Important  Read the hotfix readme file before applying a hotfix.

Action and Syntax	Details
Display information about applied hotfixes. show hotfix history	The list displays all hotfixes installed or uninstalled on the appliance.
View a list of available appliance hotfixes. show hotfix list [--id <hotfix_id>] [--module <app|web|proxy|email>]	The simple command, with no parameters, displays all hotfixes available for download from Forcepoint servers or residing on the appliance. Note the name and ID of the hotfix file you want to install. If you want to download a hotfix to a remote filestore, you will need the hotfix file name. Download hotfixes from the Forcepoint.com > My Account > Downloads > Hotfixes & Patches page. Select a hotfix to see a detailed description. If you want to download a hotfix directly to each appliance, you will need the hotfix ID. Parameters can narrow the scope of hotfixes displayed: Use --id to see information about a specific hotfix. Use --module and specify a module type to see hotfixes for the appliance module (app), Web module (web), Content Gateway module (proxy), or Email Security module (email). Example: (view)# show hotfix list --module web
Display the status of the hotfix download process. show download hotfix --file <filename> --id <hotfix id>	The load process is asynchronous, allowing the administrator to perform other CLI tasks while the download occurs. This command lets the administrator check to see if the download is complete. id: Specific hotfix ID. File: Specific hotfix file name. Example: (view)# show download hotfix --file myhotfix.rpm
Download or upload a hotfix to the appliance. load hotfix [--id <hotfix_id>] [--file <name>] [--location <alias>]	Specify the hotfix ID to download a hotfix from Forcepoint servers, or specify a hotfix file name and location to upload the hotfix from a remote filestore. Entering the command with no parameters will display a list of hotfixes. Use the "show hotfix --id" command to find the hotfix ID on the download server. The filestore alias is created with the "set filestore" command. Enter the "load hotfix --location <alias>" command with no file name to select the hotfix from a list of files on the filestore. Note that if you change the name of a hotfix file in a filestore, the option cannot be used. Example: (config)# load hotfix --location myfilestore --file myhotfix.rpm
Stop, pause, or resume a hotfix download in progress. cancel download hotfix [--id <id>] [--file <filename>]   pause download hotfix [--id <id>] [--file <filename>]   resume download hotfix [--id <id>] [--file <filename>]	Either the "file" or the "ID" parameter is required. Examples: (config)# cancel download hotfix --file myhotfix.rpm (config)# pause download hotfix --id 2
Install a hotfix file on the appliance. install hotfix [--id <hotfix_id>]	If no hotfix ID is specified, you can choose from a list of available hotfix files. Example: (config)# install hotfox --id 3
Remove a hotfix file from the appliance. delete hotfix [--id <hotfix_id>] [--file <filename>	This removes hotfix files that have been transferred to the appliance, but not installed. If no hotfix ID is specified, you can choose from a list of available hotfix files. Example: (config)# delete hotfix --id 4 (config)# delete hotfix --file myhotfix.rpm
Uninstall a hotfix from the appliance. uninstall hotfix [--id <hotfix_id>]	If no hotfix ID is specified, you can choose from a list of installed hotfixes. Example: (config)# uninstall hotfix --id 4

Important  Read the release notes before applying an upgrade.

Important  All TRITON software in your deployment must be running the same version. A new appliance at your site should immediately be upgraded to the version running in your deployment. See the Forcepoint Certified Product Matrix for information about the software module versions that are compatible with each appliance version.

Action and Syntax	Details
Display available upgrades, both remote and on the appliance. show upgrade --list --history --status	List: Displays a list of available appliance and software upgrades. History: Displays the upgrades that have been installed on this appliance. Status: Displays status of upgrade package download and installation.
Download or upload an upgrade file. load upgrade [--file <filename>] [--location <file location>]	If this command is run with no parameters, you will be prompted to download an upgrade from a list. File: (optional unless the filestore is TFTP) Name of the upgrade file. Location: (optional) Any defined remote filestore alias. A TFTP filestore requires the file parameter. Example: (config)# load upgrade --file newpatch.rpm --location mypatchserver
Display the upgrade download status. show download --file <filename>	File: Name of the upgrade file. Example: (view)# show download --file newpatch.rpm
Cancel an upgrade download. cancel download --file <filename>	This command will delete the file. File: Name of the upgrade file.
Pause an upgrade download. pause download --file <filename>	File: Name of the upgrade file.
Resume a paused upgrade download. resume download --file <filename>	File: Name of the upgrade file.
Install an upgrade file on the appliance. install upgrade --file <upgrade_file> [--force <upgrade_file>	If this command is run with no parameters, you will be prompted to install an upgrade from a list. File: Name of the upgrade file. Force: (optional) Force the upgrade after ISO verification failure. There must be at least one failed install for a force to work. Examples: (config)# install upgrade --file App-upgrade.iso   (config)# install upgrade --file App-upgrade.iso --force App-upgrade.iso