Go to the table of contents Go to the previous page Go to the next page View or print as PDF
v8.5.0 Release Notes for Forcepoint Appliances : New for v8.5.0 Forcepoint appliances
New for v8.5.0 Forcepoint appliances
Release Notes | Forcepoint Appliances | v8.5.0
Forcepoint is pleased to release version 8.5.0 of the Forcepoint appliance infrastructure. For more information on new appliance features, see the Forcepoint Appliances Getting Started Guide.
*
*
*
*
*
*
*
*
*
*
*
*
*
*
*
Forcepoint Email Security in Microsoft Azure
Forcepoint Email Security in Azure is an enterprise and DLP solution that prevents malicious email threats from entering an organization's network and protects sensitive data from unauthorized email transmission.
Prior to this release, Forcepoint Email Security was solely an on-premises solution; now, Forcepoint Email Security version 8.5 can be deployed in a Microsoft Azure cloud environment.
Deploying Forcepoint Email Security in Azure requires a valid Forcepoint Email Security license and the installation of Forcepoint Email Security v8.5 and/or Forcepoint DLP Network v8.5.x.
For more information, see the v8.5 Release Notes for Forcepoint Email Security in Microsoft Azure.
v8.5 Appliance image repost
Initialized Forcepoint V10000 G4R2 appliances and Forcepoint X10G G2R2 security blades with 8.5 Unified Appliance Installer released before March 19, 2018 may experience installation failure. Failure is indicated by an error message similar to those shown below.
Unknown platform.
Please press Enter to reboot this machine.
-
ERROR: This machine is not in the list: M620, M630, M640, R610,
R210, R220, R230, R420, R420 II, R430, R640.
Please type reboot to reboot the system.
This is due to an incompatibility defect on new appliance models.
v8.5.0 Unified Appliance Installer images were republished on March 19, 2018. Affected customers should download the new appliance recovery image and use that to re-image new appliance models.
New V20K Appliance hardware platform
Appliance version 8.5 introduces the V20K hardware platform, a newly-released
V series appliance model for very large enterprises.
The V20K hardware platform is an alternative platform to X10G customers who actively seek connectivity, scaling, and operations OS library sharing.
The Forcepoint V20000 G1 Appliance is verified for v8.5.0 Web Security only in the initial release, and Forcepoint will verify this flagship V Series Appliance model for both Web Security and Email Security post v8.5.0. Existing customers must upgrade their Web or Email product prior to deploying the Forcepoint V20000 G1 appliance.
 
Note 
 
Note 
Appliance hardware platform revisions
Appliance version 8.5 introduces the new revision of the V10K G4 (R2) and the new revision of the X10G G2 (R2) security blade.
DLP Analytics Engine virtual appliance
With Appliance version 8.5, the DLP Analytics Engine can now be delivered as a virtual appliance. For more information, see the Forcepoint DLP Installation Guide.
Firstboot changes
The Firstboot system has been revised to support DHCP configuration and the DLP Analytics Engine on virtual appliances. For more information, see the Forcepoint Appliance Getting Started guide.
FSAM version 1.2.1 requirement
Forcepoint Security Appliance Manager (FSAM) version 1.2.1 includes vulnerability updates. Users with appliances running version 8.5 must install FSAM version 1.2.1 in order to manage their appliances with FSAM.
Forcepoint solutions on Forcepoint appliance platforms
 






Forcepoint DLP with Email Gateway for Microsoft Office 365
For detailed information about deploying any of the Forcepoint DLP solutions on Forcepoint appliances, see the Forcepoint DLP section of the Forcepoint documentation page.
For detailed information about deploying Forcepoint Web Security Cloud with an i-Series appliance, see the Forcepoint i-Series Appliance section of the Forcepoint documentation page.
V Series specifications
1 rack-unit form factor
See the V Series Appliance datasheet for specifications of the currently shipping model.
V20000
Supported solutions
*
*
Supported models with v8.5
*
Network interfaces
All V20000 appliances come with 6 physical Ethernet interfaces
C — Supports Forcepoint appliance management communication
P1, P2 — Support Content Gateway (web proxy) traffic (Forcepoint Web Security only)
E1, E2 —Support MTA traffic (Forcepoint Email Security)
N — Supports Network Agent (Web protection solutions)
Interface bonding: With Forcepoint Web Security and Forcepoint Email Security, interfaces P1 and E1 can be bonded, and interfaces P2 and E2 can be bonded.
V10000
Supported solutions
*
*
Supported models with v8.5
*
*
*
Network interfaces
All V10000 appliances come with 6 physical Ethernet interfaces
C — Supports Forcepoint appliance management communication
P1, P2 — Support Content Gateway (web proxy) traffic (Forcepoint Web Security only)
E1, E2 —Support MTA traffic (Forcepoint Email Security)
N — Supports Network Agent (Web protection solutions)
Interface bonding: With Forcepoint Web Security and Forcepoint Email Security, interfaces P1 and E1 can be bonded, and interfaces P2 and E2 can be bonded.
V5000
Supported solutions
*
*
*
Supported models with v8.5
*
*
*
Network interfaces
All V5000 appliances come with 4 physical Ethernet interfaces.
C — Supports Forcepoint appliance management communication
P1, P2 — Support Content Gateway (web proxy) traffic (Forcepoint Web Security) or MTA traffic (Forcepoint Email Security)
N — Supports Network Agent (Web protection solutions)
X Series specifications
10 rack-unit form factor; chassis hosts up to 16 X10G blade servers
See the X Series Appliance datasheet (PDF on the Forcepoint website) for specifications of the currently shipping model.
Supported solutions
*
*
Supported models with v8.5
*
*
Network interfaces
All X Series appliances come with 2 PowerConnect M6220 switches. Each supports 2 10Gb SFP+ ports.
All X10G security blades support 3 virtual Ethernet interfaces.
C — Supports Forcepoint appliance management communication
P1, P2 — Support Content Gateway (web proxy) traffic (Forcepoint Web Security) or MTA traffic (Forcepoint Email Security)
Forcepoint Virtual Appliance for Web and Email specifications
ESXi VMware
Version 8.5 Web and Email Virtual Appliances are certified for VMware ESXi 6.5 / 6.0 / 5.5. A stable release of ESXi, such as 6.5d (build 5310538) or later, is recommended to avoid unexpected issues.
Supported solutions
*
*
Forcepoint Email Security VM specification
The install OVA creates a virtual machine with the following specifications:
*
*
*
*
*
 
Important 
Network interfaces
All Forcepoint Email Security VMware virtual appliances come with four (4) virtual Ethernet interfaces.
C - Supports Forcepoint appliance management communication
P1, P2 - Support MTA traffic
N - Reserved
Forcepoint Web Security VM specification
 
Note 
The policy mode Filtering only is not supported on VMware virtual appliances with version 8.5.0.
The install OVA creates a virtual machine with the following specifications:
*
*
*
*
 
Important 
Network interfaces
All Forcepoint Web Security VMware virtual appliances come with 4 virtual Ethernet interfaces.
C - Supports Forcepoint appliance management communication
P1, P2 - Support Content Gateway web proxy traffic
N - Reserved; Network Agent and Content Gateway decryption port mirror are not supported on VMware virtual appliances in v8.5.0.
Direct upgrade to v8.5.0
V Series appliances can be upgraded directly to 8.5.0 from any of these versions:
8.1.x, 8.2.x, 8.3.x, and 8.4.x
X Series appliances can be upgraded directly to 8.5.0 from any of these versions:
8.1.x, 8.2.x, 8.3.x, and 8.4.x
 
Important 
Dual Mode appliances are not supported with version 8.3.0 and higher. Either TRITON AP-EMAIL or the web protection solution must be migrated to a new appliance. For more information, see Command-line interface (CLI).
Forcepoint V5000 G2R2 Appliance customers may encounter a memory shortage after upgrading to version 8.2 or later. This issue is the result of newer versions of software requiring additional memory, and was only captured under a very heavy load. A DIMM Kit (2 x 8GB) is certified to expand the physical memory of the V5000 G2R2 Appliance. It is now generally available and recommended for V5000 G2R2 deployment moving to versions 8.2 and later. Please contact your sales representatives for purchase information. For more details, see the related Knowledge Base article and the DIMM Kit installation instructions.
For upgrade instructions, see:
*
*
*
*
Upgrades from Appliance version 8.3.x require the ISO file type to upgrade to Appliance version 8.4.0 and later. This ISO file ("v8.4.0 Unified Appliance Installer") is available on the Forcepoint Downloads page.
V Series appliance models supported with version 8.5
Version 8.5.0 is supported on these V Series appliances:
Older V10000 G2 and V5000 G2 appliances, known as revision 1 (R1) or revision 2 (R2) appliances, are not supported with version 8.0.0 and higher. These models stopped shipping:
If you plan to upgrade from any version of 7.x to any version of 8.x, you should verify the full hardware platform model of the appliances you plan to upgrade.
In some cases your hardware platform information is available on the Configuration > System page in the Appliance manager. Refer to the System Information box at the top of the page.
This will tell you if you have a G3 or G4 appliance. However, for V10000 G2 and V5000 G2 machines, the summary does not indicate whether the appliance is an R1 or R2 model. V10000 G2R2 is not supported on v8.5.
If you have a G2 appliance, use the following steps to determine if it's R1 or R2 hardware.
1.
2.
Command-line interface (CLI)
Several commands have been added to the CLI for version 8.5, most notably a set of commands specific to the Analytics-Engine module. For more details, see the Forcepoint Appliances CLI Guide.
Forcepoint Appliance API v1.1.0
In the new Forcepoint appliance architecture, all configuration, management, and troubleshooting functions are supported by a REST API that is used by all Forcepoint appliance platforms and Forcepoint solutions. The Forcepoint Appliance CLI uses the REST API, as does the Forcepoint Security Appliance Manager. With the release of Forcepoint appliance version 8.5, portions of the API version 1.1.0 have been published for customer use. For more information, see the Forcepoint Appliances section of the Forcepoint documentation page.
Security updates
This release addresses the following Common Vulnerabilities and Exposures.
*
Meltdown/Spectre Vulnerabilities
CVE-2017-5715
CVE-2017-5753
CVE-2017-5754
Forcepoint Appliances documentation
All Forcepoint appliances share common operating and maintenance procedures.
The Forcepoint Appliances documentation set includes:
*
*
*
*
*
*
*
*
*
*
*
All Forcepoint documentation, including documents specific to Forcepoint Email Security, Forcepoint Web Security, Forcepoint URL Filtering, and Forcepoint Security Manager can be accessed at support.forcepoint.com/documentation.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
v8.5.0 Release Notes for Forcepoint Appliances : New for v8.5.0 Forcepoint appliances
Copyright 2017 Forcepoint. All rights reserved.