Changing the IP address of the TRITON management server

Deployment and Installation Center | Web, Data, and Email Security Solutions | Version 7.7.x

Applies to:

Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.7.x

Data Security, v7.7.x

Email Security Gateway and Gateway Anywhere, v7.7.x

Before changing the IP address of the TRITON management server, if Web Security Log Server is installed on the management server machine, remove it. The steps below include instructions for reinstalling it after the IP address change is complete.


	Warning If Web Security policy components (Policy Broker, Policy Server, Policy Database) or hybrid components (Directory Agent, Sync Service) reside on the TRITON management server, the process of changing the IP address is complicated. Please contact Technical Support for assistance.

Complete the following steps after changing the IP address of the TRITON management server.

Update TRITON Infrastructure with the new IP address.

See Configuring TRITON Infrastructure to new IP address, hostname, or domain for instructions.

If SQL Server 2008 R2 Express (SQL Server Express) is installed on this machine, it will be automatically configured to the new IP address along with TRITON Infrastructure.

(TRITON - Web Security only)
Update the configuration of the TRITON - Web Security module to reflect the new IP address:

Recreate Apache SSL certificates for TRITON - Web Security. See Creating Apache SSL certificates. When following these instructions, be sure to edit the openssl.txt file to reflect the new IP address of the TRITON management server.

Edit the TRITON - Web Security catalina.properties file to reflect the new IP address. See Configuring Tomcat to a use new local IP address.

Navigate to the Web Security bin directory (C:\Program Files or Program Files (x86)\Websense\Web Security\bin\, by default) and open the websense.ini file in a text editor.

Update the value of the LocalServerIP parameter to the new IP address.

If you want to run Web Security Log Server on the management server (not recommended), and removed it as instructed before changing the IP address of the server, open a Windows command prompt and run the following commands from the C:\Program Files or Program Files (x86)\Websense\Web Security\bin\ directory:

LogServer.exe -i

LogServer.exe -r

Log onto TRITON - Web Security and navigate to Settings > Reporting > Log Server page.

Verify that correct information appears in the SQL Server location field.

If you change the SQL Server location value, use the Windows Services dialog box to restart Websense Log Server.

Use the Windows Services dialog box to restart the Websense RTM Server and Websense RTM Client services.

After changing the Log Server IP address, if alerts appear from old IP address, restart Policy Server to clear the old alert data.

(TRITON - Email Security only)
Edit the TRITON - Email Security catalina.properties file to reflect the new IP address. See Configuring Tomcat to a use new local IP address.

(TRITON - Email Security only)
If Email Security Log Server is installed on the TRITON management server machine, update TRITON Unified Security Center with its new IP address. See Updating the IP address for Email Security Log Server.


	Note This is required only for those appliances using the Email Security Log Server located on the TRITON management server machine. If an appliance is using an Email Security Log Server located elsewhere, do not update its IP address on that appliance.

If you have multiple Email Security Gateway appliances in your deployment, update them as well with the new IP address of Email Security Log Server. To update other appliances, complete the steps again in Updating the IP address for Email Security Log Server with the following modifications:

After logging into the TRITON Unified Security Center, click Appliances in the TRITON Unified Security Center banner.

Click Manage Appliances and select the appliance you want to update.

Continue with the rest of the procedure as normal.

Repeat this process for each Email Security Gateway appliance that uses the Email Security Log Server located on the TRITON management server machine.

(TRITON - Email Security only)
If the Email Security Log Database is located on the TRITON management server machine (e.g., SQL Server 2008 R2 Express is installed on the machine and maintains the log database), update the database location in TRITON Unified Security Center. See Updating the log database location for Email Security Gateway.

(TRITON - Data Security only)
Modify the Data Security Management Server installation to reflect the change. See Changing the IP address of the Data Security Management Server.

If your subscription includes Websense Web Security Gateway Anywhere, Email Security Gateway, or Email Security Gateway Anywhere, re-register them with Data Security Management Server (located on the TRITON management server machine). This is required for Web and email DLP (data loss prevention) features.

For Web Security Gateway Anywhere, see Re-register Websense Content Gateway.

For Email Security Gateway, see Re-registering Email Security Gateway with Data Security.