrading does not repair a non functional system Important If you have multiple appliances and They are running version 7 8 4 8 0 0 or 8 0 1 You plan to download the upgrade patch to a local ho...

Page 78: ...ch 40 to 60 minutes for the patch to perform the upgrade and for you to verify that the upgrade was successful 15 minutes to download the version 8 3 x TRITON Unified Installer 40 to 60 minutes to run...

Page 79: ...ponents review those requirements before upgrading your appliances For web protection solutions see Before upgrading v8 3 x web protection solutions and v8 3 0 Web Protection Release Notes For TRITON...

Page 80: ...er In the upper right Virtual Console Preview area click Launch VGA and USB direct connect Connect a monitor and keyboard directly to the appliance Serial port direct connect Configure a serial connec...

Page 81: ...ically removed to make room for the new version To ensure that the current Content Gateway log is retained content_gateway out download it to a location off of the appliance 1 In the Appliance Manager...

Page 82: ...ce 4 If not already done perform a full appliance backup and save the backup file to an off appliance location See Back up appliance configuration and settings page 76 5 Restart the appliance in Appli...

Page 83: ...s to ensure that the appliance is ready for upgrade The checks can take several minutes 9 When you see that all pre requisites have been met you can continue to install the patch by clicking Install P...

Page 84: ...e patch to all TRITON AP EMAIL appliances before upgrading the off appliance components If the appliance includes a Web protection mode It is a best practice to upgrade the Full policy source applianc...

Page 85: ...ance or if your Full policy source appliance is unavailable is being replaced or is being re imaged then set a User directory and filtering or Filtering only appliance temporarily to be the Full polic...

Page 86: ...the command line interface CLI page 74 In the CLI elevate to config mode and perform system checks and verify some configuration settings Check system information show appliance info Results may be si...

Page 87: ...nce management interface C In config mode enter set component_route dest C_interface_IP_address mask 255 255 255 255 module proxy Check and synchronize the system time show system ntp show system cloc...

Page 88: ...Started Additional tasks If your appliance includes TRITON AP EMAIL perform the TRITON AP EMAIL Post upgrade activities In TRITON Manager go to the Appliances tab and register your appliances If you h...

Page 89: ...ng V Series Appliances v8 0 1 Web Protection Release Notes v8 0 0 Web Protection Release Notes v8 0 1 TRITON AP EMAIL Release Notes v8 0 0 TRITON AP EMAIL Release Notes v8 0 1 TRITON AP DATA Release N...

Page 90: ...Upgrading V Series Appliances 86 Upgrading V Series Appliances...

Search results

Summary of Contents for V10000

Reviews:

Related manuals for V10000

Brands by name

Popular brands

Forcepoint V10000, Appliance Upgrade Manual

Search results

Summary of Contents for V10000

Reviews:

Related manuals for V10000

Brands by name

Popular brands