v8.5.x web protection software upgrade instructions (Windows)

Applies to:
  • Forcepoint Web Security, v8.5.x
  • Forcepoint URL Filtering, v8.5.x

Use the v8.5.x Setup program for Windows (Forcepoint85xSetup.exe) to perform the upgrade. The installer detects:

  • That older version components are installed
  • Which components are installed
  • The database engine version
    Important: Follow the upgrade order provided in Upgrading web or web and data protection solutions from v8.1.x or later to ensure that you are upgrading components in the correct order. Upgrade the Policy Broker machine first, then any machines running Policy Server. Distributed components on other machines must be upgraded after Policy Broker and Policy Server.

Before beginning:

  • If you performed an intermediate upgrade, and you have not restarted the upgraded machines, perform a restart before beginning the v8.5.x upgrade.
  • Perform a full system backup. See the Backup and Restore FAQ for your version for instructions.
    Important: Policy enforcement and logging services are not available while you are performing the upgrade. To reduce the impact on network users, run the upgrade after hours, or during a quiet time on the network.

Perform the following procedure on each machine running web protection components.

  1. Make sure that no administrators are logged on to the management console.
  2. Log on to the installation machine with an account having domain and local administrator privileges.
    Important: If you are upgrading Log Server on this machine and it uses a Windows trusted connection to access the Log Database, you must log on to this machine using the same trusted account.
  3. Stop Log Server and disable SQL Server Agent jobs. See Preparing the Log Database for upgrade.
  4. Close all applications and stop any antivirus software.
    Warning: Be sure to close the Windows Event Viewer, or the upgrade may fail.
  5. Go to the Downloads tab of the forcepoint.com My Account page to download the Forcepoint Security Installer.
    • The installer file is Forcepoint85xSetup.exe.
    • Installer files occupy approximately 2 GB of disk space.
  6. Double-click Forcepoint85xSetup.exe to launch the installer. A progress dialog box appears, as files are extracted.
    Note: A security update done for the v8.5.4 product release has resulted in a new requirement for a specific dynamic-link library (dll) when upgrading to v8.5.4 Forcepoint Web Security software on a Windows platform. See Security Enhancements in the v8.5.4 Release Notes for Web Protection Solutions for more information.
  7. The installer detects web protection components from an earlier version and asks how you want to proceed.

    Click OK.

  8. On the installer Introduction screen, click Next.

    Note the Installer Dashboard remains on-screen, behind the installer screens mentioned in the remaining steps.

  9. On the Upgrade screen, select Start the upgrade, then click Next.
  10. When you click Next, a Stopping All Services progress message appears. Wait for the services to be stopped.

    The Pre-Upgrade Summary screen appears when the services have been stopped.

    In some cases, the installer may be unable to stop the web protection services. If the services have not been stopped after approximately 10 minutes, then stop them manually. You can leave the installer running when you do so. Use the WebsenseAdmin stop command, or the Windows Services tool, to stop the services. Once you have manually stopped the services, return to the installer.

  11. On the Pre-Upgrade Summary screen, review the list of components that will be upgraded, and then click Install.

    Critical files are backed up and install properties initialized. And then the Installing... screen appears.

    The upgrade process checks for a required version of Microsoft SQL Server Native Client and related tools and installs them, if necessary.

  12. Wait for the Upgrade Complete screen to appear. Click Done to exit the installer.
  13. Reboot the machine.
    Important: The machine must be rebooted to complete the upgrade process.
  14. If you stopped your antivirus software, restart it.
  15. Re-enable SQL Server Agent jobs if you disabled them prior to upgrade. See Preparing the Log Database for upgrade.
  16. If you have an integration product installed, additional upgrade steps may be necessary. See:
    • Integrating Forcepoint URL Filtering with Cisco
    • Integrating Forcepoint URL Filtering with Citrix
    • Integrating Forcepoint URL Filtering with TMG
    • Installing for Universal Integrations
  17. Repeat the upgrade procedure on each machine running web protection components, in the recommended order (see Web protection upgrade order).

    All components that interact must be upgraded to the same version.

    If you have complete installations in separate locations that do not interact, they do not have to run the same web protection software version.

To add additional components to a machine after upgrade, run the installer again on the same machine. This time, the installer will ask if you want to add components. See Adding or modifying Windows components.

New security certificate

After upgrade, the first time you launch Forcepoint Security Manager, the browser displays a certificate error.

This appears because Security Manager uses a certificate signed by Forcepoint, which is not a recognized certificate authority.

When you install the certificate in your browser, communication with the management console is secured, and the certificate warning is not displayed again (in this browser).

To install the certificate in Internet Explorer

You can either run an ActiveX control to install the certificate automatically, or you can install the certificate manually.

To install the certificate automatically (requires ActiveX to be enabled in the browser):

  1. On the browser warning page, click Continue to this website (not recommended). You must click through the warning once to be able to install the certificate.
  2. Click the yellow warning box on the logon screen (where the message Forcepoint security certificate is required) appears.
  3. In the pop-up box, click the install the certificate link.
  4. If prompted, provide credentials to allow the certificate to be installed, then click Yes.
  5. If the browser pops up a yellow security warning bar, click the yellow bar to allow the program that installs the certificate to run.

To install the certificate manually:

  1. On the browser warning page, click Continue to this website (not recommended). You must click through the warning once to be able to install the certificate.
  2. Click Certificate Error on the browser’s address bar (to the right of the management console URL), and then select View certificate.
  3. In the Certificate dialog box, click Install Certificate.
  4. Mark the Place all certificates in the following store radio button, and then click Browse.
  5. Select the Trusted Root Certification Authorities folder, and then click OK.
  6. Click Next, and then Finish.
  7. When prompted to install the certificate, click Yes, and then click OK to close the success message.

After the certificate is installed, you can launch the Forcepoint Security Manager using this browser without receiving further errors.

To install the certificate in Firefox

On the Secure Connection Failed page:

  1. Click Or you can add an exception.
  2. Click Add Exception.
  3. Make sure that Permanently store this exception is selected, and then click Confirm Security Exception.

After the certificate is installed, you can launch the Forcepoint Security Manager using this browser without receiving further errors.