Upgrading the management server
| Applies to: |
|---|
|
To upgrade Forcepoint management server components, use the appropriate Forcepoint Security Installer for your version (Windows only): Forcepoint8xxSetup.exe, where “8xx” is the full version number.
- Download the installer from the Downloads section of the My Account page at support.forcepoint.com.
- Select the link for the appropriate version under any on-premises security.
- Select the installer (typically the first entry in the list), then, on the installer page, click Download.
- Log on to the installation machine with an account having domain and local administrator privileges.
- Close all applications and stop any antivirus software.Warning: Be sure to close the Windows Event Viewer, or the upgrade may fail.
- Right-click Forcepoint8xxSetup.exe and select Run as administrator to launch the installer. A progress dialog box appears, as files are extracted.
When the installer launches, it detects that earlier versions of the product are installed, and automatically starts a series of upgrade wizards—one for each of the modules included on the management server.
Management infrastructure
The Forcepoint Management Infrastructure (formerly TRITON infrastructure) provides a basic framework for all of the management components that make up the Forcepoint Security Manager (formerly TRITON Manager). This framework includes a central settings database that stores shared configuration (such as administrator directory and account information) for all management modules, as well as other internal shared services.
The infrastructure upgrade wizard contains the following screens.
| Wizard Screen | Fields |
|---|---|
| Welcome |
Welcomes you to the installation and upgrade wizard.
|
| Pre-Installation Summary |
Shows:
Click Next to accept the properties. |
| Installation |
Shows upgrade progress. The system stops processes, copies new files, updates component registration, removes unused files, and more. A popup message appears at this stage, warning that you must also upgrade all modules. This popup may be hidden behind the main installer window, so if your installation appears to freeze, locate the hidden popup by moving the main installer window, and click OK to proceed with the installation. |
| Summary |
When module upgrade is complete, summarizes your system settings, including:
Click Finish to complete the upgrade for this module. |
Web protection
The Forcepoint Web Security upgrade wizard contains the following screens.
| Wizard Screen | Fields |
|---|---|
| Introduction | Welcomes you to the upgrade wizard. Click Next to continue. |
| Pre-Upgrade Summary |
Informs you that a previous web protection software version was detected.
|
| Installing Forcepoint |
Shows installation progress. When complete, the installer configures your software. This can take up to 10 minutes. |
| Upgrade Complete | You are notified when installation of this module is complete. Click Done to exit the installer. |
Data protection
Before running the Forcepoint DLP upgrade wizard, the installer validates system requirements to ensure that the upgrade will be successful.
The pre-upgrade check validates hardware requirements, credentials for the SQL Server database, endpoint security certificates, manager configuration, administrator upgrade permissions, and database structure. As it proceeds, it reports whether a step succeeded or failed, or issues a warning.
If there is a failure, the upgrade stops. For details, see \AP-DATA- PreUpgradeTests.log in the product installation directory.
If there are only warnings, it is possible to proceed with the upgrade. In this case, be aware that the system may behave unexpectedly, but this will not have a critical impact.
After the pre-upgrade check, the Forcepoint DLP upgrade wizard is launched.
The upgrade wizard contains the following screens.
| Wizard Screen | Fields |
|---|---|
| Welcome |
This screen welcomes you to the installation and upgrade wizard for Forcepoint DLP. The system checks the disk space on the machine. When prompted, click Next to launch the installation wizard. |
| Installation Confirmation | Verify the system settings and click Install to continue the upgrade. |
| Installation |
This screen shows the progress of the installation. The system stops processes, checks ports, copies new files, updates component registration, removes unused files, and more. In some cases, an internal SQL error may occur. Do not click OK until the issue has been resolved with Forcepoint Technical Support. Continuing prematurely can cause problems with the reporting database. |
| Summary |
When installation of this module is complete, this screen summarizes the system settings.
|
Email protection
The Forcepoint Email Security upgrade wizard contains the following screens.
| Wizard Screen | Fields |
|---|---|
| Introduction | This screen welcomes you to the Forcepoint Email Security upgrade wizard. Click Next to continue. |
| Select Components | This screen shows the components that will be upgraded (those that are currently installed). Click Next to continue. |
| Configuration | This page shows the IP address of the database engine configured to manage the Email Log Database and the logon type. If you have changed the database since your previous installation, modify the settings here. |
| Pre-Installation Summary | This screen shows:
|
| Installation |
This screen shows that the installation is progressing. The Email Security module of the Security Manager is upgraded on the Forcepoint management server. The Email Log Server is upgraded on machines where it is found. When complete, the installer configures the software. This can take up to 10 minutes. |
| Summary | You are notified when installation of this module is complete. Click Done to exit the installer. |
Post-upgrade steps
Once the Forcepoint management server upgrade is complete:
- Restart the management server.
- Log on to the Forcepoint Security Manager:
https://<IP_address_or_hostname>:9443
- Click Data to select the Data Security module.
- Follow the prompts that appear for updating data loss protection policies and classifiers.
Depending on the number of existing policies, this can take up to an hour. During this time, do not restart the server or any of the services.
- If any applications were removed from predefined endpoint application groups prior to upgrade, go to the Main > Resources > Endpoint Application Groups page and remove them again. The upgrade process restored these to their original state.
- Click Deploy.
- Select the Email Security module and navigate to the page Settings > General > Database Downloads.
- Click Update Now to perform an immediate database download update.
For information on upgrading other Forcepoint DLP components, such as supplemental servers, agents, and Forcepoint DLP Endpoint (formerly TRITON AP-ENDPOINT DLP), refer to Upgrading to Forcepoint DLP v8.9.x.