manualshive.com logo in svg

Forcepoint V10000, Руководство по модернизации устройства, Страница: 32 / 90

Поделиться
Скачать
Forcepoint V10000 Скачать руководство пользователя страница 32

Upgrading V-Series Appliances

28 

 Upgrading V-Series Appliances

Estimates of time to complete upgrade

V-Series Appliance Upgrade Guide | Upgrades to v7.8.x

The table below provides estimates of the time needed for the 7.8.2, 7.8.3, or 7.8.4 
patch to be installed on an appliance. The amount of time varies, as indicated. Not all 
V-Series configurations are shown.

The following provides a basic sample scenario:

Approximate total upgrade time, beginning to end, for all upgrade tasks:

● 1 Dual mode V10000 G2 appliance
● 2 Windows R2 2008 servers: 1 for the TRITON console, 1 for Web and Email Log 

Server

Approximately 3 to 4 hours

The download speed for each patch that you’re going to apply depends on your 
network environment and can vary significantly.

Activity breakout:

● 1 hour to download the version 7.8.x appliance upgrade (patch) file (if the 

download speed is 512 kilobytes per second). This is the estimated time per patch. 
Depending on the upgrade path you take, your upgrade may involve more than 
one patch.

System

Configuration

Elapsed time

V10000 G2 
V10000 G3

Web Security Gateway and
Email Security Gateway
User directory and filtering 

90 - 110 minutes

V10000 G2

Web security only:

Web Security Gateway

Full policy source

70 - 90 minutes

V10000 G2
V10000 G3

Web Security and Email Security 
Gateway
Full policy source

70-90 minutes

V10000 G2

V5000 G2

Web security only:

Web Security Gateway
User directory and filtering

90 - 110 minutes

V10000 G2

Dual mode: 

Web Security Gateway and 

Email Security Gateway

70 - 90 minutes

V10000 G2
V5000 G2

Email security only

20 - 30 minutes

V5000 G2

Web Security Gateway
filtering only

30 minutes

Содержание V10000

Страница 1: ...V Series Appliance Upgrade Guide Upgrades from 7 6 x through 8 3 x TRITON AP WEB TRITON AP EMAIL Web Filter Security Models V10000 V5000...

Страница 2: ...egistered trademarks of Intel Corporation This product includes software developed by the Apache Software Foundation www apache org Copyright c 2000 The Apache Software Foundation All rights reserved...

Страница 3: ...ances 21 Post upgrade activities 23 Upgrading V Series appliances from v7 8 1 to 7 8 2 and from v7 8 1 v7 8 2 or 7 8 3 to 7 8 4 25 Estimates of time to complete upgrade 27 Preparing for the appliance...

Страница 4: ...ities 63 Upgrade instructions 64 Upgrading multiple V Series appliances 66 Post upgrade activities 68 Upgrading V Series appliances from v7 8 4 8 0 x 8 1 x or v8 2 x to 8 3 x 70 Estimates of time to c...

Страница 5: ...s from v7 8 1 to 7 8 2 and from v7 8 1 v7 8 2 or 7 8 3 to 7 8 4 page 25 Upgrading V Series appliances from v7 7 x to 7 8 1 page 13 Upgrading V Series appliances from v7 6 x to 7 7 x page 3 Use the inf...

Страница 6: ...e Important The upgrade process is designed for functional appliances in a functional deployment Required network interfaces must have reliable connections to TRITON components and the Internet Upgrad...

Страница 7: ...Upgrading V Series Appliances 3 Upgrading V Series Appliances Follow the steps in the Deployment and Installation Center that are prescribed for each solution or combination of solutions...

Страница 8: ...x You must upgrade to version 7 7 0 before upgrading to 7 7 3 At version 7 7 0 or 7 7 3 you can upgrade to 7 8 1 See Upgrading V Series appliances from v7 7 x to 7 8 1 page 13 Direct upgrade to versi...

Страница 9: ...rades to version 7 7 3 are applied to V Series appliances via a software patch Patches are installed via the Appliance Manager under the Administration Patches Hotfixes Patches page You must be runnin...

Страница 10: ...sion 7 7 x TRITON Unified Installer 40 to 60 minutes to run the installer to upgrade the TRITON management server and the Log Server host 5 minutes to restart the Windows servers and verify that the u...

Страница 11: ...cation to save the file Policy databases and databases are not affected by the upgrade Content Gateway Integrated Windows Authentication IWA settings IWA settings are not preserved in the upgrade If y...

Страница 12: ...ly access it when the upgrade is complete Administrator accounts Make sure administrator accounts authenticated by a directory service have an email address specified in the directory service In versi...

Страница 13: ...pliance Manager go to the Administration Patches Hotfixes Patches tab The 7 7 x upgrade patch should be listed in the Table of available patches If it s not click Check for Patches The 7 7 x patch sho...

Страница 14: ...ing the next appliance and then the next one and so forth See Upgrading multiple V Series appliances page 9 11 Upgrade all TRITON components that run off the appliance These may include Web and Email...

Страница 15: ...TRITON services that are installed on the off appliance server with Policy Broker and Policy Server Use the version 7 7 x TRITON Unified Installer to upgrade the Policy Broker system See Upgrading We...

Страница 16: ...instructions go to Upgrading V Series appliances from v7 6 x to 7 7 x page 3 Post upgrade activities V Series Appliance Upgrade Guide Upgrades to v7 7 x If your appliance includes Email Security Gate...

Страница 17: ...ole has been upgraded Log on to TRITON Web Security and go to Settings Network Agent Local Settings Select the IP address of the affected Network Agent installations and check and restore all values p...

Страница 18: ...versions of 7 7 x 7 7 0 7 7 3 Appliances running earlier versions must be upgraded to version 7 7 0 first before upgrading to version 7 8 1 Related topics Versions supported for upgrade page 13 Estim...

Страница 19: ...pgrade hotfix 10 minutes to apply the hotfix and restart the appliance After the hotfix is applied you must manually restart it 3 5 hours to download the version 7 8 1 appliance upgrade patch file if...

Страница 20: ...ee Preparing for the upgrade Back up appliance configuration and settings Note that at the start of the upgrade process you are given the chance to run the backup and save the backup file to a remote...

Страница 21: ...e installation There is an off appliance Network Agent installation that uses the Filtering Service on the Filtering only appliance and uses the Policy Server on the Policy Broker machine When the abo...

Страница 22: ...nager https C interface IP address 9447 appmng 2 Under Configuration select Web Security Components 3 Under TRITON Web Security select Disabled 4 Click Save The disabling process may take several minu...

Страница 23: ...of the upgrade process 4 If Policy Broker and Policy Database are installed on an off appliance server make sure they re upgraded to version 7 8 1 and are running You should simultaneously upgrade all...

Страница 24: ...ces and do not want to download the hotfix from www forcepoint com multiple times you can use the Save to network location link to copy the downloaded hotfix to a convenient location on your network a...

Страница 25: ...tch tarball into the two files d Log on to the Appliance Manager and navigate to Administration Patches Hotfixes Patches tab e Via the Upload Patch Manually button browse for and select the patch to o...

Страница 26: ...er are on the same off appliance server as the TRITON manager you should have already upgraded all components on that box earlier See Upgrading Websense Web Security Solutions and Upgrading Email Secu...

Страница 27: ...ITON services that are installed on the off appliance server with Policy Broker and Policy Server Use the version 7 8 1 TRITON installer to upgrade the Policy Broker system See Upgrading Websense Web...

Страница 28: ...ance includes Email Security Gateway Anywhere perform the Email Security Gateway Post upgrade activities If your appliance hosts a Web Security Policy Server is a user directory and filtering applianc...

Страница 29: ...the Network Agent instance you want to configure 3 Check and restore all values paying particular attention to Filtering Service IP address If Filtering Service is unavailable Proxies and Caches Port...

Страница 30: ...page 27 Preparing for the appliance upgrade page 28 Upgrade instructions page 30 Upgrading multiple V Series appliances page 32 Post upgrade activities page 34 Important V10000 G4 and V5000 G3 applian...

Страница 31: ...ware patch Patches are installed via the Appliance console under the Administration Patches Hotfixes Patches page Similar to upgrading from 7 6 x to v7 7 x with the exception that you must use a 7 8 3...

Страница 32: ...onment and can vary significantly Activity breakout 1 hour to download the version 7 8 x appliance upgrade patch file if the download speed is 512 kilobytes per second This is the estimated time per p...

Страница 33: ...e Guide Upgrades to v7 8 2 and 7 8 3 Before applying the 7 8 2 7 8 3 or 7 8 4 patch perform these tasks and be aware of the following issues If you are not already familiar with the preparation requir...

Страница 34: ...you can easily retrieve it after upgrade is complete Network Agent settings In the majority of deployments upgrade preserves all Network Agent settings However when the following conditions are both t...

Страница 35: ...on about enhancements and changes in version 7 8 2 See the Content Gateway Release Notes for information about enhancements and changes in version 7 8 3 See the Content Gateway Release Notes for infor...

Страница 36: ...ration Patches Hotfixes d Click Upload Patch Manually then Browse and then select the upgrade file for the version you want 7 8 2 7 8 3 or 7 8 4 e Click Upload After a few seconds the upgrade is liste...

Страница 37: ...ox earlier See Upgrading Websense Web Security Solutions and Upgrading Email Security Gateway to v7 8 x for instructions If the upgrade fails contact Technical Support Upgrading multiple V Series appl...

Страница 38: ...y and filtering then Filtering only appliances and finally the off appliance TRITON components However if your site must upgrade a User directory and filtering or Filtering only appliance before the F...

Страница 39: ...ity users may be especially interested in improvements made to Policy Broker replication Filtering Service User Service Directory Agent Log Server LogonApp the Installer and the Web Security manager F...

Страница 40: ...nt settings page 29 restore them after the TRITON console has been upgraded Log on to TRITON Web Security and go to Settings Network Agent Local Settings Select the IP address of the affected Network...

Страница 41: ...e appliance upgrade page 28 Upgrade instructions page 30 Upgrading multiple V Series appliances page 32 Post upgrade activities page 34 Important Not all models of V Series appliances support version...

Страница 42: ...o 8 0 x is Applied to V Series appliances via a software patch Patches are installed via the Appliance console under the Administration Patches Hotfixes Patches page To upgrade from To this version St...

Страница 43: ...g Service instances with the same IP address in Settings Network Agent Global To avoid this problem before upgrading a filtering only appliance from v7 8 x to 8 0 x 1 Switch filtering only mode to ful...

Страница 44: ...your upgrade may involve more than one patch 10 minutes to back up the V Series appliance 70 to 90 minutes for the patch to perform the upgrade 10 minutes to restart the V Series and verify that the u...

Страница 45: ...kup 1 Log on to Appliance Manager and go to the Administration Backup Utility page 2 Under Perform Backup select Full Appliance Configuration as the backup type 3 Click Run Backup Now 4 When the backu...

Страница 46: ...liance or an off appliance software installation There is an off appliance Network Agent installation that uses the Filtering Service on the Filtering only appliance and uses the Policy Server on the...

Страница 47: ...ngs page 40 4 Restart the appliance in Appliance Manager Status General Restart Appliance 5 If Policy Broker and Policy Database are installed on an off appliance server make sure they re upgraded to...

Страница 48: ...e is performed services are unavailable to users 12 After the appliance has automatically restarted log on to the Appliance manager and go to Administration Patches Hotfixes Patches tab Under Patch Hi...

Страница 49: ...ially apply the upgrade to all User directory and filtering appliances 2 Sequentially apply the upgrade to all Filtering only appliances 3 After all appliances have been upgraded upgrade off box compo...

Страница 50: ...matically restarts when the upgrade finishes After the original Full policy source appliance has been upgraded replaced or re imaged change the upgraded temporary Full policy source machine to point t...

Страница 51: ...rk Agent module Verify Network Agent settings page 47 Review the Release Notes for the TRITON solutions on your appliances links provided below There are several new features that may require some con...

Страница 52: ...eway users may be interested in how an email DLP policy action plan in Data Security may now include a filter action created in the Email Security manager The on premises secure messaging portal end u...

Страница 53: ...is unavailable Proxies and Caches Port Monitoring Ignore Port Debug Setting Also check the Settings Network Agent NIC Configuration page for each NIC Use this NIC to monitor traffic Monitor List Monit...

Страница 54: ...e upgrade page 52 Preparing for the appliance upgrade page 53 Upgrade instructions page 54 Upgrading multiple V Series appliances page 56 Post upgrade activities page 58 Important Not all V Series mod...

Страница 55: ...ion Step One Step Two Step Three 7 7 x 7 8 1 Apply HF 90 Upgrade to 7 8 1 7 7 x 7 8 2 Apply HF 90 Upgrade to 7 8 1 Upgrade to 7 8 2 7 7 x 7 8 3 Apply HF 90 Upgrade to 7 8 1 Upgrade to 7 8 3 7 7 x 7 8...

Страница 56: ...es a file size limit that otherwise prevents the patch file from successfully uploading from the local storage location This problem does not exist in v7 8 3 no hotfix is available or needed for that...

Страница 57: ...nd can vary significantly Activity breakout 1 hour to download the 8 1 x upgrade patch file assuming the download speed is 512 kilobytes per second This is the estimated time per patch Depending on th...

Страница 58: ...ppliance Upgrade Guide Upgrades to v8 1 x Before applying the 8 1 x patch perform these tasks and be aware of the following issues If you are not already familiar with the preparation required for upg...

Страница 59: ...wever in case the IWA domain joins are dropped make a record of the settings before starting the upgrade Log on to Content Gateway and record the IWA settings including the names of domains to which I...

Страница 60: ...be listed as available Alternatively the patch can be downloaded from www forcepoint com and uploaded to the appliance a Go to My Account formerly MyWebsense and select the Downloads tab Click Hotfix...

Страница 61: ...en installed successfully in the Comments section In the Appliance manager you can also check the appliance version number by going to the Configuration System page and looking under System Informatio...

Страница 62: ...Series appliances and the policy source Policy Broker and Policy Server is located off appliance 1 Make sure Policy Broker and Policy Server are upgraded to the version you want and are running You s...

Страница 63: ...de is done the appliance automatically restarts 2 On the previously upgraded secondary appliance in the V Series console navigate to Configuration Web Security Components 3 For Policy Source select Us...

Страница 64: ...es tab and register the appliance If your appliance includes TRITON AP WEB perform the Content Gateway Post upgrade activities Review the Release Notes for the TRITON solutions on your appliances New...

Страница 65: ...o the following TRITON solutions and platforms V10000 and V5000 appliances see V Series appliances supported with v8 x for a list of supported models TRITON AP WEB and Web Filter Security Web Security...

Страница 66: ...n Patches Hotfixes Patches page To upgrade from To this version Step One Step Two Step Three Step Four 7 8 4 8 0 x 8 1 x 8 2 x Upgrade to 8 2 x 7 8 1 7 8 2 7 8 3 8 2 x Upgrade to 7 8 4 Upgrade to 8 2...

Страница 67: ...nd can vary significantly Activity breakout 1 hour to download the 8 2 x upgrade patch file assuming the download speed is 512 kilobytes per second This is the estimated time per patch Depending on th...

Страница 68: ...e Upgrade Guide Upgrades to v8 2 x Before applying the 8 2 x patch perform these tasks and be aware of the following issues If you are not already familiar with the preparation required for upgrade of...

Страница 69: ...s are dropped make a record of the settings before starting the upgrade Log on to Content Gateway and record the IWA settings Keep this record where you can easily retrieve it after the upgrade Admini...

Страница 70: ...down select your appliance model In the Version drop down select 8 2 x b Download the upgrade patch c Log on to the Appliance manager and navigate to Administration Patches Hotfixes d Click Upload Pa...

Страница 71: ...age 66 14 Upgrade all TRITON components that you haven t already upgraded and which run off the appliance These may include Web and Email Log Server transparent identification agents and the TRITON Ma...

Страница 72: ...appliances 4 Use the version 8 2 x Forcepoint installer to upgrade remaining off appliance components See Upgrading Web Protection Solutions for instructions If the Full policy source appliance is do...

Страница 73: ...raded from version 7 8 4 or earlier you need to know that version 8 0 0 and later use simplified product naming and grouping of the familiar TRITON product line The TRITON Unified Security Center is n...

Страница 74: ...the appliance If your appliance includes TRITON AP WEB perform the Content Gateway Post upgrade activities Review the Release Notes for the TRITON solutions on your appliances New features may require...

Страница 75: ...curity TRITON AP EMAIL Upgrading email protection solutions Related topics Estimates of time to completion page 72 Rollback page 73 Summary of upgrade procedure page 74 Pre upgrade activities page 74...

Страница 76: ...ith a software patch and is initiated in the Appliance Manager on the Administration Patches Hotfixes Patches page The upgrade procedure ends with some tasks performed in the TRITON Appliances command...

Страница 77: ...ernet Upgrading does not repair a non functional system Important If you have multiple appliances and They are running version 7 8 4 8 0 0 or 8 0 1 You plan to download the upgrade patch to a local ho...

Страница 78: ...ch 40 to 60 minutes for the patch to perform the upgrade and for you to verify that the upgrade was successful 15 minutes to download the version 8 3 x TRITON Unified Installer 40 to 60 minutes to run...

Страница 79: ...ponents review those requirements before upgrading your appliances For web protection solutions see Before upgrading v8 3 x web protection solutions and v8 3 0 Web Protection Release Notes For TRITON...

Страница 80: ...er In the upper right Virtual Console Preview area click Launch VGA and USB direct connect Connect a monitor and keyboard directly to the appliance Serial port direct connect Configure a serial connec...

Страница 81: ...ically removed to make room for the new version To ensure that the current Content Gateway log is retained content_gateway out download it to a location off of the appliance 1 In the Appliance Manager...

Страница 82: ...ce 4 If not already done perform a full appliance backup and save the backup file to an off appliance location See Back up appliance configuration and settings page 76 5 Restart the appliance in Appli...

Страница 83: ...s to ensure that the appliance is ready for upgrade The checks can take several minutes 9 When you see that all pre requisites have been met you can continue to install the patch by clicking Install P...

Страница 84: ...e patch to all TRITON AP EMAIL appliances before upgrading the off appliance components If the appliance includes a Web protection mode It is a best practice to upgrade the Full policy source applianc...

Страница 85: ...ance or if your Full policy source appliance is unavailable is being replaced or is being re imaged then set a User directory and filtering or Filtering only appliance temporarily to be the Full polic...

Страница 86: ...the command line interface CLI page 74 In the CLI elevate to config mode and perform system checks and verify some configuration settings Check system information show appliance info Results may be si...

Страница 87: ...nce management interface C In config mode enter set component_route dest C_interface_IP_address mask 255 255 255 255 module proxy Check and synchronize the system time show system ntp show system cloc...

Страница 88: ...Started Additional tasks If your appliance includes TRITON AP EMAIL perform the TRITON AP EMAIL Post upgrade activities In TRITON Manager go to the Appliances tab and register your appliances If you h...

Страница 89: ...ng V Series Appliances v8 0 1 Web Protection Release Notes v8 0 0 Web Protection Release Notes v8 0 1 TRITON AP EMAIL Release Notes v8 0 0 TRITON AP EMAIL Release Notes v8 0 1 TRITON AP DATA Release N...

Страница 90: ...Upgrading V Series Appliances 86 Upgrading V Series Appliances...

Отзывы:

Нет отзывов