Post-upgrade activities

Depending on the Forcepoint solutions installed on your appliances, after upgrade perform the following activities.
Important:

(Forcepoint Web Security only)

Changing the policy mode is not supported on X Series appliances that have been upgraded to v8.5.x from a version earlier than 8.3. This is consistent with past versions.

When the set mode command is used to change the policy mode, an error is returned. The last line of the error output is:
ERROR: [the time]:
ApplianceModeChanger::main(): Unable to switch appliance modes.

The policy mode can be changed on v8.5.x X Series appliances sourced from the factory or that have been re-imaged with version 8.5.x.

All appliances can use the set mode command to change the policy source location (the IP address of the policy source host machine).

In the CLI

  • Elevate to config mode and perform system and configuration checks.
    • Display system information.
      show appliance info

      Results may be similar to:

      Uptime : 0 days, 2 hours, 13 minutes
Hostname : webapp.example.com
Hardware_platform : X10G G2
Appliance_version : 8.5.4
Mode : Forcepoint Web Security
Policy_mode : Filtering only
Policy_source_ip: : 10.222.21.10
    • Display the upgrade history.
      show upgrade history
    • Display the appliance and module status.
      show appliance status
show <module>
      If expected system services are not running, restart the module that hosts the services.
      restart <module>
    • Display network interface settings.
      show interface info

      If you have bonded interfaces, note that the names used to indicate the type of bonding have changed. For example, load-balancing is now balance-rr.

    • Check and, if necessary, synchronize the system time.
      show system ntp
show system clock
show system timezone

      If the clock is off and NTP is configured, sync with:

      sync system ntp

      Otherwise, to sync when the time is set manually, see System time and time synchronization with Forcepoint servers in Forcepoint Appliances Getting Started.

    • Use the set log archive command to establish size and frequency values for archiving log files.
  • If you integrate with a SIEM or an SNMP server, check your SNMP polling and alerting settings.
    show snmp config
show trap config
show trap events

Additional tasks