Upgrade matrix

Certain versions can be upgraded directly to Forcepoint Email Security version 8.5.x; other versions must be migrated or upgraded to a different version first. The following table details the upgrade/migration paths from previous versions to version 8.5.x.

All upgrades to Forcepoint Email Security in Azure version 8.5.7 require a migration.

Version 8.5.5, 8.5.6, and 8.5.7 are certified and supported for VMware ESXi 8 / 7 / 6.7 / 6.5 / 6.0. A stable release of ESXi is recommended to avoid unexpected issues.

See v8.5.5 Release Notes or v8.5.7 Release Notes.

Note: For ESXi 8, 7, and 6.7, users must use the v8.5.4 OVA file to create a new VM.

Platform	Version	Mode	Second Step	Final Version
Physical	8.5.4	single	upgrade	8.5.5 8.5.5 Azure
Physical	8.5.5	single	upgrade migrate	8.5.7 8.5.7 Azure
Physical	8.5.6	single	upgrade	8.5.7
Virtual	8.5.4	single	upgrade	8.5.5 8.5.5 Azure
Virtual	8.5.5	single	upgrade migrate	8.5.7 8.5.7 Azure
Virtual	8.5.6	single	upgrade migrate	8.5.7 8.5.7 Azure
Azure	8.5.4	single	migrate	8.5.5 Azure
Azure	8.5.5	single	migrate	8.5.7 Azure

Important: Starting in version 8.5, vCPU specifications changed for virtual appliances, which will require you to increase your vCPU and RAM allocations following an upgrade from version 8.3 or lower. See the Knowledge Base article Resource Upgrade on OVA and Forcepoint Appliances Getting Started Guide for additional information and virtual appliance specifications.

Appliance upgrades

For upgrade instructions, see:

We recommend that you perform a complete system backup in the event your system experiences a power outage or other interruption during the upgrade process. Recovery procedures are also included in case they are needed.

The upgrade process includes Forcepoint appliance components (V Series appliance, virtual appliance, or X Series chassis security blade), along with Forcepoint Security Manager and Email Log Server Windows components. Ensure that your deployment additionally includes Forcepoint DLP for data loss prevention (DLP) capabilities. The upgrade process detects and upgrades this module during the Security Manager upgrade.

Warning: Please contact Technical Support before you begin the upgrade process if Forcepoint personnel have customized any Email Security Gateway, TRITON AP-EMAIL, or Forcepoint Email Security back-end configuration settings.

Starting with v8.3.0, a single ISO image (v8.x.x Unified Appliance Installer) is offered to restore an appliance back to the factory settings as well as to upgrade all installed modules in the target appliance to the corresponding version.

Modules include:

App — Base appliance infrastructure and appliance controller

Forcepoint Web Security:

Web — Forcepoint Web Security core components
Proxy — Content Gateway web proxy

Forcepoint Email Security:

Email — Forcepoint Email Security core components

To upgrade an appliance prior to v8.3.0, the legacy RPM upgrade package is required. Refer to the dedicated upgrade guide for V Series or X Series appliances.

If deploying on a virtual appliance, verify the ESXi version. Users of ESXi 6.7 must use the v8.5.4 OVA file to create a new VM.

Dual-Mode appliances

The V Series appliance and the email virtual appliance were re-architected at version 8.3. Dual security mode on the V Series appliance (TRITON AP-EMAIL and TRITON AP-WEB or Web Filter & Security) is no longer supported. It is recommended to migrate the Email module off any dual-mode appliance to a new version 8.5.x appliance, leaving the web security system on the existing appliance. Before beginning the upgrade, see Upgrading V Series Dual-Mode Appliances to Version 8.5 for important upgrade instructions. Email data and messages on an existing virtual appliance must also be migrated to a new version 8.5.x appliance. See Migrate to version 8.5.x under upgrade instructions section.