After a desktop/mobile client device is enrolled on Ivanti
Neurons for Zero Trust Access (nZTA), the following
upgrade operations are supported:
A client update package can be downloaded to each enrolled device to
add new features and to resolve issues in previous versions. See Working with Client Packages.
An Endpoint Security Assessment Plug-In (ESAP) update can be
downloaded to each enrolled device. An ESAP package is included in every
system software package. However, Ivanti releases ESAP update
packages more frequently than system software versions. You may choose
to upgrade the ESAP package more regularly than client software. See
Enabling Minimum Supported Client Version.
All packages are automatically uploaded to the Controller.
No manual intervention is required to achieve this. You can choose to
either the latest updates to be automatically made available to your
end-user client devices, or to manually control the roll out of a
selected package version.
When you select a newly-available update package for your end-users,
or where you have elected to enable automatic updates and a new version
becomes available, allow up to 30 minutes before the new package
download is triggered on your end user client devices.
Working with Client Packages
After a client device is enrolled, you can upgrade its client
software with a newer Ivanti Secure Access Client package from
the Controller.
From the nZTA menu, click the
Administration icon, then select Upgrade >
Installation Packages.
The Installation Packages page appears.
Click the Ivanti Secure Access Client tab.
A list of available Ivanti Secure Access Client packages
appears.
Enable the Auto update to latest version
control.
The most recent Ivanti Secure Access Client package is
selected automatically. For example:
Automatic Ivanti Secure Access Client Update
As each user next logs into Ivanti Secure Access Client on
their device, if their software is at an earlier version than the latest
version in the Controller, Ivanti Secure Access Client
provides an automatic update to the selected version.
Enabling
Manual Update of Ivanti Secure Access Client
To enable users to manually update to a specified version of
Ivanti Secure Access Client:
From the nZTA menu, click the
Administration icon, then select Upgrade >
Installation Packages.
The Installation Packages page appears.
Click the Ivanti Secure Access Client tab.
A list of available Ivanti Secure Access Client packages
appears.
Disable the Auto update to latest version
control.
Select any of the listed Ivanti Secure Access Client
packages. This is the version of the Ivanti Secure Access
Client software that you want users to have on their device. For
example:
Manual Ivanti Secure Access Client Update
As each user next logs into Ivanti Secure Access Client on
their device, if their software is at a different version, Ivanti
Secure Access Client provides a prompt to the user to change to the
version you selected in the Controller.
Ivanti Secure Access Client for Desktops does not support a
downgrade path. If the version you select in the Controller is
earlier than the client version currently installed on a user's desktop
device, the user must first uninstall the current Ivanti Secure
Access Client software. To trigger installation of the required
version, the user must then re-perform the nZTA enrollment
procedure through a web browser.
Enabling Minimum
Supported Client Version
This feature provides an option for the admin to force upgrade the
client version when Minimum Client Version is configured.
From the nZTA menu, click the
Administration icon, then select Upgrade >
Installations.
Enforce Minimum Client
Version
Select the Enforce minimum client version check
box.
The following options appear.
Desktop
Android
iOS
If Force update is selected, Client will
auto-upgrade once you enroll with older client.
Specify the minimum client version to be enforced on Ivanti
Secure Access Client. For example, 22.3R1.
If the minimum client version is not specified for any specific type
of client, any version of the client is allowed to connect to Ivanti
Connect Secure without any minimum client version enforcement for that
specific client.
Click Save.
Working with ESAP Packages
ESAP (Endpoint Security Assessment Plug-in) is a Ivanti Secure
Access Client plug-in through which you can upload the latest
security assessment definitions independently of a full client software
upgrade. After a user device is enrolled and Ivanti Secure Access
Client has been installed, you can upgrade ESAP with newer versions
from the Controller.
ESAP upgrade packages are automatically uploaded to the
Controller. When each user next logs into Ivanti Secure
Access Client on their device, if their ESAP definition is at an
earlier version, the ESAP definition updates automatically from the most
recent ESAP package.
Updating
ESAP Definitions on Clients Automatically
From the nZTA menu, click the
Administration icon, then select Upgrade >
Installation Packages.
The Installation Packages page appears.
Click the ESAP tab.
A list of available ESAP packages appears.
This feature is permanently enabled. When each user logs into
Ivanti Secure Access Client on their device, if their ESAP
definition is at an earlier version, the ESAP definition updates
automatically from the most recent ESAP package.
Enabling
Manual Update of ESAP Definitions on Clients
