System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Documentation | Support

Search eSupport

Deployment and Installation Center > System requirements

for this version

Deployment and Installation Center | Web, Data, and Email Protection | v8.4.x

In this topic

Forcepoint management server requirements

Reporting database requirements

Requirements for web protection solutions

Requirements for email protection solutions

Forcepoint DLP requirements

Analytics engine hardware requirements

The Forcepoint management server must reside on one of the following 64-bit
Windows operating systems:

Windows Server 2008 Standard or Enterprise R2 SP1

Windows Server 2012 Standard Edition

Windows Server 2012 Standard Edition R2

Windows Server 2016 Standard Edition

It hosts the Forcepoint Security Manager (Security Manager), which includes:

The infrastructure uniting all management components

A settings database for administrator account information and other shared data

One or more management modules, used for configuration, policy management,

and reporting

Additional components may also reside on the management server.

The recommended hardware requirements for a Forcepoint management server vary

1 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

depending on whether Microsoft SQL Server Express (used only for evaluations or
very small deployments) is installed on the machine.

Notes:

Forcepoint DLP allows for either local or remote installation of the forensics
repository. If the repository is hosted remotely, deduct 90 GB from the Forcepoint
DLP disk space requirements.

It is strongly recommended that you allocate more than the minimum listed disk
space to allow for scaling with use. The "recommended" option allows for scaling
as reporting data accumulates.
If you install the product on a drive other than the main Windows drive (typically
C), it must have at least 4 GB free on the Windows partition to accommodate the
Forcepoint Security Installer.

Management modules Recommended Minimum

Web Security 8 CPU cores (2.5 4 CPU cores

GHz), 16 GB (2.5 GHz), 8
available RAM, 400 GB available
GB Disk Space RAM, 146 GB
Disk Space

Data Security 8 CPU cores (2.5 4 CPU cores

GHz), 16 GB (2.5 GHz), 12
available RAM, 400 GB available
GB Disk space RAM, 146 GB
Disk Space

Web Security and Data 8 CPU cores (2.5 4 CPU cores

Security GHz), 20 GB (2.5 GHz), 16
available RAM, 400 GB available
GB Disk Space RAM, 146 GB
Disk Space

Email Security and Data 8 CPU cores (2.5 4 CPU cores

Security GHz), 20 GB (2.5 GHz), 16
available RAM, 400 GB available
GB Disk Space RAM, 146 GB
Disk Space

Web Security, Data 8 CPU cores (2.5 8 CPU cores

Security, and Email GHz), 24 GB (2.5 GHz), 20
Security available RAM, 550 GB available
GB Disk Space RAM, 146 GB
Disk Space

2 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Management Recommended Minimum

modules

Web Security 8 CPU cores (2.5 GHz), 4 CPU cores (2.5

16 GB available RAM, GHz), 8 GB
400 GB Disk Space available RAM, 240
GB Disk Space

Data Security 8 CPU cores (2.5 GHz), 4 CPU cores (2.5

16 GB available RAM, GHz), 12 GB
400 GB Disk space available RAM, 240
GB Disk Space

Web Security and 8 CPU cores (2.5 GHz), 4 CPU cores (2.5
Data Security 20 GB available RAM, GHz), 16 GB
400 GB Disk Space available RAM, 240
GB Disk Space

Email Security and 8 CPU cores (2.5 GHz), 4 CPU cores (2.5
Data Security 20 GB available RAM, GHz), 16 GB
400 GB Disk Space available RAM, 240
GB Disk Space

Web Security, Data 8 CPU cores (2.5 GHz), 8 CPU cores (2.5
Security, and Email 24 GB available RAM, GHz), 20 GB
Security 600 GB Disk Space available RAM, 240
GB Disk Space

The Security Manager is a web-based tool that runs on a variety of popular browsers.
For a list of browsers and versions that are supported, see the Certified Product
Matrix on the Forcepoint website.

Although it is possible to launch the Security Manager using non-supported browsers,

you may not receive full functionality and proper display of the application.

All Security Manager components, as well as secondary Forcepoint DLP servers, are
supported on the following virtualization systems. Other components (used for
enforcement, analysis, or reporting) may have additional requirements that are not
supported by these virtualization environments.

Windows Server 2008 R2 SP1 over Hyper-V 2008 R2

Windows Server 2008 R2 SP1 and Windows Server 2012 over Hyper-V 2012

Windows Server 2008 R2 SP1, Windows Server 2012, Windows Server 2012 R2,
and Windows Server 2016 over Hyper-V 2012 R2

Windows Server 2008 R2 SP1 over VMware ESXi v5.x

Windows Server 2008 R2 SP1, Windows Server 2012, Windows Server 2012 R2,
and Windows Server 2016 over VMware ESXi 6.x

3 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Note
When ESXi is downloaded, a license key is generated
and displayed on the download page. Make a note of
this license key for use during installation.

Before installing Forcepoint software on a VM via ESXi, ensure that the VMware tools
are up to date and that all hardware is compatible with VMware ESXi. Also make sure
that the resource specifications defined earlier in this document for non-virtualized
sytems are met.

If you allow users to log on to the Security Manager using their network accounts,
the following directory services can be used to authenticate administrator logons:

Microsoft Active Directory Novell eDirectory

Lotus Notes Oracle Directory Services

Generic LDAP directories

For complete information on supported appliance models and modes, see:

Forcepoint X Series Certified Product Matrix

Forcepoint V Series Certified Product Matrix

Forcepoint Virtual Appliance Certified Product Matrix

The V Series appliances supported with version 8.0 and higher knowledge base
article

For all Forcepoint security solutions, Microsoft SQL Server is used to host the
reporting database.

For evaluations and small deployments, the Forcepoint Security Installer can be
used to install Microsoft SQL Server 2008 R2 Express on the Forcepoint
management server machine.

Use only the version of SQL Server 2008 R2 Express included in the Forcepoint
Security Installer.

Larger organizations are advised to use Microsoft SQL Server Standard, Business
Intelligence, or Enterprise. These SQL Server editions cannot reside on the

4 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Forcepoint management server.

SQL Server clustering may be used with all supported standard and enterprise
versions of Microsoft SQL Server for failover or high availability.

The supported database engines are:

SQL Server 2016 - Standard, Business Intelligence, and Enterprise editions

SQL Server 2014, 2014 SP1, 2014 SP2 - Standard, Business Intelligence, and
Enterprise editions
SQL Server 2012 SP1 (or the latest service pack from Microsoft) - Standard,
Business Intelligence, and Enterprise editions

SQL Server 2008 R2 SP2 (or the latest service pack from Microsoft) - All
editions except Web and Compact; all service packs; not IA64

SQL Server 2008 R2 Express SP2 (installed by the Forcepoint Security

Installer)
SQL Server 2008 SP3 (or the latest service pack from Microsoft) - All editions
except Web, Express, and Compact; all service packs, 32- and 64-bit, but not
IA64

Do not install web protection components on a domain controller machine.

The following components are Windows-only, running on Windows Server 2008 R2

SP1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016:

Forcepoint Security Manager

Linking Service

Log Server

Cloud App Service

DC Agent

Real-Time Monitor

Content Gateway is a Linux-only component, supported on:

Red Hat Enterprise Linux 6.5 - 6.8, 7.0 - 7.3 (64-bit)

See Content Gateway for a list of supported Red Hat and CentOS versions, and
additional information.

All other web protection components can run on any of the following 64-bit operating
systems:

Windows Server 2008 R2 SP1 Standard or Enterprise Edition

Windows Server 2012 or Windows Server 2012 R2 Standard Edition

Windows Server 2016 Standard Edition

5 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Red Hat Enterprise Linux 6.5 - 6.8 and 7.0 - 7.3

The following web protection components do not run on appliances. If used, they
must be installed off-appliance.

Forcepoint Security Real-Time Monitor

Manager

Log Server Linking Service

Sync Service Remote Filtering Server & Client

(Forcepoint URL Filtering only)

DC Agent eDirectory Agent

Logon Agent RADIUS Agent

Cloud App Service Network Agent (not available on

X Series)

Hardware

To support transparent proxy deployments

Software

Required libraries in Red Hat Enterprise Linux 6

Integration with Forcepoint DLP

Web browsers

Important
Core policy components must be installed prior to
Content Gateway. When Filtering Service is installed,
Content Gateway must be specified as the
integration product. See Installation Instructions:
Forcepoint Web Security.

CPU Quad-core running at 2.8 GHz or faster

6 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Memory: 6 GB minimum

Red Hat 8 GB recommended

Enterprise Linux
6 series, 64-bit

Disk space 2 disks:

100 GB for the operating system,
Content Gateway, and temporary data.
147 GB for caching
If caching will not be used, this disk is
not required.
The caching disk:
Should be at least 2 GB and no more
than 147 GB
Must be a raw disk, not a mounted file
system
Must be dedicated
Must not be part of a software RAID
Should be, for best performance, a
10K RPM SAS disk on a controller that
has at least 64 MB of write-through
cache

Network 2
Interfaces

Router Must support WCCP v2.

A Cisco router must run IOS 12.2 or later. The

latest version is recommended.

To support IPv6, WCCP v2.01 and Cisco router

version 15.4(1)T or later are required.
Client machines, the destination Web server, and
Content Gateway must reside on different subnets.

—or—

Layer 4 You may use a Layer 4 switch rather than a router.

switch
To support WCCP, a Cisco switch requires the EMI
or IP services image of the 12.2SE IOS release (or
later).
Content Gateway must be Layer 2 adjacent to the
switch.

The switch must be able to rewrite the destination

MAC address of frames traversing the switch.

7 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

The switch must be able to match traffic based on

the layer 4 protocol port (i.e., TCP port 80).

Content Gateway is supported on:

Red Hat Enterprise Linux 6.5 - 6.8 and 7.0 - 7.3.

Note
Testing encountered a kernel bug in version 6.5:
2.6.32-431 that can impact performance. However,
Content Gateway features were tested on this
version of the OS and passed the certification tests.

The corresponding CentOS version (CentOS version numbers have a one-to-one

correspondence with Red Hat Enterprise Linux version numbers)

Forcepoint V Series, X Series, and Virtual Appliances

Forcepoint LLC provides "best effort" support for newer versions of Red Hat
Enterprise Linux. Under "best effort" support, Technical Support makes a best effort
to troubleshoot cases in standard fashion unless the issue is deemed a Red Hat
Enterprise Linux-specific issue, at which point you must contact Red Hat directly for
assistance.

Only kernels shipped with the above Linux versions are supported by Content
Gateway. Visit www.redhat.com for kernel information. To display the kernel version
installed on your system, enter the command:
/bin/uname -r

Required libraries:

apr.i686 libstdc++.i686
apr-util.i686 libtalloc.i686
audit-libs.i686 libtdb.i686
bzip2-libs.i686 libuuid.i686
compat-db43.i686 libxml2.i686
compat-expat1.i686 nc.x86_64
compat-openldap.i686 ncurses-devel.i686
compat-readline5.i686 ncurses-libs.i686
cracklib.i686 nspr.i686
cyrus-sasl-lib.i686 nss.i686
db4.i686 nss-softokn.i686

8 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

expat.i686 nss-softokn-freebl.i686
ftp.x86_64 nss-util.i686
gdbm.i686 openldap.i686
glibc.i686 openssl.i686
keyutils-libs.i686 openssl098e.i686
krb5-libs.i686 pam.i686
libattr.i686 popt.i686
libcap.i686 readline.i686
libcom_err.i686 readline-devel.i686
libcurl.i686 samba-winbind-clients.i686
libgcc.i686 sqlite.i686
libicu.i686 tcl.x86_64
libidn.i686 tcp_wrappers-libs.i686
libselinux.i686 zlib.i686
libssh2.i686

During Content Gateway installation, the installer will list missing packages and then
exit the installer.

To install the missing packages, the operating system must have a repository of
available libraries. The Media repository on the Red Hat Enterprise Linux install DVD
is an acceptable source of packages.

After the repository is set up, all of the required dependencies can be automatically
resolved by running:
yum install wcg_deps-1-0.noarch.rpm

The above RPM is included in the Content Gateway install tree, at the same level as
wcg_install.sh.

Version 8.4 is required.

Any version can be used via the ICAP interface. However, use of the integrated,
on-box components is strongly recommended. See Content Gateway Manager
Help for configuration instructions.

Content Gateway is configured and maintained with a web-based user interface

called the Content Gateway manager. See the Certified Product Matrix for a list of
browser the Content Gateway manager supports.

9 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Note
The browser restrictions mentioned in the product
matrix above apply only to the Content Gateway
Manager and not to client browsers proxied by
Content Gateway.

The logon application (LogonApp.exe) is supported on the following operating

systems:

Windows XP with Service Windows Vista with Service

Pack 2 or higher (32-bit Pack 1 or higher (32-bit and
and 64-bit) 64-bit)

Windows 7 with Service Windows 8

Pack 1 (32-bit and 64-bit)
Windows 8.1 (v7.8.2 and
later)
Windows 8.1, Update 1
(v7.8.3 and later)

Windows Server 2003 Windows 10

Mac OSX 10.8, 10.9.2, Windows Server 2008 R2

10.9.5, and 10.10 (64-bit) SP1

Forcepoint URL Filtering may be integrated with the following third-party products.

Product Versions

Microsoft Forefront TMG 2010

Cisco ASA v8.0 or later

Cisco Router IOS v15 or later

Citrix Presentation Server 4.5

Citrix XenApp 6.0 or 6.5

In addition, products that can be configured to use ICAP can be integrated via the
ICAP Service.

10 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Web protection solutions can use the following directory services for user
identification and authentication:

Directory Versions

Microsoft Active Directory (native or 2012 R2, 2012, 2008 R2,

mixed mode) 2008

Novell eDirectory v8.7, 8.8

Oracle Directory Services Enterprise 11g

Edition

Most standard RADIUS servers are supported. The following have been tested:

Cistron RADIUS Server Livingston (Lucent) 2.x

Merit AAA Microsoft IAS

NMAS authentication

The Forcepoint Email Security on-premises solution is exclusively appliance-based

(V Series, X Series, and Virtual Appliance), except for the following components:

Email Security module of the Forcepoint Security Manager, which runs on the
Forcepoint management server (see Forcepoint management server
requirements).

Log Server, which runs on a Windows Server 2008 R2 SP1, 2012, 2014, or 2016
machine.

Forcepoint DLP Supported Operating Systems 64-

Component bit

Management server Windows Server 2008 Standard

or Enterprise, R2 SP1

Windows Server 2012 Standard

Edition

11 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Windows Server 2012 Standard

Edition R2

Windows Server 2016 Standard

Edition

Supplemental servers Windows Server 2008 Standard

or Enterprise, R2 SP1

Windows Server 2012 Standard

Edition

Windows Server 2012 Standard

Edition R2

Windows Server 2016 Standard

Edition

Email Gateway for CentOS 7.2

Microsoft Office 365

Web Content Gateway Red Hat Enterprise Linux 6.5,

6.6, 6.7, 6.8, 7.0, 7.1, 7.2, and
7.3

Crawler agent Windows Server 2008 Standard

or Enterprise, R2 SP1

Windows Server 2012 Standard

Edition

Windows Server 2016 Standard

Edition

Protector* CentOS 7

Mobile agent CentOS 7

Analytics engine CentOS 7

Forcepoint DLP cloud CentOS 7

agent

Endpoint agent See the Certified Product Matrix.

*This operating system is installed as part of the protector "soft

appliance" installation.

Protector is supported on VMware systems in the Mail Transport

Agent (MTA) mode and/or as an ICAP server with remote analysis
(no local analysis). Other modes of deployment are not certified.

12 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Server Minimum requirements Recommended

hardware

CPU 2 Dual-core Intel Xeon 2 Quad-core Intel Xeon

processors (2.0 GHz) or processors (2.0 GHz) or
AMD equivalent AMD equivalent

Memory 4 GB 8 GB

Hard Four 72 GB Four 146 GB

drives

Disk 72 GB 292 GB
space

Free 70 GB 70 GB
space

Hardware 1 1+0
RAID

NICs 1 2

The following requirements apply to all Forcepoint DLP servers:

For optimized performance, verify that the operating system's file cluster is set to
4096B. For more information, see the knowledge base article: "File System
Performance Optimization."

Windows installation requirements:

Set the partition to 1 NTFS Partition. For more information, see the knowledge
base article: "File System Performance Optimization."

Regional Settings: should be set according to the primary location. If

necessary, add supplemental language support and adjust the default
language for non-Unicode programs.

Configure the network connection to have a static IP address.

The Forcepoint management server hostname must not include an underscore
sign. Internet Explorer does not support such URLs.

Short Directory Names and Short File Names must be enabled. (See
http://support.microsoft.com/kb/121007.)

Create a local administrator to be used as a service account. If your

deployment includes more than one Forcepoint DLP server, use a domain
account (preferred), or the use same local user name and password on each
machine.

13 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

Be sure to set the system time accurately on the Forcepoint management

server.

Hardware Minimum requirements Recommended

CPU 2 Dual-core Intel Xeon 2 Quad-core Intel Xeon

processors (2.0 GHz) or processors (2.0 GHz) or
AMD equivalent AMD equivalent

Memory 2 GB 4 GB

Hard 2 - 72 GB 4 - 146 GB
drives

Disk 70 GB 292 GB
space

Hardware none 1+0

RAID

NICs 2 (monitoring) 2 (monitoring)

Hardware Minimum requirements Recommended

CPU 4 core processors (for 4 core processors (for

example, Single quad or example, Single quad or
two dual core two dual core processors),
processors), 2.0 GHz Intel 2.0 GHz Intel Xeon or
Xeon or AMD equivalents AMD equivalents

Memory 8 GB 8 GB

Hard 2 - 72 GB 4 - 146 GB
drives

Disk 70 GB 292 GB
space

Hardware none 1+0

RAID

NICs 2 2

14 of 15 4/23/2018, 12:21 PM
System requirements for this version https://www.websense.com/content/support/library/deployctr/v84/dic_sy...

The server running the analytics engine must meet the following hardware
requirements:

Hardware Minimum Recommended

CPU 4 core processors 8 core processors

Memory 8 GB (16 GB max) 16 GB

Hard drives 100 GB 100 GB

NICs 1 1

Hardware Minimum Recommended

CPU 8 core processors 8 core processors

Memory 16 GB 20 GB

Hard drives 100 GB 100 GB

NICs 1 1

For information on hardware and operating system requirements for Forcepoint Web
Security Endpoint and Forcepoint DLP Endpoint, see the endpoint solutions
Installation and Deployment Guide and Certified Product Matrix.

Deployment and Installation Center > System requirements

for this version

Copyright 2017 Forcepoint. All rights reserved.

15 of 15 4/23/2018, 12:21 PM