Forcepoint Downloads, Installers and Hotfix Information

Forcepoint Downloads, Installers and Hotfix Information

Summary
Information regarding Forcepoint hotfix installers.
Notes and Warnings

You must have a valid login for Forcepoint in order to view the Downloads section.

Note
Forcepoint Technical Support always recommends to install the latest hotfix that applies to your product.
This is especially true for the hotfixes that are marked as Critical or Severe.
 

Problem
Where can I find information about Forcepoint installers and hotfixes that are available for my product?
Solution

To find all available installers, hotfixes and readme files for your product please visit the Downloads section of the support website.  Most download links will contain a readme file that contain installation instructions.

Important  Please read hotfix descriptions carefully to determine if it is applicable to your product.

For Installers:

  1. In Downloads, if you do not see your product, click All Downloads.
  2. Scroll to the product and pay close attention to the versions present.
  3. Click on the version for the software needed.
  4. The top section of the page will have installers.
  5. Click on the installer needed, some products will have installers separated by Operating System.
  6. Click the Download link further down the page.

For Appliances specifically, the ISO that is used for reimage is also the the same file that is used for upgrades if done manually through a fileshare. 

  1. Download the related file for the new version beneath the Appliance type in Downloads.
  2. Place the file in a shared filestore which is registered to the Appliance. For instructions and troubleshooting Filestore, see Cannot create SAMBA Filestore in CLI.
  3. Follow the upgrade steps at the Deployment Center for the version you will be upgrading to; this is under Documents. For instance, the following is the 8.5.x Deployment and Installation CenterImportant The backups created while following the upgrade guide will be critical.

 
For Hotfixes:

  1. In Downloads, if you do not see your product, click All Downloads.
  2. Scroll to the product and pay close attention to the versions present.
  3. Click on the version for the software needed.
  4. The bottom half in some products will have hotfixes if they are standalone for the product.
  5. Click the hotfix and read through the product details to verify if this hotfix is needed for the product.


User-added image







Web and Email Appliance Hotfixes
Web Windows Server Hotfixes
Web Linux Server Hotfixes




Web and Email Appliance Hotfixes:

There are two locations for hotfixes for the products. The first is under the product and version itself while the second is under the Appliances section of the Downloads page. Not all hotfixes will be present in either section so checking both is highly recommended. Ensure the correct Appliance version is being searched before continuing. Most hotfixes will apply to all Appliance versions, but this is not always the case. Virtual appliances for Web and Email have their own section under Appliances.  

For more in-depth information for Email Security hotfixes, see the Email Security Hotfix FAQ.

Once the Appliance Hotfix RPM ID is identified, there are multiple ways to install a hotfix depending on the product version:




Checking installed Hotfixes via CLI (v8.3-v8.5.x)

  1. SSH to the C interface IP of the proxy.
  2. Login with the Admin credentials.
  3. Type config
  4. Enter the Admin password again.
  5. Type show hotfix history

Note Additional Admin CLI examples can be found in the Forcepoint Appliances Command Line Interface (CLI) Guide


Apply Hotfix via CLI (v8.3-v8.5.x)

  1. SSH to the C interface IP of the proxy.
  2. Login with the Admin credentials.
  3. Type config
  4. Enter the Admin password again.
  5. Type show hotfix list
  6. Locate the hotfix name, version and number from the RPM ID, such APP-x.x.x-001
  7. To download the hotfix:
    1. Using selection from a list:
      1. Type: load hotfix
      2. Type the number next to the hotfix and press Enter.
    2. Using a command string:
      1. Type load hotfix -–id <RPM ID>
  8. To install the hotfix:
    1. Using selection from a list:
      1. Type install hotfix
      2. Type the number next to the hotfix and press Enter.
      3. If prompted with a warning that a reboot will happen after the install and this is within a change management window, type: yes
    2. Using a command string:
      1. Type install hotfix -–id <RPM ID>
      2. If prompted with a warning that a reboot will happen after the install and this is within a change management window, type: yes

Note Additional Admin CLI examples can be found in the Forcepoint Appliances Command Line Interface (CLI) Guide

 
Checking installed Hotfixes via Forcepoint Security Appliance Manager (v8.3-v8.5.x)

  1. In a browser, navigate to https://<ip-address>:9443/cm where the IP is the Forcepoint Management server.
  2. Log in with the administrator credentials.
  3. Click the Appliance IP for the appliance in question.
  4. Click on the Software Updates tab.
  5. Expand the Hotfix History section.

Note Additional information regarding the FSAM can be found in theSecurity Appliance Manager Help


Apply Hotfix via Forcepoint Security Appliance Manager (v8.3-v8.5.x)

  1. In a browser, navigate to https://<ip-address>:9443/cm where the IP is the Forcepoint Management server.
  2. Log in with the administrator credentials.
  3. Click the Appliance IP for the appliance in question.
  4. Click on the Software Updates tab.
  5. Expand the Hotfixes section.
  6. Click Download next to the right of the hotfix.
  7. When finished, click Install next to the right of the hotfix.

Note Additional information regarding the FSAM can be found in the Security Appliance Manager Help
 
Upload Hotfix or Installer via Forcepoint Security Appliance Manager (v8.5.x)

  1. In Downloads, if you do not see your product, click All Downloads.
  2. Scroll to the product and pay close attention to the versions present.
  3. Click on the version for the software needed.
  4. The top section of the page will have installers, the bottom section has hotfixes.
  5. Click on the installer or hotfix required, then the Download link further down the page.
    • Important Installer files are also upgrade files. 
  6. In a browser, navigate to https://<ip-address>:9443/cm where the IP is the Forcepoint Management server.
  7. Log in with the administrator credentials.
  8. Click the Appliance IP for the appliance in question.
  9. Click on the Software Updates tab.
  10. In the Upload section, select Hotfix or Upgrade.
  11. Browse to the hotfix or installer file location.
  12. Click Upload. Once upload is complete, a confirmation message will display.
  13. Select the file you have uploaded and install. 

  
Checking installed Hotfixes via Appliance Manager (v7.5-v8.2)

  1. In a browser, navigate to https://<ip-address>:9443/cm where the IP is the Forcepoint Management server.
  2. Log in with the administrator credentials.
  3. Click Appliances at the top of the screen.
  4. Click Sign On for the appliance in question.
  5. If the Sign On button is not configured:
    1. Go to https://<ip-address>:9447 where the IP is the C interface IP of the appliance.
    2. Admin login will be required when landing on the page.
  6. Navigate to Administration > Patches / Hotfixes > Hotfixes tab.
  7. Beneath the Hotfix search is a list of all installed hotfixes. 

Note Additional information regarding the Appliance Manager can be found in the V-Series Appliance Administration Help


Apply Hotfix via Appliance Manager (v7.5-v8.2)

  1. In a browser, navigate to https://<ip-address>:9443/cm where the IP is the Forcepoint Management server.
  2. Log in with the administrator credentials.
  3. Click Appliances at the top of the screen.
  4. Click Sign On for the appliance in question.
  5. If the Sign On button is not configured:
    1. Go to https://<ip-address>:9447 where the IP is the C interface IP of the appliance.
    2. Admin login will be required when landing on the page.
  6. Navigate to Administration > Patches / Hotfixes > Hotfixes tab.
  7. Type the Hotfix RPM ID in the search field at the top and click Find.
  8. Click Download.
  9. When ready to install, click Install next to the downloaded hotfix.
  10. If a reboot is required, the Appliance may not reboot on its own and require manual reboot.
    1. Navigate to Status>General.
    2. Click Restart Appliance.

 Note Additional information regarding the Appliance Manager can be found in the V-Series Appliance Administration Help

 

Web Windows Server Hotfixes:

  • To check if a hotfix was installed using the .bat file, verify the list of installed hotfixes in the folder: Websense\Web Security\hotfix.
  • To install a hotfix, download the hotfix from the Downloads page, extract the hotfix, extract the zip file for Windows, review the ReadMe file and follow the Windows installation procedure.
  • If a hotfix is installed manually, the only record of the hotfix will be either from the date listed of the file replaced by the hotfix, or where hotfixes are downloaded.

As manual hotfixes cannot be easily tracked, if unsure if a hotfix has been applied, a hotfix can be reinstalled on the Windows server without causing additional issues.


Web Linux Server Hotfixes

  • To check if a hotfix was installed using the .sh file, verify the list of installed hotfixes in the folder: /Websense/bin/hotfix (lists web hotfixes) and /WCG/hotfix (lists content gateway hotfixes).
  • To install a hotfix, download the hotfix from the Downloads page, extract the hotfix, extract the gz file for Linux, review the ReadMe file and follow the provided Linux installation procedure.
    • Related Articles

    • Forcepoint Endpoint Context Agent Product Matrix

      Summary This article provides Operating System compatibility details for F1E Endpoint Context Agent (ECA). ECA is installed on client computers behind Forcepoint FlexEdge Secure SD-WAN Engine (previously Next Generation Firewall or NGFW), and it ...
    • Troubleshooting Forcepoint ONE's Active Directory Sync Agent

      Summary Solutions to common troubleshooting scenarios with AD sync Agent Problem The Bitglass DirSync AD Agent is a program that syncs Active Directory users to the Forcepoint ONE user database. An AD user (typically an admin) would download the tool ...
    • Information Disclosure Vulnerabilities CVE-2022-21123, CVE-2022-21125 and CVE-2022-21166

      Summary This article details vulnerability information for Forcepoint products with CVE-2022-21123, CVE-2022-21125 and CVE-2022-21166 Information Published Date: January 26, 2023 Last Update: May 28, 2024 KBA Status: Final Update KBA Severity: High ...
    • Forcepoint DLP backup

      How do I back up and restore Forcepoint DLP? Backup and Restore | Forcepoint DLP | 29-Apr-2022 Back up your Forcepoint DLP system periodically to safeguard your policies, forensics, configuration data, fingerprints, encryption keys, and more. ...
    • Renewing SSL Certificates for Forcepoint Software

      Summary Commands for generating a new CSR from an expiring certificate. Notes and Warnings Note This command can be used to create a new CSR for any Forcepoint product. Problem The Forcepoint Security Manager and Content Gateway both use a ...