topic Re: Agent Downgrade in Cortex XDR in Cortex XDR Discussions

Agent Downgrade in Cortex XDR

Saliha — Tue, 10 Oct 2023 10:18:14 GMT

Hi,

When will the agent version downgrade feature come to cortex xdr?
Our customers and we are persistently waiting for this feature.

Good works.

Re: Agent Downgrade in Cortex XDR

aspatil — Tue, 10 Oct 2023 10:41:15 GMT

Hello Saliha,

Thank you for writing to live community!

Unfortunately we do not have any roadmap to have Agent Roll back feature. We are following waterfall method for agent upgrades. However, if after agent is upgraded & if it is found that the upgrade was not stable, the cortex XDR health helper service ensures to roll back the agent on the previous agent version.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.

Regards.

Re: Agent Downgrade in Cortex XDR

Saliha — Tue, 10 Oct 2023 11:38:20 GMT

Hi,

Uninstalling the agent is something that can be done from the platform, but installing it is done manually.
Sometimes new cortex xdr versions are unstable and it may be necessary to downgrade the version and downgrading from the platform will speed up our operations.

Regards.

Re: Agent Downgrade in Cortex XDR

aspatil — Tue, 10 Oct 2023 11:53:49 GMT

Hello Saliha,

I do understand your concern. However being in a waterfall model, If you wanted to downgrade versions you would need to uninstall the agent and create a new installation package with the specific version you want to install.

Re: Agent Downgrade in Cortex XDR

afurze — Tue, 10 Oct 2023 14:23:40 GMT

Saliha,

This may be an opportunity to look at your customers upgrade process. Maybe, instead of being on the latest agent version, it makes more sense to be on the "one before the latest" release cycle, or only the latest available maintenance release, in order to avoid potential issues. Additionally, testing should always be done before deploying to ensure that there will not be any issues with critical business applications.

We don't want to encourage customers to go backward in their agent deployment, it is much better to manage your deployment by targeting maintenance versions, and to test thoroughly before deploying widely.