Installation and upgrade

Release Notes | IQ-Series Appliance | Updated: 26-Sep-2016


Applies to:	Websense IQ-Series appliance v1.7

Installation

Installation and set up for the Forcepoint IQ-Series appliance are summarized on the Quick Start poster that was shipped with your appliance. Click here to view a copy of the quick start guide.

See the Getting Started Guide for information about system configuration.


	Important Use of Microsoft Internet Explorer 8 (or below) on a Windows XP machine is not supported.

If your network includes a firewall, you need to ensure that destination TCP ports are open for connection to the cloud service. By default, the appliance is configured to use standard destination ports 80 and 443 for these connections.


	Note Upgrade from a previous appliance version that uses different default port settings does not automatically change port configuration settings. If you want to use destination ports 80 and 443, you should modify appliance settings manually after the upgrade process.

Alternatively, and depending on your corporate firewall policy, you can configure your appliance to use the following ports, which are used for non-appliance connections to the cloud service:


Port	Purpose
8002	Configuration and policy update information retrieval from Websense blueSKY. This port must be open for an IQ-Series appliance to retrieve periodic configuration setting and policy updates from the cloud service.
8081	Proxy service. This is where Websense cloud-based content analysis is provided.
80	Notification page components. The default notification pages refer to style sheets and images served from the Websense blueSKY platform. For these pages to appear correctly, this web site is accessed directly (i.e., not through Websense blueSKY).
443	Service administration. The Websense administration portal is similarly unproxied. Otherwise, it would be possible for you to accidentally block access and then be unable to rectify the situation.

You can switch between the standard and alternative ports at any time using the appliance command-line interface (CLI). See the Getting Started Guide for detailed instructions about switching port settings.

You should also open the outbound Network Time Protocol (NTP) port (UDP 123) to allow time/clock synchronization in the system.


	Note The transfer of new password and appliance registration information between the cloud portal and the appliance takes several minutes. You may experience a delay when logging in after a change is made to these settings.

Upgrade

Use the following steps to upgrade from a previous version of the Websense IQ-Series appliance:

Click Network Devices in the cloud portal.

Select the appropriate appliance for the upgrade and click Properties & Statistics.

Click Version History.

Find the desired upgrade and click the Download icon in the Action column. This operation downloads the upgrade to the selected appliance.

Clicking the View icon in the Description column opens the Release Notes for that upgrade.

In the IQ-Series appliance Configuration > Upgrade Management page, find the upgrade in the table at the top of the screen. The upgrade status should be Downloaded (you may need to refresh the screen to see the change). Click the Install icon to install the upgrade.


	Important Upgrade status may display as "Failed" after a successful upgrade. This incorrect error message may appear if you refresh the appliance user interface immediately after the upgrade operation. Please wait approximately 5 minutes to refresh the user interface after the upgrade. If the problem persists after this time period, please contact Forcepoint Technical Support.