How do I upgrade MetaDefender Endpoint on one or more of my managed endpoints via the MetaDefender IT-OT Access Console?

Configure automatic Persistent Client updates via the MetaAccess Console, and set the system to notify On-Demand Client users when they are due for an update

If automatic updates are enabled via the instructions below, the Persistent OPSWAT Client will update automatically on all endpoints as new versions are released.

If a device is offline for an extended period, the version will update as soon as the device is back online.

To configure auto-updates on all Persistent Client devices, and to notify On-Demand Client users when they are due for an update, please follow the instructions below.

1. Log into the MetaAccess Console and navigate to the Settings>Global Settings>Device Agents tab, then locate the Agent section.
2. Here you will find options to Automatically update to the specific version and to Enforce agent version when a user downloads an agent from the download page. Ensure that both of these options are enabled and set to latest for the relevant operating systems.
3. In the Notification to Users section of the same page, select the option to Notify a user when a device runs an out-of-date on-demand agent.

4. Configure additional Device Agent settings as needed.
5. Click the Save button in the upper right-hand corner of the screen to enable your settings.

Configuring device agent version conditions under policy

In the case of the On-demand Client, you will be notified, while end users will only be notified if notifications are configured as in step 3 of the first section of this article.

To adjust agent version conditions under policy, and receive notification when devices are in breach, please follow the instructions below.

1. Log into the MetaAccess Console and navigate to Policy Management>Policies>Relevant Policy>Rules.
2. Set a Rule whereby the system will:

• Consider a device to be Compliant if it meets ALL following conditions:
  • Device severity is No issues in 1 consecutive report.

3. Under this new rule, Add an agent version condition by selecting this option from the Add a condition drop-down menu, as illustrated below, ensuring that the condition requires that Client for Windows is the latest.

4. Add similar conditions for each Client type and each device operating system, as needed, by selecting the required options from the drop-down menu that, by default, reads Client for Windows, as illustrated below.

5. Once all variations are configured, click the Save button in the upper right-hand corner of the screen to implement your settings.