v7.7 Web Security Software Upgrade Instructions (Windows)

7/31/2019 v7.7 Web Security Software Upgrade Instructions (Windows)

1/4

v7.7 Web Security software upgrade instructions (Windows)Deployment and Installation Center | Web Security Solutions | Version 7.6.x and 7.5.x

Applies to:

Web Filter, Web Security, Web Security Gateway, and Web Security GatewayAnywhere, v7.6.x and v7.5.x

Use the version 7.7 TRITON Unified Installer (WebsenseTRITON77Setup.exe) to performthe upgrade. The installer detects:

That older version components are installed

Which components are installedThe database engine version

ImportantFollow the upgrade order provided inUpgrading Web Filter or Web Security

software-only deployments from v7.5.xorUpgrading Web Security or Web and

Data Security solutions from v7.6to ensure that you are upgrading components inthe correct order.

Upgrade the Policy Broker machine first, then any machines running Policy

Server. Distributed components on other machines must be upgraded after PolicyBroker and Policy Server.

Before beginning:If you performed an intermediate upgrade to v7.5 or v7.6, and you have not restarted the

upgraded machines, perform a restart before beginning the v7.7 upgrade.Perform a full system backup. SeeBacking up Web Security configuration.

ImportantFiltering and logging services are not available while you are performing the

upgrade. To reduce the impact on network users, run the upgrade after hours, or

during a quiet time on the network.

Perform the following procedure on each machine running Websense Web Security

components.

1.Make sure that no administrators are logged on to TRITON - Web Security.

2.

Log on to the installation machine with an account having domain and local administrator

privileges.

Important

If you are upgrading Log Server on this machine and it uses a Windows trusted

connection to access the Log Database, you must log on to this machine using thesame trusted account.

3.Stop Log Server and disable SQL Server Agent jobs.
http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_wsbackup.aspx#603468http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_wsbackup.aspx#603468http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_wsbackup.aspx#603468http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_wsbackup.aspx#603468http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.11.aspx#600799http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_from75.aspx#597641


2/4

SeePreparing the Web Security Log Database for upgrade.

4.Close all applications and stop any antivirus software.

Warning

Be sure to close the Windows Event Viewer, or the

upgrade may fail.

5.

Configure current Web Security network administrators to be authenticated against aversion 7.7-supported directory service if necessary. SeeUpgrading or merging

administrator accountsfor more information.

Note

If you are upgrading from v7.5 or earlier, note that the WebsenseAdministrator

account was replaced by an admin account in v7.6. SeeUpgrading or mergingadministrator accountsfor more information.

6.

Go to the Downloads tab ofmywebsense.comto download the TRITON Unified

Installer.The installer file is WebsenseTRITON77Setup.exe.

Installer files occupy approximately 2 GB of disk space.

7.

Double-click WebsenseTRITON77Setup.exe to launch the installer. A progress dialog

box appears, as files are extracted.

8.The installer detects Web Security components from an earlier version and asks how youwant to proceed.

Click OK.

9.

If v7.5 TRITON - Web Security is installed on this machine, the following message

appears:

Keep TRITON - Web Security on this machine and upgrade it to version 7.6 TRITON

Unified Security Center?Selecting No will launch the current-version uninstaller. Uninstall the current-version

TRITON - Web Security. After uninstall, remaining components will be upgraded to version

7.6.

SeePlacing the Web Security management console (v7.5 only)for more information.

If you click Yes:The Installer Dashboard appears and then TRITON Infrastructure Setup starts. See

Installing TRITON Infrastructurefor instructions. Return to these instructions once

TRITON Infrastructure installation is complete.If you click No:

The current version Web Security uninstaller is started automatically. See the Websense

Technical Library (www.websense.com/library) for uninstallation instructions for your

version. Be sure to select only TRITON - Web Security for removal. After the componentis removed, the v7.7 Web Security component installer is started automatically.

10.On the installer Introduction screen, click Next.

Note the Installer Dashboard remains on-screen, behind the installer screens mentioned in

the remaining steps.11.On the Websense Upgrade screen, select Start the upgrade, then click Next.

.
http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.mywebsense.com/http://www.mywebsense.com/http://www.mywebsense.com/http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_mgmt.aspx#626978http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_mgmt.aspx#626978http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_mgmt.aspx#626978http://www.websense.com/content/support/library/deployctr/v77/dic_install_tri_infra.aspx#618410http://www.websense.com/content/support/library/deployctr/v77/dic_install_tri_infra.aspx#618410http://www.websense.com/libraryhttp://www.websense.com/libraryhttp://www.websense.com/libraryhttp://www.websense.com/libraryhttp://www.websense.com/content/support/library/deployctr/v77/dic_install_tri_infra.aspx#618410http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_mgmt.aspx#626978http://www.mywebsense.com/http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/admin_merge.aspx#597869http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232


3/4

ImportantBe sure to close all instances of TRITON - Web Security (v7.5) on all machines,

before clicking Next.

If the Database Information screen appears, stating that Log Server is found on this

machine and it is configured to connect to MSDE, you must install SQL Server 2008 R2

Express (SQL Server Express) and then configure Log Server to connect to it before LogServer can be upgraded. Click Cancel, and then Quit. You are returned to the ModifyInstallation Dashboard. Install SQL Server Express either on this machine or another

machine. It is possible to install SQL Server Express on the same machine currently

running MSDE. SeeInstalling SQL Server 2008 R2 Express (without TRITONInfrastructure)for instructions.

Once SQL Server Express has been installed (and, optionally, MSDE data restored or

attached to it), run the Websense installer again on this machine (the one running Log

Server) to upgrade components.

12.

When you click Next, a Stopping All Services progress message appears. Wait for

Websense services to be stopped.

The Pre-Upgrade Summary screen appears when the services have been stopped.In some cases, the installer may be unable to stop the Websense services. If the services

have not been stopped after approximately 10 minutes, then stop them manually. You can

leave the installer running when you do so. Use the Windows Service dialog box to stop the

services. SeeStarting and stopping Web Security servicesfor instructions. Once you havemanually stopped the services, return to the installer.

13.

On the Pre-Upgrade Summary screen, review the list of Websense components that will

be upgraded, and then clickInstall.Critical files are backed up and install properties initialized. And then the Installing

Websense screen appears.

14.Wait for the Upgrade Complete screen to appear. ClickDone to exit the installer.

15.Reboot the machine.

ImportantThe machine must be rebooted to complete the upgrade process.

16.If you stopped your antivirus software, restart it.17.Re-enable SQL Server Agent jobs if you disabled them prior to upgrade.SeePreparing the Web Security Log Database for upgrade.

18.

If you have an integration product installed, additional upgrade steps may be necessary.

See:

Integrating Web Security with Check Point

Integrating Web Security with Cisco

Integrating Web Security with Citrix

Integrating Web Security with Microsoft Products Installing Web Security for Universal Integrations

19.

Repeat the upgrade procedure on each machine running Web Security components, in

the recommended order (seeWeb Security upgrade order).All components that interact must be upgraded to the same version.
http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799http://www.websense.com/content/support/library/deployctr/v77/dic_start_stop_ws.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_start_stop_ws.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_start_stop_ws.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/dic_ws_chkpt_oview.aspx#598300http://www.websense.com/content/support/library/deployctr/v77/dic_ws_chkpt_oview.aspx#598300http://www.websense.com/content/support/library/deployctr/v77/dic_ws_cisco_oview.aspx#604506http://www.websense.com/content/support/library/deployctr/v77/dic_ws_cisco_oview.aspx#604506http://www.websense.com/content/support/library/deployctr/v77/dic_citrix_int.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_citrix_int.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_ms.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_ms.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_univ.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_univ.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_order.aspx#628087http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_order.aspx#628087http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_order.aspx#628087http://www.websense.com/content/support/library/deployctr/v77/dic_wsupgrade_order.aspx#628087http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_univ.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_int_ms.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_citrix_int.aspx#561994http://www.websense.com/content/support/library/deployctr/v77/dic_ws_cisco_oview.aspx#604506http://www.websense.com/content/support/library/deployctr/v77/dic_ws_chkpt_oview.aspx#598300http://www.websense.com/content/support/library/deployctr/v77/ws_upgrade.26.08.aspx#598232http://www.websense.com/content/support/library/deployctr/v77/dic_start_stop_ws.aspx#597641http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799http://www.websense.com/content/support/library/deployctr/v77/dic_cust_sql_expr_install.aspx#599799


4/4

If you have complete installations in separate locations that do not interact, they do not

have to run the same Websense software version.

To add additional components to a machine after upgrade, run the Websense installer againon the same machine. This time, the installer will ask if you want to add components. See

Adding or modifying Windows components.

New security certificateAfter upgrade, the first time you launch the management console (TRITON Unified

Security Center), the browser displays a certificate error.

This appears because the management console uses a certificate signed by Websense, Inc.,and Websense, Inc., is not a recognized certificate authority.

When you install the certificate issued by Websense, Inc., in your browser, communication

with the management console is secured, and the certificate warning is not displayed again(in this browser).

To install the TRITON console certificate in Internet Explorer

You can either run an ActiveX control to install the certificate automatically, or you can

install the certificate manually.To install the certificate automatically (requires ActiveX to be enabled in the browser):

1.

On the browser warning page, click Continue to this website (not recommended). You

must click through the warning once to be able to install the certificate.

2.Click the yellow warning box on the logon screen (where the message Websense securitycertificate is required) appears.

3.In the pop-up box, click the install the certificate link.

4.If prompted, provide credentials to allow the certificate to be installed, then click Yes.

5.

If the browser pops up a yellow security warning bar, click the yellow bar to allow the

program that installs the certificate to run.

To install the certificate manually:

1.On the browser warning page, click Continue to this website (not recommended). Youmust click through the warning once to be able to install the certificate.

2.

Click Certificate Error on the browser's address bar (to the right of the management

console URL), and then select View certificate.3.In the Certificate dialog box, click Install Certificate.

4.Mark the Place all certificates in the following store radio button, and then click Browse.

5.Select the Trusted Root Certification Authorities folder, and then click OK.6.Click Next, and then Finish.

7.

When prompted to install the certificate, click Yes, and then click OK to close the success

message.

After the certificate is installed, you can launch the TRITON Unified Security Center usingthis browser without receiving further errors.

To install the TRITON console certificate in Firefox

On the Secure Connection Failed page:

1.Click Or you can add an exception.2.Click Add Exception.

3.

Make sure that Permanently store this exception is selected, and then click Confirm

Security Exception.After the certificate is installed, you can launch the TRITON Unified Security Center using

this browser without receiving further errors.
http://www.websense.com/content/support/library/deployctr/v77/dic_add_mod_comps.aspx#599892http://www.websense.com/content/support/library/deployctr/v77/dic_add_mod_comps.aspx#599892http://www.websense.com/content/support/library/deployctr/v77/dic_add_mod_comps.aspx#599892

Documents

v7.7 Web Security Software Upgrade Instructions (Windows)