Silently upgrading Forcepoint F1E from a macOS endpoint machine using MDM

Note:
  • If FSM 10 was installed before F1E v23.11 Release:

    If the FSM Endpoint profile was switched to Network Proxy mode before upgrading to F1E v23.11 build, it requires a manual minor update of the profile on the FSM site. Minor change, e.g. profile description, will be sufficient to increase the profile version. It has to be done after v23.11 F1E clients are upgraded on the endpoints.

  • If FSM 10 is upgraded along with F1E v23.11 Release:

    After the FSM gets upgraded, make sure your profile is configured to be in Browser Extensions mode, until the F1E clients are updated to v23.11. After the v23.11 gets installed on the endpoint, please change the FSM profile to Network Proxy mode.

Steps

  1. On FSM 10 or later, setup your profile to be in browser extensions mode.
  2. Install v21.07 or later with 8.9.0 classifier + browser extensions manually or via MDM.
  3. Upgrade to latest F1E version with latest classifier using MDM for silent install.
  4. Switch Web Traffic Detection Mode to Inline Proxy.
  5. Update your profile.
  6. Open browsers and verify if extensions are removed or enabled.
  7. Open Activity Monitor and ensure the fpnpd process is running.