Silently upgrading Forcepoint F1E using MDM

You can silently upgrade Forcepoint F1E endpoint installation using mobile device management (MDM).

If FSM 10 was installed before F1E v23.11 release, switching to Network Proxy mode requires a manual minor update of the profile on the FSM site. After v23.11 F1E clients are upgraded on the endpoints, a simple modification, for example, profile description adjustment is adequate to increment the profile version.

if FSM 10 is upgraded concurrently with the F1E v23.11 release, ensure that the profile is configured to be in Browser Extensions mode until the F1E clients are updated to v23.11. Once v23.11 is installed on the endpoints, the FSM profile should be changed to Network Proxy mode.

Steps

  1. On FSM 10 or later, setup your profile to be in browser extensions mode.
  2. Upgrade to latest F1E version with latest classifier using MDM for silent install.
  3. Switch Web Traffic Detection Mode to Inline Proxy.
  4. Update your profile.
  5. Open browsers, and verify if extensions are removed.
  6. Open Activity Monitor, and ensure the fpnpd process is running.