Upgrade steps for Mac

Steps

  1. Download the latest package builder from the Forcepoint Support site:
    1. Do one of the following:
      • In Products select Data Loss Prevention (DLP), and in Product Options select Endpoint (DLP).
      • In Products select Web Security, and in Product Options select Endpoint (Web).
      • In Products select Next Generation Firewall (NGFW), and in Product Options select Endpoint (NGFW).
    2. Select the desired package builder.
      The Product Installer view opens.
    3. Click Download.
      A ZIP file named ForcepointOneEndpointPackage.zip downloads.
  2. Before you create the Forcepoint DLP Endpoint installation package:
    • You must be logged on to the Forcepoint DLP server with a Service Account before you run the package builder. Otherwise, incorrect communication keys are created and Forcepoint DLP Endpoint cannot connect to the Forcepoint DLP server.
    • You must copy the Mac Endpoint Classifier file from ForcepointOneEndpointPackage.zip to the C:\Program Files (x86)\Websense\Data Security\client\OS X folder. For more information about this step, see Forcepoint DLP Endpoint Windows and Mac deployments.
  3. Open ForcepointOneEndpointPackage.zip and run WebsenseEndpointPackageBuilder.exe.
  4. On the Select Endpoint Components screen, select both of the following:
    • Forcepoint Web Security Endpoint provides web security to your endpoint machines.
    • Forcepoint DLP Endpoint for data loss protection.
  5. If you selected Forcepoint Web Security Endpoint above, select one of the options below:
    • Direct Connect Endpoint
    • Proxy Connect Endpoint
  6. Choose Mac when prompted.
  7. Complete the configuration in the installation wizard to create the installation package.
  8. Unzip the FORCEPOINT-ONE-ENDPOINT-Mac.zip package onto your Mac machines.
  9. Run the WebsenseEndpoint.pkg from the unzipped folder EndpointInstaller.
  10. Follow the steps in the installation wizard.
  11. If you are upgrading to Forcepoint DLP Endpoint v23.11 on macOS 11 (Big Sur) onwards, you are prompted to enable full disk access (FDA) for new processes: Go to Library/Application Support/Websense Endpoint/EPClassifier/, select
    1. When the installer opens the prompt, click Open Full Disk Access to open the macOS System Preferences window.
    2. On the Privacy tab, select ESDaemonBundle.app and Websense Endpoint Helper.app.
    3. Click the + button under the list.
    4. Go to Library/Application Support/Websense Endpoint/DLP/, select wsdlpd, then click Open.
    5. Verify that wsdlpd is included in the list and selected.
    6. Click the + button under the list.
    7. Go to Library/Application Support/Websense Endpoint/EPClassifier/, select EndPointClassifier, then click Open.
    8. Verify that EndPointClassifier is included in the list and selected.
    9. Close the Security & Privacy window.
    Note: If you are deploying Forcepoint DLP Endpoint using Jamf, you can enable FDA for these processes using a configuration file. See the Enabling Full Disk Access for Forcepoint DLP Endpoint on macOS 10.15, macOS 11, and macOS 12 Knowledge Base article.
  12. You might need to either restart the endpoint machine, or log off and log on again to complete the upgrade.
    Upgrade from Restart Required?

    Forcepoint DLP Endpoint

    v8.3 and earlier

    Yes

    You must uninstall Forcepoint DLP Endpoint v8.3 and earlier, then restart the endpoint machine before installing v23.11.

    v8.4 v8.5

    v18.x v19.03

    		 Yes
    v19.04 and later No

    Forcepoint Proxy Connect Endpoint

    v8.3 and earlier

    Yes

    You must uninstall Forcepoint Proxy Connect Endpoint v8.3 and earlier, then restart the endpoint machine before installing v23.11.
    v8.4 and later No

    Forcepoint Direct Connect Endpoint

    v19.03 and later No
  13. If you upgraded Forcepoint DLP Endpoint on an endpoint machine running macOS 10.15 or later, you must enable full disk access, then restart the machine. For more information, see Enabling full disk access on macOS 10.15, macOS 11, and macOS 12 (Forcepoint DLP Endpoint only).