Documented By: Philippe Luseyi
Applies To: Forcepoint Security Manager (FSM) v10.1, 10.2, 10.3 and 10.4. Issue resolved in version 10.4.1 and later versions
Issue Description
Administrators are unable to set the Endpoint Agent Bypass duration beyond December 2025. The calendar picker UI within the Forcepoint Security Manager (FSM) console enforces a hard limit, preventing the selection of any future dates past this point.
Root CauseA backend configuration limitation within the FSM version 10.4 management console UI.
ResolutionApply the Forcepoint Interim Build (IB) specifically designed for v10.4. Note: This patch will be integrated into the standard Forcepoint Maintenance release 10.4.1.
Step-by-Step Implementation GuidePrerequisites: Ensure you have downloaded the 10.4 Interim Build (IB) .zip file containing the patched management-console.war file and have administrative access to the FSM server.
Halt Services:
Open the Windows Services application (services.msc).
Locate the Websense Data Security Manager service.
Right-click, select Stop, and temporarily set the startup type to Disabled to prevent it from starting during the patch process.
Apply the Patch:
Open File Explorer and navigate to: %DSS_HOME%tomcat\wbsnApps\
Locate the existing management-console.war file.
Crucial: Create a backup of this file and store it in a secure location outside of the Tomcat directory.
Copy the new management-console.war file from your extracted Interim Build folder and paste it into the wbsnApps directory, replacing the old file.
Clear Tomcat Cache:
Navigate to the following three directories and delete their contents.
Warning: Do not delete the actual parent folders, only the files and subfolders inside them.
%DSS_HOME%tomcat\webapps
%DSS_HOME%tomcat\work
%DSS_HOME%tomcat\temp
Restore Services:
Return to the Windows Services application (services.msc).
Change the startup type for the Websense Data Security Manager service back to Automatic.
Right-click and select Start.
VerificationLog in to the Forcepoint Security Manager (FSM) console.
Navigate to the Endpoint Agent Bypass configuration section.
Open the activation duration calendar.
Verify that the UI now permits scrolling and selecting dates extending beyond December 2025.
Perform a test bypass allocation to confirm the backend accurately processes the new future date.