Installation steps

To be able to install Log Server, a supported database engine must be running.

Steps

  1. On the Select Components screen in the Forcepoint Security Installer, select Log Server.
    If the deployment includes the Forcepoint Web Security Hybrid Module, also select Sync Service.
  2. On the Policy Server Connection screen, enter the IP address of the Policy Server for this Log Server, and the Policy Server communication port (55806, by default).
  3. On the Policy Broker Connection screen, enter the management server IP address and the Policy Broker communication port (55880, by default), and then click Next.
    In an appliance-based deployment, Policy Broker is installed on the full policy source appliance. Enter the IP address of the appliance’s C interface and use the default port.
  4. If the Log Server server machine does not include a supported version of the Microsoft SQL Server Native Client and related tools, you are prompted to install the required components.

    Depending on your current configuration, the Native Client installer may run silently in the background, or prompt you for input.

    • When the Native Client installer runs in the background, you will know the process is complete when the Forcepoint installer continues to the next screen. This may take a few minutes.
    • When the Native Client installer runs in the foreground, follow the prompts to complete the installation. Note that if you are prompted to reboot the machine, do not reboot at this point. Instead, complete the Forcepoint software installation first, then reboot.
  5. On the Database Information screen, enter the hostname or IP address of the machine on which a supported database engine is running. If a supported database engine is detected on this machine, its IP address is already entered by default. To use a database engine on a different machine, enter its IP address instead.

    If you are using SQL Server clustering, enter the virtual IP address of the cluster. (Clustering is only supported with Forcepoint Email Security and Forcepoint Web Security.)

    After entering the IP address of the database engine machine, choose how to connect to the database:

    • Select Trusted connection to use a Windows account to connect to the database. Enter the user name and password of a trusted account with local administration privileges on the database machine. The trusted account you specify here should be the same as that with which you logged onto this machine before starting the Forcepoint Security Installer.

      If you use a trusted account, an additional configuration step is required after installation to ensure that reporting data can be displayed in the Web module of the Security Manager. See How do I configure services to use a trusted connection?.

    • Select SQL Server Authentication to use a SQL Server account to connect to the database. Enter the user name and password for a SQL Server account that has administrative access to the database. The SQL Server password cannot be blank, or begin or end with a hyphen (-).
      Note: The database engine must be running to install Forcepoint reporting components. The installer will test for a connection to the specified database engine when you click Next on the Database Information screen. The installer cannot proceed unless a successful connection can be made.
  6. On the Log Database Location screen, accept the default location for the Log Database files, or select a different location. Then click Next.

    The default database location information is taken from the Management Infrastructure configuration.

    • If the database engine is on another machine, the default location is C:\Program Files\Microsoft SQL Server on that machine.
    • If the database engine is on this machine (not recommended), the default location is C:\Program Files \Websense.
    Important: The directory you specify for the Log Database files must already exist. The installer cannot create a new directory.
  7. On the Optimize Log Database Size screen, select either or both of the following options and then click Next.
    • Log web page visits: Enable this option to log one record (or a few records) with combined hits and bandwidth data for each web page requested rather than a record for each separate file included in the web page request. This results in fewer records and therefore smaller databases, allowing for potentially faster report generation and longer storage capacities. Deselect this option to log a record of each separate file that is part of a web page request, including images and advertisements. This results in more precise reports, but creates a much larger database and causes reports to generate more slowly.
    • Consolidate requests: Enable this option to combine Internet requests that share the same value for all of the following elements, within a certain interval of time (1 minute, by default):
      • Domain name (for example: www.forcepoint.com)
      • Category
      • Keyword
      • Action (for example: Category Blocked)
      • User/workstation
  8. On the Installation Directory screen, accept the default installation path, or click Choose to specify another path, and then click Next.

    The installation path must be absolute (not relative). The default installation path is:

    C:\Program Files\Websense\Web Security

    The installer creates this directory if it does not exist.

    Important: The full installation path must use only ASCII characters. Do not use extended ASCII or double-byte characters.

    The installer compares the installation’s system requirements with the machine’s resources.

    • Insufficient disk space prompts an error message. The installer closes when you click OK.
    • Insufficient RAM prompts a warning message. The installation continues when you click OK. To ensure optimal performance, increase your memory to the recommended amount.
  9. On the Pre-Installation Summary screen, verify the information shown.
    The summary shows the installation path and size, and the components to be installed.
  10. Click Next to start the installation. An Installing progress screen is displayed. Wait for the installation to complete.
  11. On the Installation Complete screen, click Done.
  12. After installing Log Server, restart the management server machine.
    Important: When Log Server is not installed on the management server, be sure to restart the management server before creating scheduled jobs in presentation reports. Any scheduled jobs you create before restarting the server cannot be saved properly and will be lost, even if they appear to work for a period of time.