Step 6: Install Email management components

Follow these instructions to install the Email Security module of the Security Manager. In addition to the Email Security module, you will be given the option to install Email Log Server on this machine. As Log Server consumes considerable system resources, for when multiple Forcepoint security solutions are installed, it is recommended to run it on another machine. See Install Email Log Server.

Steps

  1. Once the Forcepoint Email Security Installer is launched, the Introduction screen appears; click Next to begin Email Security installation.
  2. On the Select Components screen, deselect the Email Log Server option if you are installing the Log Server on a separate Windows machine, then click Next.

    If you are deploying Email Log Server and Forcepoint Email Security on separate machines, it is recommended to install Email Log Server first.

    The Security Manager (Email Security module) will be installed automatically. You cannot deselect it.

    Note: If you do not see the Email Security module on this screen, Forcepoint Infrastructure was not detected by the Forcepoint Email Security Installer. Forcepoint Infrastructure must be installed already to be able to install Email management components.
  3. On the Email Log Database screen, specify the IP address or IP address and instance name (format: IP address\instance) and port for the email Log Database.

    You may specify whether the connection to the database should be encrypted. Please note the following issues associated with using this encryption feature:

    • By default, Email Log Server uses NTLMv2 to encrypt the connection.

      If you want to use SSL encryption, you must have imported a trusted certificate to the Log Server machine. See your database documentation for information about importing a trusted certificate.

    • The Bulk Copy Program (BCP) option for inserting records into the Log Database in batches cannot be used. Not using the batch method may affect Log Database performance.
    • The connection from the Forcepoint appliance to the Log Database cannot be encrypted. If you enable encryption for Log Database, you must disable the SQL Server force encryption feature.

    Designate the login type for the database, either Windows authentication or sa account.

  4. On the Email System Credentials screen, specify the server name or domain name of the management server, along with the user credentials to be used by Forcepoint Security Manager components when running services. Specify the User name and Password of the account to be used by the Security Manager.
  5. On the Email Appliance screen, specify the Email appliance to be managed by this installation of the Security Manager and then click Next.

    Enter the IP address of the C interface of the Email appliance. You must specify an IP address only. Do not use a fully-qualified domain name (FQDN).

    When you click Next, communication with the specified appliance will be verified. Communication may be unsuccessful if:

    • Subscription key has already been applied to the appliance (typically meaning another installation of the Security Manager has been used to manage the appliance). The subscription key must be reset on the appliance.
    • Version of software to be installed does not match the version of the appliance. Verify whether the versions match.
    • Specified appliance is a secondary appliance in a cluster. Specify the primary appliance in the cluster or a non-clustered appliance.
    • The appliance cannot connect to the specified database server (specified during product installation).
    • Firewall is blocking communication to the appliance on port 6671. Make sure any local firewall allows outbound communication on port 6671.
    • Appliance P1 interface has not been correctly configured via the appliance CLI.
  6. On the Installation Folder screen, specify the location to which you want to install Email Security module components and then click Next.

    To select a location different than the default, use the Browse button.

    Each component (Email Security module and/or Email Log Server) will be installed in its own folder under the parent folder you specify here.

  7. On the Pre-Installation Summary screen, review the components to be installed. If they are correct, click Install.

    Click Previous to return to any screen on which you want to modify settings.

    The Installing Forcepoint Email Protection Solutions screen appears, as components are being installed.

  8. Wait until the Installation Complete screen appears, and then click Done.
  9. The installer program closes. Installation is complete.