Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Upgrading Web Protection Solutions > Web protection upgrade order
Web protection upgrade order
Deployment and Installation Center | Web Protection Solutions
 
Applies to:                                         
*
Forcepoint Web Security, v8.5.x
*
Forcepoint URL Filtering, v8.5.x
When you upgrade your web protection solutions, the installer or appliance patch automatically upgrades all components on a given machine in the correct order.
As a result, if you have a main server or appliance hosting most of your web protection components (including Policy Broker), upgrade that machine first, then use the list below to determine the upgrade order for any additional servers or appliances.
If your components are widely distributed, however, ensure that they are upgraded in the correct order, as follows:
1.
Policy Broker (primary or standalone)
If you are using Forcepoint appliances, Policy Broker runs on the full policy source appliance or server.
Regardless of the other components running on the machine, always upgrade the Policy Broker machine first. The other components on the machine are upgraded in the correct order.
2.
Replica Policy Brokers
Upgrade replica Policy Brokers after the primary has been upgraded and before attempting to upgrade any Policy Servers associated with them. If Policy Server is installed on the same machine, it will be upgraded at the same time.
3.
Policy Server
Runs on all user directory and filtering appliances, and may run on other Windows or Linux servers.
4.
User Service, Filtering Service, and Directory Agent
This includes all filtering only appliances, and may include other Windows or Linux servers.
5.
Log Server and Sync Service
Make sure that all Log Database jobs are stopped before starting the Log Server upgrade. See Preparing the Log Database for upgrade.
6.
Forcepoint Security Manager
7.
Content Gateway, Network Agent
8.
Transparent identification agents, Remote Filtering Server, filtering plug-in (Citrix XenApp or Microsoft Forefront TMG)
Once all server components have been upgraded, upgrade client components (the logon application, Remote Filtering Client, Forcepoint Web Security Endpoint) in any order. See:
*
Using Logon Agent for Transparent User Identification
*
Installing Forcepoint F1E Solutions

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Upgrading Web Protection Solutions > Web protection upgrade order
Copyright 2022 Forcepoint. All rights reserved.