Appliance hotfixes and upgrades

CLI Guide | Forcepoint Appliances | v8.5.x

All upgrades and hotfixes can be listed in the CLI.

Files are downloaded over port 80. There are 2 ways to retrieve upgrade and hotfix files:

Download the upgrade or hotfix file directly from Forcepoint download servers:

Hotfix server: http://appliancehotfix.websense.com

Upgrade server: http://appliancepatch.websense.com

Use "ping" to test connectivity to these servers.

Go to the Forcepoint Downloads page. Download the needed files to a filestore, and then upload the files from the filestore to each appliance.

The speed of your Internet connection and the size of the file will influence which method is more efficient for your environment.

Hotfixes


	Important Read the hotfix readme file before applying a hotfix.

A hotfix applies a small patch to the system to fix a specific problem.

In the majority of cases, you are notified of hotfixes by:

A Technical Alert email.

A Forcepoint Technical Support agent (the agent provides the name of a specific hotfix to address the problem you reported).

As a best practice, install all security vulnerability hotfixes.

A hotfix may address an issue on any module running on your appliance.

A hotfix should not be recommended to you for a module that you have not configured or are not running on your appliance.

The hotfix facility on the appliance will not install a hotfix that is not valid for the module versions on your appliance.

A hotfix may have dependencies on one or more other hotfixes, in which case the hotfix facility will not allow the installation of the hotfix until after its dependencies are installed.

Hotfix files are downloaded to and worked with in a filestore that you specify.

Enter the hotfix ID using capital letters.

Use these commands to work with hotfixes:

show hotfix history
show hotfix list
load hotfix
install hotfix
uninstall hotfix
delete hotfix
show download hotfix
pause download hotfix
resume download hotfix
cancel download hotfix
show internet_proxy
set internet_proxy
delete internet_proxy

load hotfix

Load the hotfix from a server or filestore to the appliance.

load hotfix [--id <hotfix_id>] [--file <filename>]
[--location <filestore_alias>] [--url <hotfix_url>] [--auth-required] [--no-cert-verification>]


Parameter	Description
id	(Optional) The ID associated with an available hotfix.
file	Name of the hotfix file.
location	Any defined remote filestore alias.
url	(Optional) The URL of the hotfix to load, if adding from a URL rather than from a filestore. Format: <url type>://<user>@<ip or hostname>/<filepath>
auth-required	(Optional) Use with the --url parameter to specify whether a password is needed.
no-cert-verification	(Optional) Used with the --url option to ignore SSL certificate checks. Only valid with HTTPS.

Usage guidelines

All products.

Use the "install hotfix" command to install the hotfix on the appliance.

Specify the hotfix ID to load a hotfix from Forcepoint servers, or specify a hotfix file name and location to load the hotfix from a remote filestore. Entering the command with no parameters will display a list of hotfixes.

Use the "show hotfix --id" command to find the hotfix ID on the download server.

The filestore alias is created with the "set filestore" command.

Enter the "load hotfix --location <alias>" command with no file name to select the hotfix from a list of files on the filestore. Note that if you change the name of a hotfix file in a filestore, the option cannot be used.

Examples

(config)# load hotfix --location myfilestore --file myhotfix.rpm

show hotfix history

Display information about applied hotfixes.

Display a list of available appliance hotfixes.

show hotfix list [--id <hotfix_id>] [--module <app|web|proxy|email>]


Parameter	Description
id	(Optional) The ID of the hotfix.
module	Appliance, Web, Content Gateway (proxy), or Email

Usage guidelines

All products.

This command displays all hotfixes available for download from Forcepoint servers or residing on the appliance. Note the name and ID of the hotfix file you want to install.

If you want to download a hotfix to a remote filestore, you will need the hotfix file name.

Download hotfixes from the Forcepoint.com > My Account > Downloads > Hotfixes & Patches page. Select a hotfix to see a detailed description.

If you want to download a hotfix directly to each appliance, you will need the hotfix ID.

Examples

(view)# show hotfix list --module web

show download hotfix

Display the status of the hotfix download process.

show download hotfix --file <filename> --id <hotfix id>


Parameter	Description
file	The hotfix ID number.
id	The name of the hotfix file.

Usage guidelines

All products.

The load process is asynchronous, allowing the administrator to perform other CLI tasks while the download occurs.

This command lets the administrator check to see if the download is complete.

Examples

(view)# show download hotfix --file myhotfix.rpm

cancel download hotfix

pause download hotfix

resume download hotfix

Stop, pause, or resume a hotfix download in progress.

cancel download hotfix [--id <id>] [--file <filename>]

pause download hotfix [--id <id>] [--file <filename>]

resume download hotfix [--id <id>] [--file <filename>]


Parameter	Description
id	The hotfix ID number.
file	The name of the hotfix file.

Usage guidelines

All products.

The cancel download hotfix command will cancel the file download. To cancel a paused download, resume the download and then cancel.

Examples

(config)# cancel download hotfix --file myhotfix.rpm

(config)# pause download hotfix --id 2

install hotfix

Install a hotfix file on the appliance.

install hotfix [--id <hotfix_id>]


Parameter	Description
id	The hotfix ID number.

Usage guidelines

All products.

Examples

(config)# install hotfix --id 3

delete hotfix

Remove a hotfix file from the appliance. This command does not uninstall the hotfix.

delete hotfix [--id <hotfix_id>] [--file <filename>]


Parameter	Description
file	The name of the hotfix file.
id	The hotfix ID number.

Usage guidelines

All products.

This removes hotfix files that have been transferred to the appliance, but not installed.

If no hotfix ID is specified, you can choose from a list of available hotfix files.

Examples

(config)# delete hotfix --id 4

(config)# delete hotfix --file myhotfix.rpm

uninstall hotfix

Uninstall a hotfix from the appliance.

uninstall hotfix [--id <hotfix_id>]


Parameter	Description
id	The hotfix ID number.

Usage guidelines

All products.

Examples

(config)# uninstall hotfix --id 4

show internet_proxy

Display the current Internet proxy information.

Configure the proxy the appliance will use to contact Forcepoint servers for hotfixes/upgrades.

set internet_proxy --ip <ip address> --port <port>
[--user <username>] [--password <password>]


Parameter	Description
ip	The IP address.
port	The proxy port.
user	(Optional) The user name.
password	(Optional) The password.

Usage guidelines

All products.

Examples

(config)# set internet_proxy --ip 10.10.10.7 --port 3128
--user proxyuser --password mypassword

delete internet_proxy

Delete the Internet proxy configuration.

delete internet_proxy

Usage guidelines

All products.

Appliance Upgrades


	Important Read the release notes before applying an upgrade.

A software upgrade upgrades all TRITON Architecture modules on the appliance while preserving the existing settings. Off-appliance TRITON Architecture components must also be upgraded to the same version.


	Important All TRITON Architecture software in your deployment must be running the same version. A new appliance at your site should immediately be upgraded to the version running in your deployment. See the Forcepoint Certified Product Matrix for information about the software module versions that are compatible with each appliance version.

Upgrade files are downloaded to and worked with in a filestore that you specify.

Use these commands to work with upgrades:

show upgrade history
show upgrade list
show upgrade status
load upgrade
show download upgrade
cancel download upgrade
pause download upgrade
resume download upgrade
install upgrade

See the entry for each command in the table below.

After an upgrade is applied, use show appliance info to confirm the current appliance version. To view the upgrade log file, use the "show log" commands.

show upgrade history

Display the upgrades that have been installed on this appliance.

(view)# show upgrade history

show upgrade list

Display a list of upgrades available on Forcepoint servers.

(view)# show upgrade list

show upgrade status

Display status of upgrade package download and installation.

(view)# show upgrade status

load upgrade

Download or upload an upgrade file.

load upgrade [--file <name>] [--location <filestore_alias>]
[--url <hotfix_url>] [--auth-required]
[--no-cert-verification>]


Parameter	Description
file	(Optional unless the filestore is TFTP) The name of the upgrade file.
location	(Optional) Any6 defined remote filestore alias. A TFTP filestore requires the file parameter.
url	(Optional) The URL of the upgrade to load, if adding from a URL rather than from a filestore. Format: <url type>://<user>@<ip or hostname>/<filepath>
auth-required	(Optional) Use with the url parameter to specify whether a password is needed.
no-cert-verification	(Optional) Use with the url parameter to ignore SSL certificate checks. Only valid with HTTPS.