New in X-Series v8.1.0

60214 | Release Notes | X-Series Appliances | 19-October-2015

TRITON APX

Upgrade to 8.1.0 from 8.0.x and 7.8.x

Express upgrade served from a local filestore

X10G G2 blade server

Category and Analytic feedback

Command Line Interface (CLI) enhancements

Password requirements for "admin"

TRITON APX

Version 8.0.0, released in February, 2015, was the first release to use the new, simplified product naming of the familiar Websense TRITON product line.

The X-Series and V-Series appliance names did not change.

Release 8.1.0 maintains the new naming, as shown in the table.

Version 7.8.x Product Name

Version 8.x Product Name

Websense Web Filter

Websense Web Filter & Security

Websense Web Security

Websense Web Filter & Security

Websense TRITON Web Security Gateway

Websense TRITON AP-WEB

Websense TRITON Web Security Gateway Anywhere

Websense TRITON AP-WEB with:

Web Hybrid Module

Web DLP Module

Web Sandbox Module

Websense TRITON Email Security Gateway

Websense TRITON AP-EMAIL

Websense TRITON Email Security Gateway Anywhere

Websense TRITON AP-EMAIL with:

Email Hybrid Module

Upgrade to 8.1.0 from 8.0.x and 7.8.x

Existing deployments can easily upgrade from versions 8.0.x and 7.8.x. Follow the procedure described in the X-Series upgrade instructions. The procedure includes preparing and using a local filestore. This is a more efficient process because the upgrade patch files are downloaded from the Websense patch file download server only once.

Express upgrade served from a local filestore

In version 8.0.0, a simpler, more efficient upgrade method, called express upgrade, was introduced. With express upgrade, when the CLI load patch command is run, in addition to listing all of the available individual module patches, the process inventories modules and versions on the appliance and offers an express upgrade option in which load patch both downloads all of the patches needed to upgrade to the latest version, and installs those patches in the correct order, thereby upgrading the appliance to the latest version in a single step.

Beginning with version 8.1.0, you can prepare a local filestore to offer the express upgrade option. This can be a big help because there are often many blades to upgrade and the time needed to download patches from a local filestore is usually much less than downloading them from the Websense patch file server. The Appliance controller module (APP) must be at version 8.1.0 to use this feature.

To support express upgrade from a local filestore, all of the individual patches that may be needed to upgrade a blade to the latest version must be placed in the filestore. Without these, load patch may not offer an express upgrade package that upgrades all of the appliance modules.

How to prepare the filestore:

Using a computer that has access to the Internet, go to www.websense.com and log in to your MyWebsense account.

In MyWebsense, go to the Downloads page and select the Upgrades tab.

From the Product drop down list, select Websense X10G Base Configuration. For Version, select the version to which you want to upgrade.

Download all of the upgrade patch files directly to the filestore, or copy them from the download directory to the filestore. (The filestore—remote file location—is defined on each blade with the CLI set filestore command.)

On MyWebsense > Downloads > Upgrades, the patch files are available under these headings:

X10G Security Blade upgrade patch for x.x.x
The patch file name might be: Websense-Patch-App-8.1.1.rpm

TRITON AP-WEB upgrade patch for x.x.x
The patch file name might be: Websense-Patch-Web-8.1.1.tgz

Content Gateway upgrade patch for x.x.x
The patch file name might be: Websense-Patch-Proxy-8.1.1.tgz

TRITON AP-EMAIL upgrade patch for x.x.x
The patch file name might be: Websense-Patch-Email-8.1.1.tgz

When the downloads are done and the patch files have been moved to the filestore, if needed, confirm that the filestore contains all of the patches for the desired release. Log onto a blade's CLI, enter config mode, and run

load patch --location <filestore_name>

Confirm that all patches are listed.

To perform an express upgrade, select the Express upgrade package (first in the list). The required patches are downloaded to the blade. Installation begins automatically when the download is complete.


	Important To upgrade your X-Series deployment, always follow the instructions in the X-Series Upgrade Guide.

X10G G2 blade server

The X10G G2 security blade is the second generation X10G blade for the X10G chassis. It replaces the first generation model that was simply called the X10G blade (referred to in these release notes as the X10G G1 blade).

The X10G G2 blade is completely compatible with existing X-Series deployments. X10G G2 and X10G G1 blades can be mixed in an X-Series chassis without constraint.

In most deployments, the X10G G2 blade gives about a 15 percent performance improvement over the X10G G1 blade.

For more information, see the X10G G2 Release Notes.

Category and Analytic feedback

TRITON AP-WEB and TRITON AP-EMAIL are instrumented to send usage, category, and analytic data to Websense, Inc. Feedback data improves URL categorization and helps the Security Labs team assess and tune the effectiveness of the analytics, making the security solutions more robust.

When you initially configure an X10G blade with firstboot, you are asked whether you want to send feedback. The default setting is "yes" (enabled). If you don't want to send feedback, simply enter "no" at the prompt.

When you upgrade to a major new version, you may be prompted to confirm the setting. Again, the default is "yes". If you don't want to send feedback, simply enter "no".

Command Line Interface (CLI) enhancements

Diagnose

Network Management

Patch

Blade model added to appliance information

Diagnose

Diagnose is a new CLI mode (like view and config). Diagnose supports several commands that aid system testing and troubleshooting.

To enter diagnose mode, in the view context, enter "diagnose" on the command line. No password is needed.

Diagnose commands include:


arp	tcpdump
nc (netcat)	traceroute
nslookup	traceroute6
ping	wget
ping6	wget-proxy

For details, see the Diagnose section in Using the X-Series Command Line Interface (CLI).

Network Management

Virtual switch (vswitch) set and show commands are added to the CLI to set and view the STP bridge priority value.


Action and Syntax	Details
Show the virtual switch STP bridge priority setting. show vswitch	The output is: stp: priority : <stp bridge value>
Set the virtual switch STP bridge priority value. set vswitch stp --priority <4096-61440>	Priority: An integer in the range 4096-61440. For an explanation of Spanning Tree Protocol bridge priorities, including how the root is determined, see any quality text on layer 2 switching.

Patch

The show patch CLI command has been simplified. The command has 3 options.


Action and Syntax
View a list of available upgrade patches. show patch --list
Display the status of patches in the process of being downloaded or installed. show patch --status
Display a list of all patches that have been installed on this appliance. show patch --history