Depending on your Cortex® XDR™ agent release, you can
install or upgrade the agent in Advertise mode.
Advertise mode is an
you can set manually through the
command line or through a deployment profile in a third-party deployment
tool such as Microsoft System Center Configuration Manager (SCCM),
allowing the Windows Installer to advertise the availability of
an application to users or other applications without actually installing
the application. For more information on advertise mode, refer to
the Microsoft Windows official documentation.
When you want to install or upgrade a Cortex
XDR agent on an endpoint where a Cortex XDR agent release prior
to 7.0.3 was installed in Advertise mode, whether the agent is still
running or was removed from the endpoint, you must first clean the
endpoint from the remains of the previous installation in Advertise
mode. Otherwise, if you don’t clean the endpoint, the installation/upgrade
of the Cortex XDR agent will fail.
The following table
summarizes the different scenarios of upgrade paths and the recommended
workaround according to the different Cortex XDR agent releases:
Upgrade to Agent Release 5.0.0 or Later
Upgrade to Agent Release 7.0.3 or Later
Upgrade to Agent Release 7.1.1 or Later
Agent release 5.0.0 or later that was installed in
Not supported, leads to undefined behavior.
Palo Alto Networks Support for assistance before you can re-install
Not supported, you will receive an error
in the agent installation log.
Contact Palo Alto Networks
Support for assistance before you can re-install the agent.
You will receive an error in the agent installation
to you command line and proceed to install the agent.
Agent release 7.0.3 or later that was installed in
Palo Alto Networks recommends that you
always upgrade to the latest agent release of the latest major version
and use the
to mitigate any Advertised mode related issues.