Upgrading to Websense Web Security Gateway Anywhere to v7.6.0

Upgrading to Websense Web Security Gateway Anywhere to v7.6.0

Applies to

Web Security Gateway Anywhere v7.5, v7.6.0

In this topic

Versions supported for upgrade

TRITON Unified Security Center

Upgrade instructions (software-based)

Upgrade instructions (appliance-based)

Post-Upgrade configuration

Versions supported for upgrade

Direct upgrades to version 7.6 are supported from version 7.5 Websense Web Security Gateway Anywhere.

TRITON Unified Security Center

Version 7.6 centralizes management of all Websense solutions into the TRITON Unified Security Center. TRITON - Web Security and - Data Security are now modules of the TRITON Unified Security Center.

Because both the TRITON - Web Security and - Data Security modules are required for Web Security Gateway Anywhere, TRITON Unified Security Center must be installed on a Windows Server 2008 R2 machine. As part of the upgrade process, you will remove the prior-version TRITON - Web Security, TRITON - Data Security, and Data Security Management Server from their current locations and install them on them the Windows Server 2008 R2 machine as part of the TRITON Unified Security Center.

Upgrade instructions (software-based)

This section describes how to upgrade a software-based deployment of Web Security Gateway Anywhere from v7.5 to v7.6. For information on how to upgrade Web Security software to v7.6.2, refer to Upgrading Websense software to the latest v7.6.x.

Prior to upgrade, see Upgrading or Merging Administrators for important information about how administrator accounts are handled by the upgrade process.

1.	Configure current Web Security network administrators to be authenticated against a version 7.6-supported directory service if necssary. See Upgrading or Merging Administrators for more information.

2.	Upgrade Web Security components.

See Upgrading Web Security or Web Filter to 7.6.0 for instructions.

Important  When upgrading Web Security components be sure to choose to remove the prior-version TRITON - Web Security from its machine. For version 7.6 both TRITON - Web Security and - Data Security must run on the same Windows Server 2008 R2 machine as part of the TRITON Unified Security Center.

3.

On a Windows Server 2008 R2 machine, create a TRITON management server, installing only the Web Security module of the TRITON Unified Security Center. This machine is referred to as the unified TRITON management server in the steps below. You will "migrate" Data Security Management Server to this machine later in this procedure.

See Creating a TRITON Management Server. When following those instructions, be sure to do the following:

On the Installation Type screen: under TRITON Unified Security Center, select only Web Security.

In the Web Security installer, on the Policy Server Connection Screen, be sure to specify the main Policy Server you upgraded in Step 2 above.

When you have completed the procedure(s) in Creating a TRITON Management Server, return to these instructions.

4.	Log in to the TRITON Unified Security Center on the newly-created unfied TRITON management server and assign email addresses to the Web Security local administrator accounts upgraded from the prior-version system. See Upgrading or Merging Administrators for more information.

5.	Upgrade Data Security components.

See Upgrading to Data Security 7.6.0 for instructions. Upgrade all Data Security components, including Data Security Management Server. This creates a version 7.6 TRITON Unified Security Center, with Data Security module enabled. This machine is referred to as the Data Security TRITON management server in remaining steps below. You will back up and then remove components from this machine later in this procedure.

6.	On the Data Security TRITON management server (see Step 5) back up TRITON data in the TRITON Unified Security Center running on that machine.

See the TRITON Unified Security Center Help for instructions.

7.	On the Data Security TRITON management server, back up Data Security data in the TRITON Unified Security Center running on that machine.

See the TRITON - Data Security Help for instructions.

8.	On the unified TRITON management server (see Step 3) restore the TRITON data backup from the Data Security machine:

a.	Start the Websense installer.

See Starting the Websense installer.

b.	In the installer, for TRITON Infrastructure, select the Modify link.

c.	Accept the defaults in the installer screens and click Next, until you reach the Restore Data from Backup screen.

d.	On the Restore Data from Backup screen, select Use backup data and Browse to the location of the TRITON data backup from the Data Security machine.

Note  If the backup is located on another machine, map a network drive to its location. Otherwise, you will be unable to select it in when you click Browse.

e.	Select Merge administrators into existing installations (do not overwrite).

f.	Click Next.

If the following message appears, click Yes to proceed:

The backup located at <path> is from the same release but from a different build (n). Proceed?

Build differences do not affect restoration of the backup. Click Yes to continue with restoring the backup.

g.	Proceed through the remaining installer screens, accepting defaults, and click Finish.

9.	Add Data Security Server to the unified TRITON management server.

See Installing Data Security Components for instructions.

10.	Restore the Data Security backup you created on the Data Security TRITON management server (in Step 7).

See Adding or modifying Data Security componentsfor instructions. As you follow those instructions, when you reach the Restore Data From Backup screen, be sure to choose to restore the backup you created in Step 7. See the TRITON - Data Security Help for more information.

11.	Log into the unified TRITON Unified Security Center. In the Data Security module, click Deploy.

See Accessing the TRITON Unified Security Center for instructions.

12.	Remove Data Security components from the Data Security TRITON Unified Security machine.

See Removing Data Security components for instructions. Return here when done.

13.	Remove TRITON Infrastructure from the Data Security TRITON management server.

See Removing TRITON Infrastructure for instructions. Return here when done.

14.	Upgrade Content Gateway.

See Upgrading Websense Content Gateway to 7.6.0.

Upgrade instructions (appliance-based)

Complete the following steps to upgrade an appliance-based deployment of Web Security Gateway Anywhere from v7.5 to v7.6.

Prior to upgrade, see Upgrading or Merging Administrators for important information about how administrator accounts are handled by the upgrade process.

1.	Configure current Web Security network administrators to be authenticated against a version 7.6-supported directory service if necssary. See Upgrading or Merging Administrators for more information.

2.	If Policy Broker and Policy Server are running off-appliance, upgrade them now.

See Upgrading Web Security or Web Filter to 7.6.0 for instructions. Do not upgrade any other off-appliance components at this point.

3.	Upgrade the V-series appliances in your deployment.

See Upgrading V-Series Appliance to 7.6 for instructions.

4.	Upgrade off-appliance Web Security components.

See Upgrading Web Security or Web Filter to 7.6.0 for instructions.

Important  When upgrading Web Security components be sure to choose to remove the prior-version TRITON - Web Security from its machine if it is located off-appliance. For version 7.6 both TRITON - Web Security and - Data Security must run on the same Windows Server 2008 R2 machine as part of the TRITON Unified Security Center.

5.	If TRITON - Web Security is running on an appliance, disable it:

a.	Log on to the Appliance Manager (https://<C interface IP address>:9447/appmng)

b.	Under Configuration, select Web Security Components.

c.	Under TRITON - Web Security, select Disabled.

d.	Click Save.

The disabling process may take several minutes. Wait for it to complete.

e.	When the process completes successfully, click the TRITON Configuration link that is displayed below the Disabled option.

If a certificate error is displayed, click the continue or accept option to start the download.

f.	Save the TRITON backup file (EIP_bak.tgz) in a convenient location. The file will be used to restore your settings to the unified TRITON management server (which you will create in Step 6).

6.

On a Windows Server 2008 R2 machine, create a TRITON management server, installing only the Web Security module of the TRITON Unified Security Center. This machine is referred to as the unified TRITON management server in the steps below. You will "migrate" Data Security Management Server to this machine later in this procedure.

See Creating a TRITON Management Server for instructions. Important: Before going to those instructions read the following; they are specific options you should select during the creation of a TRITON management server:

a.	In the Websense installer, on the Installation Type screen, under TRITON Unified Security Center, select only Web Security.

b.	In the Web Security installer, on the Policy Server Connection Screen, be sure to specify the main Policy Server you upgraded in Step 2 or Step 3 (depending on the location of the main Policy Server) above.

7.	Restore the TRITON backup from the appliance:

a.

Use a utility like 7-Zip to extract and unpack the contents of the appliance TRITON backup file to a temporary directory on this machine. When the process is complete, you should have a directory called EIP_bak that contains, among other files, EIP.db and httpd-data.txt, as well as apache and tomcat folders.

b.	Start the Websense installer.

See Starting the Websense installer.

c.	In the installer, for TRITON Infrastructure, select the Modify link.

d.	Accept the defaults in the installer screens and click Next, until you reach the Restore Data from Backup screen.

e.	On the Restore Data from Backup screen, select Use backup data and Browse to the location of the TRITON data backup from the Data Security machine.

Note  If the backup is located on another machine, map a network drive to its location. Otherwise, you will be unable to select it in when you click Browse.

f.	Select Merge administrators into existing installations (do not overwrite).

g.	Click Next.

If the following message appears, click Yes to proceed:

The backup located at <path> is from the same release but from a different build (n). Proceed?

Build differences do not affect restoration of the backup. Click Yes to continue with restoring the backup.

h.	Proceed through the remaining installer screens, accepting defaults, and click Finish.

8.	Log in to the TRITON Unified Security Center on the newly-created unfied TRITON management server and assign email addresses to the Web Security local administrator accounts upgraded from the prior-version system. See Upgrading or Merging Administrators for more information.

9.	Upgrade Data Security components.

See Upgrading to Data Security 7.6.0 for instructions. Upgrade all Data Security components, including Data Security Management Server. This creates a version 7.6 TRITON Unified Security Center, with Data Security module enabled. This machine is referred to as the Data Security TRITON management server in remaining steps below. You will back up and then remove components from this machine later in this procedure.

10.	On the Data Security TRITON management server (see Step 9) back up TRITON data in the TRITON Unified Security Center running on that machine.

See the TRITON Unified Security Center Help for instructions.

11.	On the Data Security TRITON management server, back up Data Security data in the TRITON Unified Security Center running on that machine.

See the TRITON - Data Security Help for instructions.

12.	On the unified TRITON management server (see Step 6) restore the TRITON data backup from the Data Security machine.

See the TRITON Unified Security Center Help for instructions.

13.	Add Data Security Server to the unified TRITON management server.

See Installing Data Security Components for instructions.

14.	Restore the Data Security backup you created on the Data Security TRITON management server (in Step 10).

See Adding or modifying Data Security componentsfor instructions. As you follow those instructions, when you reach the Restore Data From Backup screen, be sure to choose to restore the backup you created in Step 10. See the TRITON - Data Security Help for more information.

15.	Log into the unified TRITON Unified Security Center. In the Data Security module, click Deploy.

See Accessing the TRITON Unified Security Center for instructions.

16.	Remove Data Security components from the Data Security TRITON Unified Security machine.

See Removing Data Security components for instructions. Return here when done.

17.	Remove TRITON Infrastructure from the Data Security TRITON management server.

See Removing TRITON Infrastructure for instructions. Return here when done.

Post-Upgrade configuration

Reregister Data Security Agents with the TRITON management server

Reregister Data Security endpoints and agents (e.g., SMTP, Printer, ISA) with the Data Security Management Server on the unified TRITON management server. See the TRITON - Data Security Help for more information.

Reregister Content Gateway with Data Security Management Server

Reregister Content Gateway with the Data Security Management Server. See Registering Websense Content Gateway with Data Security.

Verify administrator accounts

Verify and resolve any issues with TRITON administrator accounts created by the upgrade process (for example, missing email addresses or modified user names). See Upgrading or Merging Administrators for more information.

New security certificate

After upgrade, you must install or permanently accept a new security certificate issued by Websense, Inc. to avoid seeing a certificate error when you first launch TRITON Unified Security Center. The prior-version certificate (accepted when accessing TRITON - Web Security or - Data Security) is no longer valid.

An SSL connection is used for secure, browser-based communication with TRITON Unified Security Center. This connection uses a security certificate issued by Websense, Inc. Because the supported browsers do not recognize Websense, Inc., as a known Certificate Authority, a certificate error is displayed the first time you launch TRITON Unified Security Center from a new browser. To avoid seeing this error, you can install or permanently accept the certificate within the browser. See the Websense Knowledge Base for instructions.

Upgrading to Websense Web Security Gateway Anywhere to v7.6.0