Important  Read the hotfix readme file before applying a hotfix.

Action and Syntax	Details	Product
Display information about applied hotfixes. show hotfix history	The list displays all hotfixes installed or uninstalled on the appliance.	All
Display a list of available appliance hotfixes. show hotfix list [--id <hotfix_id>] [--module <app|web|proxy|email>]	The simple command, with no parameters, displays all hotfixes available for download from Forcepoint servers or residing on the appliance. Note the name and ID of the hotfix file you want to install. If you want to download a hotfix to a remote filestore, you will need the hotfix file name. Download hotfixes from the Forcepoint.com > My Account > Downloads > Hotfixes & Patches page. Select a hotfix to see a detailed description. If you want to download a hotfix directly to each appliance, you will need the hotfix ID. Parameters can narrow the scope of hotfixes displayed: Use --id to see information about a specific hotfix. Use --module and specify a module type to see hotfixes for the appliance module (app), Web module (web), Content Gateway module (proxy), or Email Security module (email). Example: (view)# show hotfix list --module web	All
Display the status of the hotfix download process. show download hotfix --file <filename> --id <hotfix id>	The load process is asynchronous, allowing the administrator to perform other CLI tasks while the download occurs. This command lets the administrator check to see if the download is complete. ID: (optional) Specific hotfix ID. File: (optional) Specific hotfix file name. Example: (view)# show download hotfix --file myhotfix.rpm	All
Load the hotfix from a server or filestore to the appliance. load hotfix [--id <hotfix_id>] [--file <hotfix_name>] [--location <filestore_alias>] [--url <hotfix_url> --auth-required --no-cert-verification>]	Use the "install hotfix" command to install the hotfix on the appliance. Specify the hotfix ID to load a hotfix from Forcepoint servers, or specify a hotfix file name and location to load the hotfix from a remote filestore. Entering the command with no parameters will display a list of hotfixes. Use the "show hotfix --id" command to find the hotfix ID on the download server. The filestore alias is created with the "set filestore" command. Enter the "load hotfix --location <alias>" command with no file name to select the hotfix from a list of files on the filestore. Note that if you change the name of a hotfix file in a filestore, the option cannot be used. Auth-Required: (optional) Use with the --url parameter to specify whether a password is needed. File: Name of the hotfix file. ID: (optional) The ID associated with an available hotfix. Location: Any defined remote filestore alias. No-Cert-Verification: (optional) Used with the --url option to ignore SSL certificate checks. Only valid with HTTPS. URL: (optional) The URL of the hotfix to load, if adding from a URL rather than from a filestore. Format: <url type>://<user>@<ip or hostname>/<filepath> Example: (config)# load hotfix --location myfilestore --file myhotfix.rpm	All
Stop, pause, or resume a hotfix download in progress. cancel download hotfix [--id <id>] [--file <filename>]   pause download hotfix [--id <id>] [--file <filename>]   resume download hotfix [--id <id>] [--file <filename>]	This command will cancel the file download. To cancel a paused download, resume the download and then cancel. Examples: (config)# cancel download hotfix --file myhotfix.rpm (config)# pause download hotfix --id 2	All
Install a hotfix file on the appliance. install hotfix [--id <hotfix_id>]	If no hotfix ID is specified, you can choose from a list of available hotfix files. Example: (config)# install hotfix --id 3	All
Remove a hotfix file from the appliance. This command does not uninstall the hotfix. delete hotfix [--id <hotfix_id>] [--file <filename>	This removes hotfix files that have been transferred to the appliance, but not installed. If no hotfix ID is specified, you can choose from a list of available hotfix files. ID: (optional) ID of the hotfix file to delete. File: (optional) Filename of the hotfix file to delete. Example: (config)# delete hotfix --id 4 (config)# delete hotfix --file myhotfix.rpm	All
Uninstall a hotfix from the appliance. uninstall hotfix [--id <hotfix_id>]	If no hotfix ID is specified, you can choose from a list of installed hotfixes. Example: (config)# uninstall hotfix --id 4	All
Display the current Internet proxy information. show internet_proxy		All
Configure the proxy the appliance will use to contact Forcepoint servers for hotfixes/upgrades. set internet_proxy --ip <ip address> --port <port> [--user <username>] [--password <password>]	IP: IP address. Port: Proxy port. User: (optional) User name. Password: (optional) Password. Example: (config)# set internet_proxy --ip 10.10.10.7 --port 3128 --user proxyuser --password mypassword	All
Delete the Internet proxy configuration. delete internet_proxy		All

Important  Read the release notes before applying an upgrade.

Important  All TRITON Architecture software in your deployment must be running the same version. A new appliance at your site should immediately be upgraded to the version running in your deployment. See the Forcepoint Certified Product Matrix for information about the software module versions that are compatible with each appliance version.

Action and Syntax	Details	Product
Display the upgrades that have been installed on this appliance. show upgrade history	Example: (view)# show upgrade history	All
Display a list of upgrades available on Forcepoint servers. show upgrade list	Example: (view)# show upgrade list	All
Display status of upgrade package download and installation. show upgrade status	Example: (view)# show upgrade status	All
Download or upload an upgrade file. load upgrade [--file <name>] [--location <filestore_alias>] --url <hotfix_url> --auth-required --no-cert-verification>]	If this command is run with no parameters, you will be prompted to download an upgrade from a list. Auth-Required: (optional) Use with the --url parameter to specify whether a password is needed. File: (optional unless the filestore is TFTP) Name of the upgrade file. ID: (optional) The ID associated with an available hotfix. Location: Any defined remote filestore alias. A TFTP filestore requires the file parameter. No-Cert-Verification: (optional) Used with the --url option to ignore SSL certificate checks. Only valid with HTTPS. URL: (optional) The URL of the hotfix to load, if adding from a URL rather than from a filestore. Format: <url type>://<user>@<ip or hostname>/<filepath> Example: (config)# load upgrade --file newpatch.rpm --location mypatchserver	All
Display the upgrade download status. show download upgrade --file <filename>	File: (optional) Name of the upgrade file. Example: (view)# show download upgrade --file newpatch.rpm	All
Cancel an upgrade download. cancel download upgrade --file <filename>	This command will cancel the file download. To cancel a paused download, resume the download and then cancel. File: (optional) Name of the upgrade file. Example: (config)# cancel download upgrade --file newpatch.rpm	All
Pause an upgrade download. pause download upgrade --file <filename>	File: (optional) Name of the upgrade file. Example: (config)# pause download upgrade --file newpatch.rpm	All
Resume a paused upgrade download. resume download upgrade --file <filename>	File: (optional) Name of the upgrade file. Example: (config)# resume download upgrade --file newpatch.rpm	All
Install an upgrade file on the appliance. install upgrade --file <upgrade_file>	If this command is run with no parameters, you will be prompted to install an upgrade from a list. File: Name of the upgrade file. Examples: (config)# install upgrade --file App-upgrade.iso	All