Upgrade agents

Upgrade the agents on the managed assets when ColorTokens releases newer versions of agents. We continually improve the capabilities of the agents to make them more adept at securing your assets and the network.

Agent upgrade

The Agent upgrade process does not overwrite or clean up the existing agent log files. The logs collected for the previous version are retained, and the log data for the new agent is appended in the log files.

During the upgrade, the agent's connectivity to the Xshield instance is disrupted, and you will not be able to update Xshield policies or get telemetry data from the asset. The Assets page will show that the asset is Unreachable.

After the upgrade, the agent reestablishes connectivity with the instance. Xshield will send policy updates (if any), and the asset sends the telemetry data it cached during the upgrade.

The upgrade path for all agent versions before 8.5.2.7 is to upgrade to 8.5.2.7 and then to the newer versions (8.6.2.1 or 8.6.2.3). For customers who use the 8.5.2.6 version, it is recommended that you upgrade to 8.5.2.7 and preferably to the newer versions.  

From the Xshield UI

1. Go to Assets.

2. Select assets in one of the following ways:

   - One asset to upgrade the agent one at a time.

   - Multiple assets spanning across OSes to upgrade multiple agents at one go. 

3. Click Update selected agents in the fly panel.

4. Select the version of the agent and click Upgrade selected.

   The agents are upgraded in a few minutes.

Use Ansible or GPO

Upgrades using the Ansible script or Windows GPO are performed like an at-scale installation. Note that upgrading to agent version 8.7.x.x and newer uses the Product Key-based upgrade mode.

Downgrade agents

You can use the upgrade workflow to downgrade the agents on the assets. You must select the older version of the agent and complete the upgrade workflow.