Cortex installation error

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Cortex installation error

L0 Member

Greetings,
Actually I've upgraded to latest Windows version, try turning off Anti-Tempering, yet I still couldn't install a new version to an AD user. Any advice? Thanks!

1 accepted solution

Accepted Solutions

Hi @Rotanakpanha

If upgrade from console is failing and manual upgrade after disabling tempering protection... By the way how are you disabling the tampering protection? Change the assigned agent profile in the console or with the cytool

 

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/7.9/Cortex-XDR-Agent-Administrator-Guide/Cytoo...

 

> cytool protect disable

After executing the above command does all protections are reported as disabled

> cytool protect query

 

Try to stop all protection services with:

> cytool runtime stop
### Check status 
> cytool runtime query

Try to uninstall the XDR agent from control panel. Once uninstall is complete (most probably will require reboot), try to run the installation for the new version.

 

If manual and remote upgrade fail you will need to contact TAC support. They should be able to provide you with "custom cleaning tool" which could help you remove the old version and after that install the new one.

View solution in original post

3 REPLIES 3

Hi @Rotanakpanha ,

Have you try upgrading the existing agent from XDR console?

Endpoints -> All Endpoints -> Right click on the endpoint -> Endpoint Control -> Upgrade Agent

Hello @aleksandar.astardzhiev,

Yes, I did. But it still doesn't work. Also, I find it strange that some of them are working and some of them aren't.
Thanks.

Hi @Rotanakpanha

If upgrade from console is failing and manual upgrade after disabling tempering protection... By the way how are you disabling the tampering protection? Change the assigned agent profile in the console or with the cytool

 

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/7.9/Cortex-XDR-Agent-Administrator-Guide/Cytoo...

 

> cytool protect disable

After executing the above command does all protections are reported as disabled

> cytool protect query

 

Try to stop all protection services with:

> cytool runtime stop
### Check status 
> cytool runtime query

Try to uninstall the XDR agent from control panel. Once uninstall is complete (most probably will require reboot), try to run the installation for the new version.

 

If manual and remote upgrade fail you will need to contact TAC support. They should be able to provide you with "custom cleaning tool" which could help you remove the old version and after that install the new one.

  • 1 accepted solution
  • 2345 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!