v8.5.x Linux upgrade instructions for web protection products

Before you begin

Applies to:
  • Forcepoint Web Security, v8.5.x
  • Forcepoint URL Filtering, v8.5.x

Use the Linux installer (Web85xSetup_Lnx.tar.gz) to upgrade existing components. After the installer starts, it detects which web protection components are installed and need to be upgraded.

Perform a full system backup before starting the upgrade process. See the Backup & Restore FAQ for your version for instructions.

If components are installed on multiple machines, see Web protection upgrade order for important information about the required upgrade sequence.

Important:
  • Upgrade the primary (or standalone) Policy Broker machine first, then any replica Policy Broker machines, then any machines running Policy Server.

    Distributed components on other machines must be upgraded after Policy Broker and Policy Server.

  • Policy enforcement and logging services are not available while you are performing the upgrade. To reduce the impact on network users, run the upgrade after hours, or during a quiet time on the network.

Perform the following procedure on each machine running web protection components.

Steps

  1. Make sure no administrators are logged on to the management console.
  2. Log on the installation machine with administrator privileges (typically, as root).
  3. Close all applications and stop any antivirus software.
  4. Check the etc/hosts file. If there is no host name for the machine, add one. See Preparing for installation for instructions.
  5. Create a setup directory for the installer files, such as /root/Forcepoint_setup.
    Important: If your web protection services have been running uninterrupted for several months, the installer may have difficulty stopping them. To prevent the upgrade process from timing out and failing, use the /opt/Websense/WebsenseAdmin restart command to restart the services manually before beginning the upgrade.
  6. Go to the Downloads tab of the forcepoint.com My Account page to download the Linux installer. The installer file is called Web85xSetup_Lnx.tar.gz.
  7. Uncompress the installer file and use one of the following commands to launch it:

    To launch the graphical installer (available only on English versions of Linux):

    ./install.sh -g

    To launch the command-line installer, omit the -g switch:

    ./install.sh

    See Starting the Web Linux installer for more detailed instructions.

  8. On the Introduction screen, click Next.
    Note: These instructions refer to the graphical installer screens. If you are using the command-line installer, the same prompts appear. Enter the menu-item number or character, corresponding to the button described in each step.
  9. On the Subscription Agreement screen, click I accept the terms of the Subscription Agreement and click Next.
  10. On the Upgrade screen, select Start the upgrade and then click Next.
    Important: Before clicking Next, be sure to no administrators are logged on to the management console anywhere in the network.
  11. When you click Next, a “Stopping All Services” progress message appears. Wait for the services to be stopped.

    The Pre-Upgrade Summary screen appears when the services have been stopped.

    In some cases, the installer may be unable to stop the web protection services. If the services have not been stopped after approximately 10 minutes, then stop them manually using the /opt/Websense/WebsenseAdmin stop command. You can leave the installer running when you do so. Once you have manually stopped the services, return to the installer.

  12. On the Pre-Upgrade Summary screen, review the list of components that will be upgraded, and then click Install.

    Critical files are backed up and install properties initialized. And then the Installing... screen appears.

  13. Wait for the Upgrade Complete screen to appear. Click Done to exit the installer.
  14. Reboot the machine.
    Important: The machine must be rebooted to complete the upgrade process.
  15. If you stopped your antivirus software, restart it.
  16. If you have an integration product installed, additional upgrade steps may be necessary. See:
    • Integrating Forcepoint URL Filtering with Cisco
    • Integrating Forcepoint URL Filtering with Citrix
    • Integrating Forcepoint URL Filtering using ICAP Service
    • Integrating Forcepoint URL Filtering with TMG
    • Installing for Universal Integrations
  17. Repeat the upgrade procedure on each machine running web protection components, in the recommended order (see Web protection upgrade order).
    All components that interact must be upgraded to the same version.

    If you have complete installations in separate locations that do not interact, they do not have to run the same web protection software version.

  18. After all components have been upgraded, see Initial Configuration for All Security Modules.

Next steps

To add additional components to the machine after upgrade, run the installer again on the same machine. This time, the installer will ask if you want to add components. See Adding or modifying Windows components.