Post-upgrade activities

Re-register the new appliance with the Data Security module as follows:

1. In the Email Security module, navigate to the page Settings > General > Data Loss Prevention and click Unregister.
2. Register the appliance with the Data Security module; click Register.
3. Navigate to the page Settings > General > Data Loss Prevention and ensure that the appliance management (C) interface IP address appears in the field Communication IP address.
4. In the Data Security module, navigate to the page Settings > Deployment > System Modules and select the Email Security module.
5. In the upper left corner, click Delete.
6. Deploy the changes; click Deploy.

Update data loss prevention policies and classifiers

1. Select the Data Security module.
2. Follow the prompts that appear for updating data loss prevention policies and classifiers.

   Depending on the number of policies you have, this can take up to an hour. During this time, do not restart the server or any of the services.

3. Deploy the changes; in the upper right of the Data Security module, click Deploy.

Use the following steps:

1. Navigate to the following directory on the Security Manager machine:

   C:\Program Files (x86)\Websense\Email Security\ESG Manager

2. Locate and remove the following file:

   ESGBackupRestore

   Copy this file to another location if you want to save it.

3. Create a new backup file on the page Settings > General > Backup/Restore.

The virtual appliance firstboot process includes the entry of DNS server settings. You can enhance DNS lookup query performance by configuring a second set of DNS server entries specifically for the Email Security module. Use the following CLI commands, as needed:

set interface dns --module email --dns1 <DNS_IP>
set interface dns --module email --dns2 <DNS_IP>
set interface dns --module email --dns3 <DNS_IP>

Forcepoint Email Security in Azure supports only the C interface. These configuration settings include:

• Data loss prevention
• Email hybrid service
• Personal Email Manager notification message
• Update Log Database
• Reset Forcepoint Email Security license (only if Forcepoint Security Manager was migrated to Azure)
• Move Forcepoint DLP database (only if Forcepoint Security Manager was migrated to Azure)

Re-register the new appliance with the Data Security module as follows:

1. Select the Email Security module and navigate to the page Settings > General > Data Loss Prevention.
2. Remove DLP registration; click Unregister.
3. In the Data Security module, navigate to the page Settings > Deployment > System Modules.
4. Select the Email Security module.
5. In the upper left corner, click Delete.
6. On the Email Security module page Settings > General > Data Loss Prevention, ensure the appliance management (C) interface IP address appears in the field Communication IP address.
7. Register the appliance with the Data Security module; click Register.
8. Select the Data Security module and click Deploy.

Re-register the new appliance with the email hybrid service as follows:

1. Select the Email Security module and navigate to the page Settings > Hybrid Service > Hybrid Configuration.
2. At the bottom of the Hybrid Configuration page, click Edit.
3. Replace the SMTP server IP address with the new C interface IP address.
4. Click OK.

You may need to enter your destination appliance management interface IP address for the proper distribution of Personal Email Manager notification messages.

1. Select the Email Security module and navigate to the page Settings > Personal Email > Notification Message.
2. In the text field IP address or hostname, enter the new appliance management (or C) interface.
3. Click OK.

You may encounter this situation if you use Windows authentication. In that case, the migration script cannot update the C interface, resulting in this message.

1. Open SQL Server Management Studio.
2. Click New Query.
3. In the query window, enter the following command:

   USE [esglogdb76]

   Select the esg_device_id, admin_manage_ip, and device_c_port_ip from the dbo.esg_device_list.

4. Enter GO.
5. Locate the esg_device_id associated with either the admin_manage_ip or the device_c_port_ip of the source appliance.
6. Execute the following command using the values you obtained in the previous steps:

   UPDATE dbo.esg_device_list SET esg_name = '<host name>', admin_manage_ip = '<appliance management IP address>', device_c_port_ip = '<C IP address>' WHERE esg_device_id = '<device id>'

7. Enter GO.
8. Run the query.

The following table details system and configuration checks made in the CLI. See the Forcepoint Appliances CLI Guide for more information.

• Log on to the CLI and elevate to config mode.

  Action	Command
  Display system information	show appliance info Results may be similar to: Uptime: 0 days, 2 hours, 13 minutes Hostname: webapp.example.com Hardware_platform: X10G G2 Appliance_version: 8.5.0 Mode: Forcepoint Web Security Policy_mode: Filtering only Policy_source_ip: 10.222.21.10
  Display the upgrade history	show upgrade history
  Display the appliance and module status	show appliance status show <module> If expected system services are not running, restart the module that hosts the services. restart <module>
  Display network interface settings	show interface info If you have bonded interfaces, note that the names used to indicate the type of bonding have changed. For example, load-balancing is now balance-rr.
  Check and synchronize the system time, if necessary	show system ntp show system clock show system timezone If the clock is off and NTP is configured, sync with: sync system ntp Otherwise, to sync when the time is set manually, see “System time and time synchronization with Forcepoint servers” in Forcepoint Appliances Getting Started.
  Configure size and frequency values for archiving commands	set log archive
  Check SNMP polling and alerting settings (if you integrate with a SIEM or SNMP server)	show snmp config show trap config show trap events These commands are not supported in Forcepoint Email Security in Azure.