Post-upgrade activities

Depending on the Forcepoint solutions installed on your appliances, after upgrade perform the following activities.
Important:

(Forcepoint Web Security only)

Changing the policy mode is not supported on X Series appliances that have been upgraded from v8.2 and earlier to v8.5.3 or 8.5.4.

When the “set mode” command is used to change the policy mode, an error is returned. The last line of the error output is:
ERROR: [the time]:
ApplianceModeChanger::main(): Unable to switch appliance modes.

The policy mode can be changed on X Series appliance versions 8.3, 8.4, or 8.5.x sourced from the factory or that have been re-imaged with version 8.3, 8.4, or 8.5.x.

All appliances can use the set mode command to change the policy source location (the IP address of the policy source host machine).

In the CLI
  • Elevate to config mode and perform system and configuration checks.
    • Display system information.
      show appliance info
      Results may be similar to:
      Uptime            : 0 days, 2 hours, 13 minutes
Hostname          : webapp.example.com
Hardware_platform : X10G G2
Appliance_version : 8.5.4
Mode              : Forcepoint Web Security
Policy_mode       : Filtering only
Policy_source_ip: : 10.222.21.10
    • Display the upgrade history.
      show upgrade --history
    • Display the appliance and module status.
      show appliance status
show <module>
      If expected system services are not running, restart the module that hosts the services.
      restart <module>
    • Display network interface settings.
      show interface info

      If you have bonded interfaces, note that the names used to indicate the type of bonding have changed. For example, load-balancing is now balance-rr.

    • Check and, if necessary, synchronize the system time.
      show system ntp
show system clock
show system timezone
      If the clock is off and NTP is configured, sync with:
      sync system ntp

      Otherwise, to sync when the time is set manually, see System time and time synchronization with Forcepoint servers in Forcepoint Appliances Getting Started.

    • Use the set log archive command to establish size and frequency values for archiving log files.
  • If you integrate with a SIEM, check your SNMP polling and alerting settings.
    show snmp config
show trap config
show trap events

Additional tasks