Harmony endpoint - client upgrade

[MarcVB]

Hi,

I have a lot of small customers (< 10 Windows pc's) who are using Harmony Enpoint protection. Now I want to upgrade them all to the newest (recommended) version E86.60

Is there a best practice to do the upgrade ? 

There is a sk (sk164896) but this is only relevant for on-premise Endpoint Security Servers. All my customers are managed via the cloud (Infinity portal) 

Thanks.

[Swiftyyyy]

The video in the SK is still somewhat relevant even to the Cloud managed version. 

What I'd like to mention though, depending on the size of your organization, it's strongly recommended to segment your upgrade into groups.

If you simply move up the version on your "Entire Organization" deployment rule you'll likely end up overwhelming your WAN links.
This is an issue with the on-premise solution, causing trouble at the LAN level in some cases but as you can imagine, the problem is even greater when piping all that traffic to a likely more limiting WAN pipe.

[G_W_Albrecht]

If the number of clients is <10 for each customer segmentation is not needed at all 😉

[Swiftyyyy]

Of course.
Our general practice is to push in waves of ~70 Endpoints (in some cases more in some cases less..)

Regardless, would be a whole lot easier if Check Point were to implement a "randomize" option during these operations. Trellix (formerly McAfee) has that with ePolicy Orchestrator and deployment operations are very easy there.

Of course the more sensible choice would be to just use a 3rd party deployment tool 🙂

[G_W_Albrecht]

I do not understand your reference to large installatons here - why not create your own post with explanations of best upgrade practices in large scale deployments ? But not here as we do not need it  - the original question concerns only customers with <10 clients...

[the_rock]

O yea, ePolicy Orchestrator, pretty cool tool. I agree!

[G_W_Albrecht · Accepted solution]

Just try the Endpoint Security Client upgrade through deployment rules as explained in the Admin Guide !

Upgrades are seamless to our users. A new type of Push Operation are rolled out and added to all Harmony Endpoint users.

[MarcVB]

Thanks. I tried, with success,  the upgrade through deployment rules in my environment.

I have to inform the customer that he will get a pop-up window - asking to do the upgrade now or within 47 hours.