topic Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade in Cortex XDR Discussions

Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade

JonathanYang_RX — Fri, 10 Jun 2022 11:01:16 GMT

Hello Palo Alto Community,

Our organization is relatively new when it comes to Cortex XDR, though, so far, the product is doing well for us.

Since Cortex XDR has a 9-month period before it becomes EOL, we're looking at the "auto upgrade" feature to ease our deployment when there's a new version. That said, I'd like to get some input from those who are already using it in their environment.

Re: Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade

afurze — Fri, 10 Jun 2022 13:37:49 GMT

Hi JonathanYang_RX,

This tends to come down more to your internal testing and change control processes and where you fall in the balance between having the latest features vs. having a known and steady environment state. The auto-upgrade is definitely a good option, but you can also issue upgrade actions to endpoints one-off or in bulk via the Action Center. One option is to put a group of endpoints into an auto-upgrade mode to have a test bed of devices running the latest version and then use the Action Center to upgrade the rest of your devices as you choose.

Re: Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade

P.Jacob — Fri, 10 Jun 2022 17:11:36 GMT

I turn on the auto-upgrade feature only when there is a version I want to go to. I wished you could get more granular with the auto-update versions... having said that they have really added some options for that I just want to be able to specify exactly what version I want to go to... when I use the feature it works well except there is alway remediation. auto update gets about 90% of my clients and I have to fight with the rest. usually a combination of no disk space left or I have to use the cleaner and then reboot and my rmm tool will re-install. I like to stay cutting edge with my version and unlike panos there is not a preferred version.

Re: Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade

KanwarSingh01 — Sat, 11 Jun 2022 22:02:53 GMT

Agree with @P.Jacob we should be able to target more specific version i.e. specific minor version with agent auto-upgrade as well. Hope this feature is introduced soon.

Re: Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade

Shaveta — Fri, 19 Aug 2022 16:44:08 GMT

Hi,

I want to know is the Autoupgrade option available currently or this feauture will be introduced in future?

As I got confused by Reply of PeteJacobCF :"I turn on the auto-upgrade feature only when there is a version I want to go to."

Is it still avalaible or not yet?

Thanks,

Re: Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade

P.Jacob — Fri, 19 Aug 2022 17:03:28 GMT

@Shaveta you cannot say you only want a specific major and minor version. having said that they have introduced allowing to specify that you want to take the newest minor version. for me I want to just say hey always just use this specific version only... this is because certain sites I deal with have old cortex versions in their gold image and they don't always work with me on updating it.

Re: Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade

Shaveta — Fri, 19 Aug 2022 17:06:21 GMT

Where can I find the Autoupgrade feature in XDR, do I need to contact XDR support to enable it?

Re: Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade

P.Jacob — Fri, 19 Aug 2022 17:10:33 GMT

Part of it is in your settings.

The gear icon / configurations then agent configuration. Then you need a policy (agent settings).

I just have prevent and it is available to all customers.

Re: Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade

creddy — Sat, 20 Aug 2022 15:04:26 GMT

Hi @Shaveta,

Refer step 13 in below link,
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/endpoint-security/customizable-agent-settings/add-agent-settings-profile

XDR allows you to auto upgrade agent to any of the below

Latest agent release
Only maintenance release
Only maintenance release in a specific version
Upgrade to a specific version

I hope that answers your query

Re: Thoughts / Experience So Far - Cortex XDR Agent Auto-upgrade

tejasp04 — Tue, 04 Oct 2022 07:42:02 GMT

Hello All,

Is there any recommended configurations for auto upgrade agent? Do we need to disable the agent tampering when applying these changes.

Also is there anyone having observations regarding failed system while upgrade do they revert back to old version in connected state or we need to reinstall them again manually.

Thanks in advance.