App Control: Upgraded agents flagged with "reboot required" message in the console
Environment
App Control Agent: All versions
Symptoms
Upgraded agents flagged with "reboot required" message in the console
Upgraded agents show up as "Approvals-Out-Of-Date"
Cause
"EnableConfigListFullImport" property in Shepherd Config is enabled
"EnableConfigListFullImport" tells the agents to download the full (instead of default incremental updates)configlist file from the server and use it when the "Resend Policies" command is issued. This config also requires that the agent service be restarted
Upgrading agents would trigger "resend policies" action which in turn would require the agent service to be restarted/rebooted.
Resolution
Rebooting the agents resolves the issue
It is recommended to set property "EnableConfigListFullImport" to false to to avoid network and performance impact
There are certain situations wherein support may suggest enabling the property temporarily to fix a broken CL version for an endpoint or any related issues.