Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control:  Upgraded agents flagged with "reboot required" message in the console

App Control:  Upgraded agents flagged with "reboot required" message in the console

Environment

  • App Control Agent: All versions

Symptoms

  • Upgraded agents flagged with "reboot required" message in the console
  • Upgraded agents show up as "Approvals-Out-Of-Date"

Cause

  • "EnableConfigListFullImport" property in Shepherd Config is enabled
  • "EnableConfigListFullImport" tells the agents to download the full (instead of default incremental updates)configlist file from the server and use it when the "Resend Policies" command is issued. This config also requires that the agent service be restarted
  • Upgrading agents would trigger "resend policies" action which in turn would require the agent service to be restarted/rebooted.

Resolution

  • Rebooting the agents resolves the issue
  • It is recommended to set property "EnableConfigListFullImport" to false to to avoid network and performance impact
  • There are certain situations wherein support may suggest enabling the property temporarily to fix a broken CL version for an endpoint or any related issues.

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-08-2022
Views:
52
Contributors