App Control: Upgraded agents flagged with "reboot required" message in the console
book
Article ID: 288464
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
Upgraded agents flagged with "reboot required" message in the console
Upgraded agents show up as "Approvals-Out-Of-Date"
Environment
App Control Agent: All versions
Cause
"EnableConfigListFullImport" property in Shepherd Config is enabled
"EnableConfigListFullImport" tells the agents to download the full (instead of default incremental updates)configlist file from the server and use it when the "Resend Policies" command is issued. This config also requires that the agent service be restarted
Upgrading agents would trigger "resend policies" action which in turn would require the agent service to be restarted/rebooted.
Resolution
Rebooting the agents resolves the issue
It is recommended to set property "EnableConfigListFullImport" to false to to avoid network and performance impact
There are certain situations wherein support may suggest enabling the property temporarily to fix a broken CL version for an endpoint or any related issues.