Upgrade steps for Mac

Steps

  1. Download the latest package builder from the Forcepoint Support site:
    1. Log on to the Forcepoint Downloads page.
    2. Go to Endpoint Security > Forcepoint One Endpoint, select a version, and then download the package builder (ForcepointOneEndpointPackage.zip).
  2. Before you create the Forcepoint DLP Endpoint installation package:
    • You must be logged on to the Forcepoint DLP server with a Service Account before you run the package builder. Otherwise, incorrect communication keys are created and Forcepoint DLP Endpoint cannot connect to the Forcepoint DLP server.
    • You must copy the Mac Endpoint Classifier file from ForcepointOneEndpointPackage.zip to the C:\Program Files (x86)\Websense\Data Security\client\OS X folder. For more information about this step, see Forcepoint DLP Endpoint Windows and Mac deployments.
  3. Open ForcepointOneEndpointPackage.zip and run WebsenseEndpointPackageBuilder.exe.
  4. On the Select Endpoint Components screen, select both of the following:
    • Forcepoint Web Security Endpoint provides web security to your endpoint machines.
    • Forcepoint DLP Endpoint for data loss protection.
  5. If you selected Forcepoint Web Security Endpoint above, select one of the options below:
    • Direct Connect Endpoint
    • Proxy Connect Endpoint
  6. Choose Mac when prompted.
  7. Complete the configuration in the installation wizard to create the installation package.
  8. Unzip the FORCEPOINT-ONE-ENDPOINT-Mac.zip package onto your Mac machines.
  9. Run the WebsenseEndpoint.pkg from the unzipped folder EndpointInstaller.
  10. Follow the steps in the installation wizard.
  11. If you are upgrading to Forcepoint DLP Endpoint v20.12 on macOS 11 (Big Sur) onwards, you are prompted to enable full disk access (FDA) for new processes: Go to Library/Application Support/Websense Endpoint/EPClassifier/, select
    1. When the installer opens the prompt, click Open Full Disk Access to open the macOS System Preferences window.
    2. On the Privacy tab, select ESDaemonBundle.app and Websense Endpoint Helper.app.
    3. Click the + button under the list.
    4. Go to Library/Application Support/Websense Endpoint/DLP/, select wsdlpd, then click Open.
    5. Verify that wsdlpd is included in the list and selected.
    6. Click the + button under the list.
    7. Go to Library/Application Support/Websense Endpoint/EPClassifier/, select EndPointClassifier, then click Open.
    8. Verify that EndPointClassifier is included in the list and selected.
    9. Close the Security & Privacy window.
      Note: If you are deploying Forcepoint DLP Endpoint using Jamf, you can enable FDA for these processes using a configuration file. See the Enabling Full Disk Access for Forcepoint DLP Endpoint on macOS 10.15 and macOS 11 Knowledge Base article.
  12. You might need to either restart the endpoint machine, or log off and log on again to complete the upgrade.
    Upgrade from Restart Required?

    Forcepoint DLP Endpoint

    v8.3 and earlier

    Yes

    You must uninstall Forcepoint DLP Endpoint v8.3 and earlier, then restart the endpoint machine before installing v20.12.

    v8.4

    v8.5

    v18.x

    v19.03

    		 Yes
    v19.04 and later No

    Forcepoint Proxy Connect Endpoint

    v8.3 and earlier

    Yes

    You must uninstall Forcepoint Proxy Connect Endpoint v8.3 and earlier, then restart the endpoint machine before installing v20.12.
    v8.4 and later No

    Forcepoint Direct Connect Endpoint

    v19.03 and later No
  13. If you upgraded Forcepoint DLP Endpoint on an endpoint machine running macOS 10.15 or later, you must enable full disk access, then restart the machine. For more information, see Enabling full disk access on macOS 10.15 and macOS 11 (Forcepoint DLP Endpoint only).