View
221
Download
0
Category
Preview:
Citation preview
7/31/2019 v7.7 Web Security Software Upgrade Instructions (Windows)
1/4
v7.7 Web Security software upgrade instructions (Windows)Deployment and Installation Center | Web Security Solutions | Version 7.6.x and 7.5.x
Applies to:
Web Filter, Web Security, Web Security Gateway, and Web Security GatewayAnywhere, v7.6.x and v7.5.x
Use the version 7.7 TRITON Unified Installer (WebsenseTRITON77Setup.exe) to performthe upgrade. The installer detects:
That older version components are installed
Which components are installedThe database engine version
ImportantFollow the upgrade order provided inUpgrading Web Filter or Web Security
software-only deployments from v7.5.xorUpgrading Web Security or Web and
Data Security solutions from v7.6to ensure that you are upgrading components inthe correct order.
Upgrade the Policy Broker machine first, then any machines running Policy
Server. Distributed components on other machines must be upgraded after PolicyBroker and Policy Server.
Before beginning:If you performed an intermediate upgrade to v7.5 or v7.6, and you have not restarted the
upgraded machines, perform a restart before beginning the v7.7 upgrade.Perform a full system backup. SeeBacking up Web Security configuration.
ImportantFiltering and logging services are not available while you are performing the
upgrade. To reduce the impact on network users, run the upgrade after hours, or
during a quiet time on the network.
Perform the following procedure on each machine running Websense Web Security
components.
1.Make sure that no administrators are logged on to TRITON - Web Security.
2.
Log on to the installation machine with an account having domain and local administrator
privileges.
Important
If you are upgrading Log Server on this machine and it uses a Windows trusted
connection to access the Log Database, you must log on to this machine using thesame trusted account.
3.Stop Log Server and disable SQL Server Agent jobs.
http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_wsbackup.aspx#603468http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_wsbackup.aspx#603468http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_wsbackup.aspx#603468http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_wsbackup.aspx#603468http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#5976417/31/2019 v7.7 Web Security Software Upgrade Instructions (Windows)
2/4
SeePreparing the Web Security Log Database for upgrade.
4.Close all applications and stop any antivirus software.
Warning
Be sure to close the Windows Event Viewer, or the
upgrade may fail.
5.
Configure current Web Security network administrators to be authenticated against aversion 7.7-supported directory service if necessary. SeeUpgrading or merging
administrator accountsfor more information.
Note
If you are upgrading from v7.5 or earlier, note that the WebsenseAdministrator
account was replaced by an admin account in v7.6. SeeUpgrading or mergingadministrator accountsfor more information.
6.
Go to the Downloads tab ofmywebsense.comto download the TRITON Unified
Installer.The installer file is WebsenseTRITON77Setup.exe.
Installer files occupy approximately 2 GB of disk space.
7.
Double-click WebsenseTRITON77Setup.exe to launch the installer. A progress dialog
box appears, as files are extracted.
8.The installer detects Web Security components from an earlier version and asks how youwant to proceed.
Click OK.
9.
If v7.5 TRITON - Web Security is installed on this machine, the following message
appears:
Keep TRITON - Web Security on this machine and upgrade it to version 7.6 TRITON
Unified Security Center?Selecting No will launch the current-version uninstaller. Uninstall the current-version
TRITON - Web Security. After uninstall, remaining components will be upgraded to version
7.6.
SeePlacing the Web Security management console (v7.5 only)for more information.
If you click Yes:The Installer Dashboard appears and then TRITON Infrastructure Setup starts. See
Installing TRITON Infrastructurefor instructions. Return to these instructions once
TRITON Infrastructure installation is complete.If you click No:
The current version Web Security uninstaller is started automatically. See the Websense
Technical Library (www.websense.com/library) for uninstallation instructions for your
version. Be sure to select only TRITON - Web Security for removal. After the componentis removed, the v7.7 Web Security component installer is started automatically.
10.On the installer Introduction screen, click Next.
Note the Installer Dashboard remains on-screen, behind the installer screens mentioned in
the remaining steps.11.On the Websense Upgrade screen, select Start the upgrade, then click Next.
.
http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.mywebsense.com/http://www.mywebsense.com/http://www.mywebsense.com/http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_mgmt.aspx#626978http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_mgmt.aspx#626978http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_mgmt.aspx#626978http://www.websense.com/content/support/library/deployctr/v77/dic_install_tri_infra.aspx#618410http://www.websense.com/content/support/library/deployctr/v77/dic_install_tri_infra.aspx#618410http://www.websense.com/libraryhttp://www.websense.com/libraryhttp://www.websense.com/libraryhttp://www.websense.com/libraryhttp://www.websense.com/content/support/library/deployctr/v77/dic_install_tri_infra.aspx#618410http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_mgmt.aspx#626978http://www.mywebsense.com/http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#5982327/31/2019 v7.7 Web Security Software Upgrade Instructions (Windows)
3/4
ImportantBe sure to close all instances of TRITON - Web Security (v7.5) on all machines,
before clicking Next.
If the Database Information screen appears, stating that Log Server is found on this
machine and it is configured to connect to MSDE, you must install SQL Server 2008 R2
Express (SQL Server Express) and then configure Log Server to connect to it before LogServer can be upgraded. Click Cancel, and then Quit. You are returned to the ModifyInstallation Dashboard. Install SQL Server Express either on this machine or another
machine. It is possible to install SQL Server Express on the same machine currently
running MSDE. SeeInstalling SQL Server 2008 R2 Express (without TRITONInfrastructure)for instructions.
Once SQL Server Express has been installed (and, optionally, MSDE data restored or
attached to it), run the Websense installer again on this machine (the one running Log
Server) to upgrade components.
12.
When you click Next, a Stopping All Services progress message appears. Wait for
Websense services to be stopped.
The Pre-Upgrade Summary screen appears when the services have been stopped.In some cases, the installer may be unable to stop the Websense services. If the services
have not been stopped after approximately 10 minutes, then stop them manually. You can
leave the installer running when you do so. Use the Windows Service dialog box to stop the
services. SeeStarting and stopping Web Security servicesfor instructions. Once you havemanually stopped the services, return to the installer.
13.
On the Pre-Upgrade Summary screen, review the list of Websense components that will
be upgraded, and then clickInstall.Critical files are backed up and install properties initialized. And then the Installing
Websense screen appears.
14.Wait for the Upgrade Complete screen to appear. ClickDone to exit the installer.
15.Reboot the machine.
ImportantThe machine must be rebooted to complete the upgrade process.
16.If you stopped your antivirus software, restart it.17.Re-enable SQL Server Agent jobs if you disabled them prior to upgrade.SeePreparing the Web Security Log Database for upgrade.
18.
If you have an integration product installed, additional upgrade steps may be necessary.
See:
Integrating Web Security with Check Point
Integrating Web Security with Cisco
Integrating Web Security with Citrix
Integrating Web Security with Microsoft Products Installing Web Security for Universal Integrations
19.
Repeat the upgrade procedure on each machine running Web Security components, in
the recommended order (seeWeb Security upgrade order).All components that interact must be upgraded to the same version.
http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799http://www.websense.com/content/support/library/deployctr/v77/dic_start_stop_ws.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_start_stop_ws.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_start_stop_ws.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/dic_ws_chkpt_oview.aspx#598300http://www.websense.com/content/support/library/deployctr/v77/dic_ws_chkpt_oview.aspx#598300http://www.websense.com/content/support/library/deployctr/v77/dic_ws_cisco_oview.aspx#604506http://www.websense.com/content/support/library/deployctr/v77/dic_ws_cisco_oview.aspx#604506http://www.websense.com/content/support/library/deployctr/v77/dic_citrix_int.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_citrix_int.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_ms.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_ms.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_univ.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_univ.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_order.aspx#628087http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_order.aspx#628087http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_order.aspx#628087http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_order.aspx#628087http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_univ.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_ms.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_citrix_int.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_cisco_oview.aspx#604506http://www.websense.com/content/support/library/deployctr/v77/dic_ws_chkpt_oview.aspx#598300http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/dic_start_stop_ws.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#5997997/31/2019 v7.7 Web Security Software Upgrade Instructions (Windows)
4/4
If you have complete installations in separate locations that do not interact, they do not
have to run the same Websense software version.
To add additional components to a machine after upgrade, run the Websense installer againon the same machine. This time, the installer will ask if you want to add components. See
Adding or modifying Windows components.
New security certificateAfter upgrade, the first time you launch the management console (TRITON Unified
Security Center), the browser displays a certificate error.
This appears because the management console uses a certificate signed by Websense, Inc.,and Websense, Inc., is not a recognized certificate authority.
When you install the certificate issued by Websense, Inc., in your browser, communication
with the management console is secured, and the certificate warning is not displayed again(in this browser).
To install the TRITON console certificate in Internet Explorer
You can either run an ActiveX control to install the certificate automatically, or you can
install the certificate manually.To install the certificate automatically (requires ActiveX to be enabled in the browser):
1.
On the browser warning page, click Continue to this website (not recommended). You
must click through the warning once to be able to install the certificate.
2.Click the yellow warning box on the logon screen (where the message Websense securitycertificate is required) appears.
3.In the pop-up box, click the install the certificate link.
4.If prompted, provide credentials to allow the certificate to be installed, then click Yes.
5.
If the browser pops up a yellow security warning bar, click the yellow bar to allow the
program that installs the certificate to run.
To install the certificate manually:
1.On the browser warning page, click Continue to this website (not recommended). Youmust click through the warning once to be able to install the certificate.
2.
Click Certificate Error on the browser's address bar (to the right of the management
console URL), and then select View certificate.3.In the Certificate dialog box, click Install Certificate.
4.Mark the Place all certificates in the following store radio button, and then click Browse.
5.Select the Trusted Root Certification Authorities folder, and then click OK.6.Click Next, and then Finish.
7.
When prompted to install the certificate, click Yes, and then click OK to close the success
message.
After the certificate is installed, you can launch the TRITON Unified Security Center usingthis browser without receiving further errors.
To install the TRITON console certificate in Firefox
On the Secure Connection Failed page:
1.Click Or you can add an exception.2.Click Add Exception.
3.
Make sure that Permanently store this exception is selected, and then click Confirm
Security Exception.After the certificate is installed, you can launch the TRITON Unified Security Center using
this browser without receiving further errors.
http://www.websense.com/content/support/library/deployctr/v77/dic_add_mod_comps.aspx#599892http://www.websense.com/content/support/library/deployctr/v77/dic_add_mod_comps.aspx#599892http://www.websense.com/content/support/library/deployctr/v77/dic_add_mod_comps.aspx#599892Recommended