Upgrade the Persistent Agent
Hosts on your network that have a Persistent Agent installed can be updated automatically using the settings in System > Settings > Persistent Agent > Agent Update. See Agent update for instructions.
Update on a single host
Hosts on your network that already have a version of the Persistent Agent installed can be updated individually. The FortiNAC administrator may choose to selectively update a few hosts to test a new version of the Agent or to install an earlier version of the agent on an older host.
Clients upgrading the Persistent Agent must have access to Port 80 on the FortiNAC appliances.
The update is sent immediately to the host. The host must be running and connected to the network for the update to be successful.
If the host has software installed to reset the host to its original configuration after a re-boot, the agent reverts to the previous version. The software must be disabled before updating the Agent.
A special group, Global Agent Update Exceptions, has been created to stop selected hosts from being automatically updated. Any host in this group is not updated. If you update a host to an agent version that is different from the version selected for Global Agent Updates, this host is automatically moved to the Global Agent Update Exceptions Group. If necessary, this host must be manually removed from that group. See Group membership for instructions.
To select and update a host:
- Click Users & Hosts > Hosts.
- Right–click on the host and select Host Properties.
- A window displays containing the host information. If the host has more than one MAC address, all are displayed.
- In the Policy Agent/Access section of the window, locate the Agent Version field. The agent version that is currently installed on the host is displayed.
- Click Update.
- Select the new Persistent Agent version from the drop-down list and click OK.
When you select OK, FortiNAC “polls” the host to determine the point at which the version number changes to the new version. This “polling” times out after a minute or when the new version number is returned. If the update times out without returning a new version number, a message that the update has failed is displayed. If the new version number is returned, a message that the update was successful is displayed.
No events are generated based on the success or failure of an individual host update.