@dphung it will automatically upgrade and override the existing installation.  

Hi All

We are in the process of migrating from zscaler to netskope. We have 30K client and would use Microsoft SCCM for the initial deployment. I was wondering if for the future client upgrade options would automatic client upgrade options to be used  or software deployment tool/Microsoft SCCM.

Thanks 

@bongoozy it is probably best for you to setup a meeting with your Customer Success Manager to discuss options that would work best for your environment.  You have essentially 3 options:

1. Deploy Netskope client with upgrade option turned off - in that case it will never upgrade and you have to move to the new version via SCCM or equivalent. 

2. Perform auto-upgrade of the client to the latest release automatically

3. Perform automatic upgrade to a certain golden version that you certify, or turn off automatic upgrades to any version as a rule and and turn it on temporarily to upgrade clients to latest or certified golden version as needed.

@mkoyfman thanks for the information. We are working with the vendor. We deployed v84 through SCCM and then auto deployed v87 as a pilot to 300 devices. Going ahead we might set autodeploy to version n-1. My only concern is 30K device automatically upgrading through the appliance/agent vs the SCCM infrastructure. This is something we will tackle once we finish migration and we seem to have lots of networking challenges and how to remove the PAC file config in the existing zscaler environment 😀.

It's good share our experience and lessons learnt through this channel. 👍

The autoupgrade process is still staggered.  Each client devices periodically checks with the management plane and if it is configured to autoupgrade, it will.  But there are a number of factors that ensure randomness of the time - for example, if you have active tunnel, the. upgrade obviously won't happen until we detect it's been idle for some time, etc.  So, in practice, we've learned from customers of all sizes that having client on auto-upgrade does not typically cause a problem in terms of overwhelming resources, etc.  But ultimately the choice of how much control you want to exercise over the upgrade process is yours.

We have auto -upgrade option regardless of initial deployment is SCCM or MDM's

Thanks for the info. We have 32K endpoints and keen to know more about any remediation or client health status reports recommend and standard OPS procedure. I would also appreciate any best practice to update the SOE/MOE. I am planning to update the build with the latest version aligning with the version available in the Tenant set for auto-update. New to Netskope and want to formulate the Client maintenance and update framework.

@bongoozy this sounds like a great topic to discuss with your Customer Success Manager who can work with you to help formalize the right process for your organization.

@mkoyfman I was more keen to have some best practice or community experience though this channel while being optimistic that the Customer Success Manager would be the touch of Midas 😀. 

@shivadas Please share your experience on client management or remediation task involved. I am sure there should be clients not updating and would be unsupported with time. I am just want to have an idea of the OPS task for maintaining 30K NS clients.