Step 1: Upgrade the Policy Broker machine

You must upgrade the machine that hosts Web Policy Broker first, regardless of which other components on are on the machine. Policy Broker may reside on:

  • A full policy source appliance
  • A Windows Server 2008 R2 SP1, 2012, or 2012 R2 machine.
  • A RHEL 6.5 or later, 7.0, 7.1, or 7.2 machine.

Any other components on the Policy Broker machine are upgraded along with Policy Broker.

If your configuration includes a primary Policy Broker and one or more replica Policy Brokers, you must upgrade the primary Policy Broker first.

Upgrade replica Policy Brokers after the primary has been upgraded and before attempting to upgrade any Policy Servers associated with the replicas. If Policy Server is installed on the Policy Broker machine, it is upgraded at the same time.

If Policy Broker resides on the management server, running the Forcepoint Security Installer also upgrades the infrastructure and web, data, and email management components as described in Step 5: Upgrade the management server. Ensure you also follow the steps in Post-upgrade steps to configure the management server.

For a software installation, run the Forcepoint Security Installer or Web Linux installer. The instructions in this section cover the upgrade of a Windows machine. For instructions on upgrading an appliance or a Linux machine, see the Upgrade Guide: Forcepoint Web Security.

Steps

  1. Make sure that no administrators are logged on to the management console.
  2. Log on to the installation machine with an account having domain and local administrator privileges.
    Important: If you are upgrading Log Server on this machine and it uses a Windows trusted connection to access the Log Database, you must log on to this machine using the same trusted account.
  3. Close all applications and stop any antivirus software.
    Warning: Be sure to close the Windows Event Viewer, or the upgrade may fail.
  4. Download the Forcepoint Security Windows Installer ForcepointDLP1030Setup.exe:
    1. Log on to the Forcepoint Downloads page.
    2. Select DLP Core from the Product.
    3. Click Forcepoint Security Manager for DLP v10.3 from the Installer list.
      Note: Only latest version is available under Installer list. If you want to select the previous versions, then use Click here from DLP Core.
    4. Click Download in the Product Installer page to download the Forcepoint Security Installer ForcepointDLP1030Setup.exe.

    The installer and its extracted files require approximately 7 GB of disk space.

  5. Right-click ForcepointDLP1030Setup.exe and select Run as administrator to launch the installer. A progress dialog box appears, as files are extracted.
    The installer detects Web Security components from an earlier version and asks whether you want to proceed.
  6. Click OK.
  7. On the installer Introduction screen, click Next.
    The Installer Dashboard remains on-screen, behind the installer screens mentioned in the remaining steps.
  8. On the Upgrade screen, select Start the upgrade, then click Next.
  9. Accept the subscription agreement. When you click Next, a Stopping All Services progress message appears. Wait for services to be stopped.

    The Pre-Upgrade Summary screen appears when the services have been stopped.

    In some cases, the installer may be unable to stop the services. If this occurs, you are prompted to stop them manually (you do not need to exit the installer to do this). Use the Windows Services tool to stop the services, then return to the installer.

  10. On the Pre-Upgrade Summary screen, review the list of components that will be upgraded, and then click Next.

    Critical files are backed up and install properties initialized, and then the upgrade begins.

    If Policy Broker resides on the management server, or on the same machine as Log Server, the upgrade process checks for a required version of Microsoft SQL Server Native Client and related tools and installs them, if necessary.

  11. Wait for the Upgrade Complete screen to appear. Click Done to exit the installer.
  12. Reboot the machine.
    Important: The machine must be rebooted to complete the upgrade process.
  13. If you stopped your antivirus software, restart it.