Agent Downgrade in Cortex XDR

[Saliha]

Hi,

When will the agent version downgrade feature come to cortex xdr?
Our customers and we are persistently waiting for this feature.

Good works.

[aspatil]

Hello Saliha,

Thank you for writing to live community!

Unfortunately we do not have any roadmap to have Agent Roll back feature. We are following waterfall method for agent upgrades. However, if after agent is upgraded & if it is found that the upgrade was not stable, the cortex XDR health helper service ensures to roll back the agent on the previous agent version.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.

Regards.

[Saliha]

Hi, 

Uninstalling the agent is something that can be done from the platform, but installing it is done manually.
Sometimes new cortex xdr versions are unstable and it may be necessary to downgrade the version and downgrading from the platform will speed up our operations.

Regards.

[aspatil]

Hello Saliha,

I do understand your concern. However being in a waterfall model, If you wanted to downgrade versions you would need to uninstall the agent and create a new installation package with the specific version you want to install.

[afurze]

Saliha,

This may be an opportunity to look at your customers upgrade process.  Maybe, instead of being on the latest agent version, it makes more sense to be on the "one before the latest" release cycle, or only the latest available maintenance release, in order to avoid potential issues.  Additionally, testing should always be done before deploying to ensure that there will not be any issues with critical business applications.

We don't want to encourage customers to go backward in their agent deployment, it is much better to manage your deployment by targeting maintenance versions, and to test thoroughly before deploying widely.