Skip to main content

Upgrade Management

Cyberhaven Endpoint Sensors include an automatic update mechanism that you fully control. You should not need to redeploy the sensor to devices that already have it installed. Instead, configure update behavior using policies in the Cyberhaven Console.

Manage update policies​

  • From the Endpoint Sensors page, open the Deployment group settings dropdown near the top of the page.
  • The device is assigned to deployment groups as they register in the backend. New devices are added to the Default deployment group unless you specify a deployment group at installation time or move the device to a different group after install.
  • You can assign a different policy per deployment group as needed.
  • You may create multiple update policies and target them independently for Windows or macOS.

Policy options​

  • Off: Sensors are not automatically updated.
  • To the latest version: Sensors automatically update to the newest available version.
  • To the N-1 version: Sensors automatically update to one version behind the latest.
  • To a specific version: Select a specific version from the available options.

Create and assign policies​

  1. In Deployment group settings dropdown, click on the update policy drop-down menu for a specific operating system.
  2. Choose the upgrade option from the list.

Endpoint Grouping for Upgrade Management​

You can group sensors so that you have the controls to selectively upgrade the Endpoint Sensor to newer versions. For example, you can create groups for each business unit and manage upgrades one group at a time. You can also set version update policies and enable uninstall protection for an endpoint group.

To create an endpoint group:

  1. On the Endpoint Sensors page, select the endpoints you want to include in the group. You can search by hostname to choose the endpoints.
  2. Click on Change group at the bottom of the page and select the deployment group to which you want to add the endpoints. You can also create a new deployment group by clicking Add Deployment Group in the Deployment group settings dropdown menu.

Recommendations​

  • Cyberhaven recommends using the latest sensor version for the newest features, performance improvements, and fixes.
  • More conservative environments may prefer the N-1 option.
  • Cyberhaven generally releases sensor updates on a monthly cadence. For more details, see Cyberhaven Release Cadence and End of Support Policy

Service behavior and requirements​

  • Sensors periodically query the Cyberhaven backend (roughly every minute) to discover and download update packages.
  • Windows only: The auto-update service requires .NET Framework 4.6.1 or later for Windows sensor deployments.
  • Download throttling: The backend update service limits concurrent downloads to reduce load, currently allowing about 2 updates per second. Large deployments may take time to fully update.