Prepare your Windows servers

Because Forcepoint Web Security management and reporting components can only reside on Windows servers, prepare at least two Windows servers: one to be the management server and one to host Log Server (and optionally Sync Service).

Before starting the installation process, on every Windows server that will host Forcepoint Web Security components, do the following:

Steps

  1. Make sure there are no underscores in the machine’s fully-qualified domain name (FQDN). The use of an underscore character in an FQDN is inconsistent with Internet Engineering Task Force (IETF) standards.
    Note: Further details of this limitation can be found in the IETF specifications RFC-952 and RFC-1123.
  2. Make sure all Microsoft updates have been applied. There should be no pending updates, especially any requiring a restart of the system.
  3. Verify that there is enough disk space to download the installer, extract temporary installation files, and install the management components on the Windows installation drive (typically C).
  4. Make sure that .NET Framework versions 3.5 and 4.5 are installed.
    • Windows Server 2008 R2 (v8.5 only): You can use Server Manager to install .NET 3.5. Usually the feature is on by default. You must download .NET 4.5 from the Microsoft site.
    • Windows Server 2012 or 2012 R2: Both .NET 3.5 and .NET 4.5 can be installed using the Server Manager. Usually, v3.5 is off by default and v4.5 is on by default. Turn them both on.

    Note that .NET Framework 4.5 must be installed before adding any language packs to the operating system (as noted in the following article from Microsoft: https://msdn.microsoft.com/en-us/library/5a4x27ek(v=vs.110).aspx#To install language packs.).

  5. Synchronize the clocks on all machines (including appliances) where a component will be installed. It is a good practice to point the machines to the same Network Time Protocol server.
  6. Disable the antivirus software on the machine before installation. After installation, before restarting your antivirus software, see this section of the Deployment and Installation Center.
  7. Disable any firewall on the machine before starting the installer and then re- enable it after installation. Open ports as required by the components you have installed, and make sure that required ports are not being used by other local services on the machine.
  8. Disable User Account Control (UAC) and Data Execution Prevention (DEP) settings, and make sure that no Software Restriction Policies will block the installation.
  9. Copy the Forcepoint Security Installer (Forcepoint85xSetup.exe) to a temporary directory on the machine.

Next steps

You can download the installer to your network, then copy it to each Windows server that will host Forcepoint components.

Note that the installer is quite large, so the download process may take some time.

To download the installer:
  1. Log on to the Forcepoint Downloads page.
  2. Select Web Security from the Product.
  3. Select On-Premises (Web) from the Product Options.
  4. Click (Required) Web v8.5.x Software and Forcepoint Security Manager for Windows from the Installer list.
    Note: Only latest version is available under Installer list. If you want to select the previous versions, then use Click here from On-Premises (Web).
  5. Click Download in the Product Installer page to download the windows installer of Web Security Forcepoint85xSetup.exe.