>
    Strata Copilot
    Manage Autonomous DEM Agent Upgrades
    Focus
    Download PDF
    Focus
    1. Home
    2. Autonomous DEM
    3. Manage Autonomous DEM Agent Upgrades
    Download PDF
    Autonomous DEM

    Manage Autonomous DEM Agent Upgrades

    Table of Contents

    Manage Autonomous DEM Agent Upgrades

    Decide whether to manually upgrade your Autonomous DEM agents or SD-WAN remote sites, or upgrade them automatically.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    • Prisma Access license
    • ADEM or Strata Cloud Manager Pro license
    Although the Autonomous DEM agent is integrated with the GlobalProtect app and Prisma SD-WAN devices in remote sites, it updated separately from GlobalProtect or Prisma SD-WAN to ensure that the agent can detect the most up-to-date digital experience metrics. You can do one of the following:
    • Upgrade the Autonomous DEM agent or remote site manually from within the Autonomous DEM user interface.
    • Set up Autonomous DEM to upgrade automatically whenever there is a new agent version.
    • Upgrade manually using an agent installer that you download from the Palo Alto Networks Customer Support Portal.
    To manage upgrades from within the Autonomous DEM user interface:
    1. Go to the Agent Management Settings.
      • For Mobile Users, select Strata Cloud ManagerSystem SettingsAccess Experience Agent Management.
      • For Remote Sites, select Strata Cloud ManagerSystem SettingsRemote Sites Agent Management.
    2. Select how you want to upgrade the agent in Upgrade Options:
      • Upgrade—Displays the current version and the new version available for upgrade and allows you to manually Start Upgrade for all online endpoint or Remote Site agents. After you upgrade the agents or remote sites, the button will gray out and remain grayed out until a new agent or remote site version is available (though agents will continue to be upgraded as they come online). With this option, you will need to repeat this upgrade process each time you want a new version that is available.
      • Auto Upgrade—Select this option to automatically upgrade the Autonomous DEM agent whenever a new version is available. If you enable this option, the option to manually upgrade the agents is no longer available. However, you can disable Auto Upgrade at any time and go back to upgrading the agents manually.
      After you select an upgrade option, the Autonomous DEM service will immediately upgrade all online agents, and initiate the upgrade for the remaining agents or sites when they next come online. End users will be notified when the ADEM agent is upgraded.

    Manually Upgrade Autonomous DEM Agent using MSI

    You can manually upgrade your Autonomous DEM using an installation package that you download from the Customer Support Portal in the same way as you can download your GlobalProtect app installation package. Alternatively, you can upgrade the agent from within the Autonomous DEM user interface.
    To upgrade manually using an agent that you download from the Palo Alto Networks Customer Support Portal:
    • For Windows endpoints, you can obtain the update by navigating to Software Updates in the Customer Support Portal. Search for GlobalProtect Autonomous DEM for Windows64.
      To deploy the agent to Windows endpoints, use Msiexec or via an MDM.
    • For Mac OS X endpoints, you can obtain the update by navigating to Software Updates in the Customer Support Portal. Search for GlobalProtect Autonomous DEM for OS X.
      To deploy the agent to MacOS endpoints, use the macOS plist or via an MDM.

    © 2025 Palo Alto Networks, Inc. All rights reserved.