Downgrade Prisma Access Agents

Table of Contents

Selectively Upgrade Prisma Access Agents

Download Host Information Profile Reports for Prisma Access Agents

Downgrade Prisma Access Agents

Learn how to downgrade a Prisma Access Agent on an end user's device.

Where Can I Use This?	What Do I Need?
Prisma Access (Managed by Strata Cloud Manager) Prisma Access (Managed by Panorama) NGFW (Managed by Panorama)	Check the prerequisites for the deployment you're using macOS 14 and later or Windows 10 version 2024 and later desktop devices Contact your Palo Alto Networks account representative to activate the Prisma Access Agent feature

You can downgrade the Prisma Access Agent to a previous release to troubleshoot Prisma Access Agent issues on an end user's device.

You can downgrade the agent only to the release that came immediately before the current release (the Agent Version shown in the Agent Upgrade Progress section). You cannot downgrade agents that are older than the current release, or downgrade agents to other earlier releases.

Select ConfigurationEndpoint Management.
(Optional) Set the scope of the agent data you want to show by selecting the Time Range. You can select a preset time range or customize the time range. The default is to show the data within the Past 30 Days.
In the Devices table, scroll through the list to find the device or search for a device.
Select the check boxes corresponding to the agents that you want to downgrade. You can select up to 20 devices at a time.
Select ActionsDowngrade Agent.

If you are viewing the details for an individual agent, you can also select Actions from the individual details view.

The downgrade agent action is not available to administrators with the View Only Administrator role.
In the Confirmation dialog, click Yes to confirm the downgrade operation.

The Jobs button appears to indicate that the downgrade job has been added to the queue.

If you downgraded the agent from the device details pane, you must close the pane to see the Jobs button in the Devices table.
To view the status of the downgrade, click Jobs. The status of the job appears in the Remote Jobs window.
The status descriptions are as follows:
- Requested—The administrator has initiated the request. The Prisma Access Agent has not yet acknowledged or acted on the request.
- Pending—The agent has received the request, and is currently processing the request. The agent acknowledges the receipt of the command.
- Completed—The agent has processed the request.
- Failed—The agent was unable to complete the request.