topic Re: Harmony endpoint - client upgrade in Endpoint

Harmony endpoint - client upgrade

MarcVB — Mon, 05 Dec 2022 13:51:03 GMT

Hi,

I have a lot of small customers (< 10 Windows pc's) who are using Harmony Enpoint protection. Now I want to upgrade them all to the newest (recommended) version E86.60

Is there a best practice to do the upgrade ?

There is a sk (sk164896) but this is only relevant for on-premise Endpoint Security Servers. All my customers are managed via the cloud (Infinity portal)

Thanks.

Re: Harmony endpoint - client upgrade

Swiftyyyy — Mon, 05 Dec 2022 13:59:31 GMT

The video in the SK is still somewhat relevant even to the Cloud managed version.

What I'd like to mention though, depending on the size of your organization, it's strongly recommended to segment your upgrade into groups.

If you simply move up the version on your "Entire Organization" deployment rule you'll likely end up overwhelming your WAN links.
This is an issue with the on-premise solution, causing trouble at the LAN level in some cases but as you can imagine, the problem is even greater when piping all that traffic to a likely more limiting WAN pipe.

Re: Harmony endpoint - client upgrade

G_W_Albrecht — Mon, 05 Dec 2022 14:02:14 GMT

If the number of clients is <10 for each customer segmentation is not needed at all 😉

Re: Harmony endpoint - client upgrade

Swiftyyyy — Mon, 05 Dec 2022 14:04:56 GMT

Of course.
Our general practice is to push in waves of ~70 Endpoints (in some cases more in some cases less..)

Regardless, would be a whole lot easier if Check Point were to implement a "randomize" option during these operations. Trellix (formerly McAfee) has that with ePolicy Orchestrator and deployment operations are very easy there.

Of course the more sensible choice would be to just use a 3rd party deployment tool 🙂

Re: Harmony endpoint - client upgrade

G_W_Albrecht — Mon, 05 Dec 2022 14:06:04 GMT

Just try the Endpoint Security Client upgrade through deployment rules as explained in the Admin Guide !

Upgrades are seamless to our users. A new type of Push Operation are rolled out and added to all Harmony Endpoint users.

Re: Harmony endpoint - client upgrade

G_W_Albrecht — Mon, 05 Dec 2022 14:28:58 GMT

I do not understand your reference to large installatons here - why not create your own post with explanations of best upgrade practices in large scale deployments ? But not here as we do not need it - the original question concerns only customers with <10 clients...

Re: Harmony endpoint - client upgrade

MarcVB — Mon, 05 Dec 2022 19:27:10 GMT

Thanks. I tried, with success, the upgrade through deployment rules in my environment.

I have to inform the customer that he will get a pop-up window - asking to do the upgrade now or within 47 hours.

Re: Harmony endpoint - client upgrade

the_rock — Tue, 06 Dec 2022 00:17:13 GMT

O yea, ePolicy Orchestrator, pretty cool tool. I agree!