Installing with SQL Server

Deployment and Installation Center | Forcepoint Web Security or Forcepoint URL Filtering

Applies to:

Forcepoint Web Security, v8.5.x

Forcepoint URL Filtering, v8.5.x

See System requirements for this version for which versions of SQL Server are supported.

Install SQL Server according to Microsoft instructions, if needed.

Make sure SQL Server is running.

Make sure SQL Server Agent is running.


	Note If you are using SQL Server Express, SQL Service Broker is used instead of SQL Server Agent.

Obtain the SQL Server logon ID and password for a SQL Server Administrator, or for an account that has the following permissions:

db_creator server role

SQLAgent role

db_datareader in msdb

For Forcepoint DLP, Forcepoint Email Security, or Forcepoint Web Security with the Web DLP module, the account must have a sysadmin role.

You need this logon ID and password when you install Forcepoint reporting components.

Restart the SQL Server machine after installation.


	Note You must restart the machine after installing Microsoft SQL Server and before installing Log Server.

Make sure the Security Manager machine and, if applicable, Log Server machine or machines can recognize and communicate with SQL Server.

Install the SQL Server client tools on the Security Manager machine. Run the SQL Server installation program, and select Connectivity Only when asked what components to install.

If Log Server is installed on another machine, install the SQL Server client tools on that machine instead.

Restart the machine after installing the connectivity option. See Microsoft SQL Server documentation for details.

Configuring Microsoft SQL Server user roles

Microsoft SQL Server defines SQL Server Agent roles that govern accessibility of the job framework. The SQL Server Agent jobs are stored in the SQL Server msdb database.

To install Log Server successfully, the user account that owns the reporting database must have one of the following membership roles in the msdb database and db_datareader:

SQLAgentUserRole

SQLAgentReader Role

SQLAgentOperator Role

The SQL user account must also have dbcreator fixed server role privilege. The Forcepoint Email Security user account must have sysadmin fixed server role privilege.

Use Microsoft SQL Server Management Studio to grant the database user account the necessary permissions to successfully install Log Server.

On the SQL Server machine, go to Start > Programs > Microsoft SQL Server > Microsoft SQL Server Management Studio.

Log into SQL Server as a user with SQL sysadmin right.

Select the Object Explorer tree, and then go to select Security > Logins.

Select the login account to be used during the installation.

Right-click the login account and select Properties for this user.

Select Server Roles, and then select dbcreator. For Forcepoint DLP, Forcepoint Email Security, and Forcepoint Web Security with the Web DLP module, also select sysadmin.

Select User Mapping and do the following:

Select msdb in database mapping.

Grant membership to one of these roles:

SQLAgentUserRole

SQLAgentReader Role

SQLAgentOperator Role

and also to:

db_datareader

Select wbsn-data-security in database mapping and mark it as "db_owner".

Select wbsn-data-security-temp-archive in database mapping and mark it as "db_owner".

Click OK to save your changes.