System Module Upgrade Sequence with OCR Enabled

Ensure system modules are upgraded in the correct sequence to maintain Optical Character Recognition (OCR) functionality.

When OCR is in use, upgrade the system modules in the following order:
  1. Forcepoint DLP management server
  2. Protectors - For the OCR to work, the administrator MUST configure the desired OCR setting in one of the two options: Policy Engine global settings or on the Protectors' policy engine. See Configuring the Policy Engine.
  3. Supplemental Forcepoint DLP server - For the OCR to work, the administrator MUST configure the desired OCR setting in one of the two options: Policy Engine global settings or on the Supplemental Forcepoint DLP server’s policy engine. See Configuring the Policy Engine.
Note: From DLP version 10.4, OCR is done directly over the policy engine. OCR server is no longer in use and will not be available on version 10.4 and above.
The following upgrade path is supported:
  • The Forcepoint DLP management server is being upgraded to version 10.4.
  • The Supplemental Forcepoint DLP server is on a previous version (10.3 and below) with the OCR server configured. In this case the Supplemental Forcepoint DLP server’s policy engine will continue to function according to the OCR server configuration.
  • A Protector is on a previous version (10.3 and below). In this case the Protector’s policy engine will also continue to function to according to the OCR server configuration.
  • For this upgrade path, it is recommended to upgrade the protector to version 10.4 or above before upgrading the Supplemental Forcepoint DLP server. Otherwise, the protector’s OCR will stop working, as the OCR server will be no longer available on the Supplemental Forcepoint DLP server.
Note: Customers using Email Security Gateway (ESG) and Web Content Gateway (WCG) must not upgrade to the Supplemental Forcepoint DLP Server 10.4 which no longer support Optical Character Recognition (OCR) server, and must use the OCR server from previous version to keep the OCR functionality working. Stay tuned for further announcements regarding general availability of Email Security Gateway and Web Content Gateway with Forcepoint Security Manager 10.4 and Policy engine 10.4 to enable the new Policy Engine’s OCR functionality.

Review the following article for possible upgrade paths: Optical Character Recognition (OCR) backward compatibility in DLP and Upgrade path.