Verify Filtering Service Internet access

To download the Forcepoint URL Database, the Filtering Service machine sends an HTTPS post command to the download server download.forcepoint.com.

To make sure the Filtering Service machine has the Internet access necessary to communicate with the download server, you can:

• For non-appliance installations, open a browser on the Filtering Service machine and enter the following URL:

  https://download.forcepoint.com/

  If the machine is able to open an HTTPS connection to the site, a redirect page is displayed, and then the browser displays the Forcepoint home page.

• From the command prompt or shell, enter the following command:

  ping download.forcepoint.com

  Verify that the ping receives a reply from the download server.

• Use telnet to connect to download.forcepoint.com 443. If you see a cursor and no error message, you can connect to the download server.

If the Filtering Service machine cannot connect to the download server:

• Enable communication on port 443, or the port designated in your network for HTTPS traffic, for the network interface used by Filtering Service. On Forcepoint appliances, this is usually the C interface.
• Verify that the Filtering Service network interface is using the correct DNS settings.
• Make sure that Filtering Service is configured to use any necessary proxy servers to connect to the Internet (see Verify Filtering Service firewall or proxy server settings)

Also make sure that your gateway or firewall does not include any rules that block HTTPS traffic from the Filtering Service machine.