Auto-update to second latest version

Z.Zikri — Fri, 19 Jun 2026 03:51:02 GMT

For Cortex XDR , May I know , is it possible to push auto-update to second latest version whenever have latest update to avoid bug or problem when use the latest version agent. If possible, how?

Re: Auto-update to second latest version

Vinothkumar_SBA — Fri, 19 Jun 2026 11:53:04 GMT

Hi @Z.Zikri ,

Yes. Cortex XDR provides an Automatic Upgrade Scope option called "One release before the latest one". When enabled, endpoints will automatically upgrade to the previous agent release rather than the newest release. This is a recommended approach for organizations that want to avoid deploying newly released agent versions directly to production endpoints.

How to Configure:

Navigate to Settings → Configurations → Agent Configurations.
Open the relevant Agent Settings Profile.
Enable Agent Auto-Upgrade.
Set Automatic Upgrade Scope to "One release before the latest one".
Optionally configure Upgrade Rollout = Delayed and set a delay period (7–45 days) before deployment.
Apply the profile to the required endpoint groups.

Alternative Option – Manual Upgrade:
If tighter control is required, administrators can disable auto-upgrade and manually deploy a specific approved agent version after validation in a test or pilot group.

Recommended Best Practice:

Pilot/Test Group: Upgrade to the latest release first.
Production Group: Use "One release before the latest one" or perform manual upgrades after testing.
Consider using a delayed rollout window to allow time for identifying potential issues in newly released versions.

References:

Palo Alto Networks – Guidelines for keeping Cortex XDR agents and content updated:
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-5.x-Documentation/Guidelines-for-keeping-Cortex-XDR-agents-and-content-updated
Palo Alto Networks – Set up agent settings profiles:
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-3.x-Documentation/Set-up-agent-settings-profiles
Palo Alto Networks – Cortex XDR Agent and Content Upgrades:
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/8.6/Cortex-XDR-Agent-Administrator-Guide/Cortex-XDR-Agent-and-Content-upgrades

Please help other users by clicking ‘Accept as Solution’ if a post helps solve your problem.

Best Regards,
Vinothkumar.C

topic Re: Auto-update to second latest version in Discussions

Auto-update to second latest version

Re: Auto-update to second latest version