We have a handful of users that are still on v78. We would like to upgrade everyone's client to v87 by allowing the client to upgrade automatically in the client configuration settings. If this feature is enabled in the tenant, will it remove the previous version and install / overwrite with the new version automatically or we would have to manually uninstall and manually reinstall ?
Solved! Go to Solution.
We are in the process of migrating from zscaler to netskope. We have 30K client and would use Microsoft SCCM for the initial deployment. I was wondering if for the future client upgrade options would automatic client upgrade options to be used or software deployment tool/Microsoft SCCM.
@bongoozy it is probably best for you to setup a meeting with your Customer Success Manager to discuss options that would work best for your environment. You have essentially 3 options:
1. Deploy Netskope client with upgrade option turned off - in that case it will never upgrade and you have to move to the new version via SCCM or equivalent.
2. Perform auto-upgrade of the client to the latest release automatically
3. Perform automatic upgrade to a certain golden version that you certify, or turn off automatic upgrades to any version as a rule and and turn it on temporarily to upgrade clients to latest or certified golden version as needed.
@mkoyfman thanks for the information. We are working with the vendor. We deployed v84 through SCCM and then auto deployed v87 as a pilot to 300 devices. Going ahead we might set autodeploy to version n-1. My only concern is 30K device automatically upgrading through the appliance/agent vs the SCCM infrastructure. This is something we will tackle once we finish migration and we seem to have lots of networking challenges and how to remove the PAC file config in the existing zscaler environment 😀.
It's good share our experience and lessons learnt through this channel. 👍
The autoupgrade process is still staggered. Each client devices periodically checks with the management plane and if it is configured to autoupgrade, it will. But there are a number of factors that ensure randomness of the time - for example, if you have active tunnel, the. upgrade obviously won't happen until we detect it's been idle for some time, etc. So, in practice, we've learned from customers of all sizes that having client on auto-upgrade does not typically cause a problem in terms of overwhelming resources, etc. But ultimately the choice of how much control you want to exercise over the upgrade process is yours.
Thanks for the info. We have 32K endpoints and keen to know more about any remediation or client health status reports recommend and standard OPS procedure. I would also appreciate any best practice to update the SOE/MOE. I am planning to update the build with the latest version aligning with the version available in the Tenant set for auto-update. New to Netskope and want to formulate the Client maintenance and update framework.