App Control: Upgraded agents flagged with "reboot required" message in the console

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Upgraded agents flagged with "reboot required" message in the console
• Upgraded agents show up as "Approvals-Out-Of-Date"

Environment

• App Control Agent: All versions

Cause

• "EnableConfigListFullImport" property in Shepherd Config is enabled
• "EnableConfigListFullImport" tells the agents to download the full (instead of default incremental updates)configlist file from the server and use it when the "Resend Policies" command is issued. This config also requires that the agent service be restarted
• Upgrading agents would trigger "resend policies" action which in turn would require the agent service to be restarted/rebooted.

Resolution

• Rebooting the agents resolves the issue
• It is recommended to set property "EnableConfigListFullImport" to false to to avoid network and performance impact
• There are certain situations wherein support may suggest enabling the property temporarily to fix a broken CL version for an endpoint or any related issues.