Auto update XDR agent when new station connects.

[CHKlomp]

Is it possible to automate the endpoint updates so any workstations reporting into Cortex will get upgraded to a minimum version ?

Right now we have a query that can check for lower than minimum version and detected devices can be selected to be upgraded, but it's a manual process.

(I tried to open a support case, but when choosing Endpoint Protection as Technology, no No Product/Problem Area is available for selection, so cannot create a case...)

Thanks, Chris K.

[Remo · Accepted solution]

Hi @CHKlomp 

Yes, this setting is available in the agent settings profile. https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/endpoint-security/custo... --> Step 13

With this setting you can choose between auto update for any version or only for minor versions of the current major release. Additionally you can configurw a minimum version to which older agents will be updated.