Over the past year, we've been automatically upgrading the Endpoint Agent on most accounts to version 2.x. This version included several improvements to the agent's efficiency and stability, such as:
- Browser Phishing Protection (Windows)
- Windows Firewall Management
- MD5 Exclusion Support
- Allowlist for Device Control
- Many other quality of life improvements.
For some accounts, this automatic upgrade to the endpoint agent is not enabled and must be done manually. This process allows granular control over the rollout of the upgraded endpoint agent.
The following is an instructional guide for these accounts and an FAQ about the manual upgrade process. Upgrading as soon as possible is strongly recommended to benefit from the security features and improvements.
Update your policies
Follow these instructions to upgrade endpoint agents on your clients' sites:
- Log in to OneView.
- Navigate to Configure > Policies.
- Edit a policy.
- Navigate to Endpoint Agent > Endpoint Agent Upgrades.
- Click Upgrade Endpoint Agent.
- This setting cannot be turned off, only paused. To revert this change, make a new policy and keep the setting disabled.
- To pause the upgrade, enable Pause Endpoint Agent Updates. The upgrade happens once the Pause Endpoint Agent Updates is disabled or times out after 30 days from being enabled.
- Repeat this process for all applicable policies across your sites.
- Manage and review your rollout progression on the policy page with the Upgrade Applied column.
From now on, this setting defaults to disabled when creating a new policy. If cloning an existing policy, the Agent Upgrade configuration is preserved from the copied policy.
Frequently asked questions
- Q: What if I move an endpoint with Endpoint Agent version 2.x to a policy where the upgrade has not been enabled?
A: That endpoint will retain the upgrade, while all other endpoints in the policy stay on the previous endpoint agent version. - Q: What if I move an endpoint without the Agent upgrade to a policy where the upgrade has been enabled?
A: The endpoint in question will be prompted for the endpoint agent upgrade. - Q: Does this upgrade have to be done to every policy I have?
A: No, this upgrade flow is only needed for policies affecting active endpoints. - Q: How long do I have to roll out this upgrade to my environment?
A: A deadline has not yet been determined. Communication will be sent out when this date is finalized. Upgrading agents as soon as possible is highly encouraged.