Client Auto-Update

The Client Auto-Update feature allows the client to download an update file for its specific platform. The update occurs during first login or when the entitlement token is renewed. Using a criteria script allows you to run a pilot by selecting only users tagged as administrators, for example.

Forwards and backwards compatibility is maintained across five versions of the client. For any given version of AppGate ZTNA, clients on v-2, v-1, v, v+1, and v+2 should be compatible.

Configuring Client Auto-Update

To configure the auto-update feature, go to the Client Auto-Update page (System > Client Auto-Update) and complete the following fields:

• Mode. Select Disabled or Enabled.

• Criteria Script. Use the dropdown to select a script. Auto-update will be triggered for the device if the given criteria script returns true for the user and device. These can be configured in the Criteria Scripts page.

• Platform settings. It is possible to set auto-update configurations for the following platforms:

  • Windows, macOS and Linux - full and always-on: Criteria script should be looking for: clientType=full AND (os.family=windows OR macOS OR linux).

  • Windows - headless: Criteria script should be looking for: (clientType=headless) AND os.family=windows

NOTE

Linux updates are not fully automated and instructions will be provided to the user to compete the upgrade manually.

All platform settings sections have the following fields:

• Download URL. The client will download the update file from the given URL. Note that the client should have access to the given server and trust the HTTPS certificate if there is any. The installer is also verified for signature internally.

• If the client version is lower than. Auto-update will be triggered if the client version is lower than entered.

For more information about how auto-update works and how to update other client types, refer to Updating clients.

Checking version adoption

It is possible to check on the take-up of a new version using either the client version widget or one of the pre-configured visualizations in the LogServer.