Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
MarcVB
Contributor
Jump to solution

Harmony endpoint - client upgrade

Hi,

I have a lot of small customers (< 10 Windows pc's) who are using Harmony Enpoint protection. Now I want to upgrade them all to the newest (recommended) version E86.60

Is there a best practice to do the upgrade ? 

There is a sk (sk164896) but this is only relevant for on-premise Endpoint Security Servers. All my customers are managed via the cloud (Infinity portal) 

Thanks.

0 Kudos
1 Solution

Accepted Solutions
G_W_Albrecht
Legend
Legend

Just try the Endpoint Security Client upgrade through deployment rules as explained in the Admin Guide !

Upgrades are seamless to our users. A new type of Push Operation are rolled out and added to all Harmony Endpoint users.

CCSE CCTE CCSM SMB Specialist

View solution in original post

0 Kudos
7 Replies
Swiftyyyy
Advisor

The video in the SK is still somewhat relevant even to the Cloud managed version. 

What I'd like to mention though, depending on the size of your organization, it's strongly recommended to segment your upgrade into groups.

If you simply move up the version on your "Entire Organization" deployment rule you'll likely end up overwhelming your WAN links.
This is an issue with the on-premise solution, causing trouble at the LAN level in some cases but as you can imagine, the problem is even greater when piping all that traffic to a likely more limiting WAN pipe.

0 Kudos
G_W_Albrecht
Legend
Legend

If the number of clients is <10 for each customer segmentation is not needed at all 😉

CCSE CCTE CCSM SMB Specialist
0 Kudos
Swiftyyyy
Advisor

Of course.
Our general practice is to push in waves of ~70 Endpoints (in some cases more in some cases less..)

Regardless, would be a whole lot easier if Check Point were to implement a "randomize" option during these operations. Trellix (formerly McAfee) has that with ePolicy Orchestrator and deployment operations are very easy there.

Of course the more sensible choice would be to just use a 3rd party deployment tool 🙂

0 Kudos
G_W_Albrecht
Legend
Legend

I do not understand your reference to large installatons here - why not create your own post with explanations of best upgrade practices in large scale deployments ? But not here as we do not need it  - the original question concerns only customers with <10 clients...

CCSE CCTE CCSM SMB Specialist
0 Kudos
the_rock
Legend
Legend

O yea, ePolicy Orchestrator, pretty cool tool. I agree!

0 Kudos
G_W_Albrecht
Legend
Legend

Just try the Endpoint Security Client upgrade through deployment rules as explained in the Admin Guide !

Upgrades are seamless to our users. A new type of Push Operation are rolled out and added to all Harmony Endpoint users.

CCSE CCTE CCSM SMB Specialist
0 Kudos
MarcVB
Contributor

Thanks. I tried, with success,  the upgrade through deployment rules in my environment.

I have to inform the customer that he will get a pop-up window - asking to do the upgrade now or within 47 hours.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events