--- title: Upgrading the agent summary: null url: >- https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/agent-management/upgrading-an-agent --- Our Agent package is distributed in our package repositories. If you haven't already, configure our repository on your system. ## Limitations and considerations When working with the Next-Gen WAF agent, keep the following things in mind: - Per our [agent end-of-support policy](https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/agent-management/agent-end-of-support-policy), we support agent versions that are under two years old, and on a quarterly cadence, we deprecate and no longer support agent versions that are older than two years. - Check the [agent release notes](https://www.fastly.com/documentation/reference/changes/ngwaf-agent/) to see what's new in the agent. ## Working with the agent auto-update service The agent auto-update service checks the [package downloads website](https://dl.security.fastly.com/?prefix=sigsci-agent/) for a new version of the agent and updates the agent when a new version is available. ### Limitations and considerations When setting up the agent auto-update service, keep the following in mind: - The agent auto-update service is only compatible with agents on [supported versions of Debian](https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/compatibility-and-requirements/#linux), Red Hat CentOS 7 or higher, and Ubuntu 18.04 or higher. - The agent auto-update service updates an agent by uninstalling the old package version and installing the latest version. Due to the agent's brief downtime during upgrade, we recommend scheduling the update when your website or web application receives low traffic. ### Enable the agent auto-update service Once the [agent is installed](https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/agent-management/getting-started-with-the-agent#installing-the-agent), you can enable the agent auto-update service: 1. Enable the agent auto update service. ```term copy $ sudo systemctl enable --now sigsci-agent-update.timer ``` 2. _(Optional)_ Customize the agent auto update timer. By default, the check for new versions is performed on the second Thursday of the month. ```term nolinenums $ sudo systemctl edit sigsci-agent-update.timer [Timer] OnCalendar= OnCalendar=Thu *-*-08,09,10,11,12,13,14 03:00:00 RandomizedDelaySec=8h ``` ### Disable the agent auto-update service To disable the agent auto-update service, run the following command: ```term copy $ sudo systemctl disable --now sigsci-agent-update.timer ``` ### Other forms of auto-update in Azure The following are different forms of auto-update you can configure with [Azure](https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/paas/azure-app-service#enabling-agent-auto-update). ## Upgrading the agent on Alpine Linux systems To manually upgrade agents on Alpine Linux systems, follow these steps: 1. Upgrade the Agent package. ```term copy nolinenums $ apk update $ apk add sigsci-agent ``` 2. Restart the agent. ```term copy $ sudo systemctl start sigsci-agent ``` ## Upgrading the agent on Red Hat-CentOS systems To manually upgrade agents on a Red Hat CentOS systems, follow these steps: 1. Upgrade the Agent package. ```term copy nolinenums $ yum -q makecache -y --disablerepo=* --enablerepo=sigsci_* $ yum install sigsci-agent ``` 2. Restart the agent. ```term copy $ sudo systemctl restart sigsci-agent ``` ## Upgrading the agent on Ubuntu-Debian systems To manually upgrade agents on Ubuntu or Debian systems, follow these steps: ### Ubuntu 15.04 or higher 1. Upgrade the Agent package. ```term copy nolinenums $ sudo apt-get update $ sudo apt-get install sigsci-agent ``` 2. Restart the agent. ```term copy $ sudo systemctl start sigsci-agent ``` ### Ubuntu 14.04 1. Upgrade the Agent package. ```term copy nolinenums $ sudo apt-get update $ sudo apt-get install sigsci-agent ``` 2. Restart the agent. ```term copy $ sudo restart sigsci-agent ``` ## Upgrading the agent on Windows systems To manually upgrade agents on Windows systems, follow these steps: ### Windows Installer 1. Download and install the latest agent MSI from [dl.security.fastly.com](https://dl.security.fastly.com/?prefix=sigsci-module-iis/) or [dl.signalsciences.net](https://dl.signalsciences.net/?prefix=sigsci-module-iis/). 2. Open `services.msc`. 3. Select **Signal Sciences Agent**. 4. Right click and select restart. ### CLI 1. Download and install the latest agent MSI from [dl.security.fastly.com](https://dl.security.fastly.com/?prefix=sigsci-module-iis/) or [dl.signalsciences.net](https://dl.signalsciences.net/?prefix=sigsci-module-iis/). 2. Open a DOS prompt. 3. Run `net stop sigsci-agent`. 4. Run `net start sigsci-agent`. ### Enabling agent-autoupdate The Windows [agent-autoupdate](https://github.com/signalsciences/agent-autoupdate) utility is included with the Agent MSI package and is installed in a separate folder `C:\Program Files\Signal Sciences\AgentAutoUpdate`. When you execute the utility, it checks for a newer version of the agent for Windows and, if it exists, downloads and installs it. The agent-autoupdate utility is designed to work in conjunction with the Windows Task Scheduler, which allows you to automate the check for updates. To enable agent auto-update via the Windows Task Scheduler: 1. Open Task Scheduler. 2. In the Task Scheduler window, go to **Action** > **Create Task**. 3. From the **General** tab, fill out the following: - **Name:** Give the task a name, e.g., "Fastly Agent Update". - **Security Options:** Determine whether the task should run only when the user is logged in. The task must be run as the SYSTEM or Admin account. 4. From the **Trigger** tab, create a new trigger that defines when the task should start and how frequently it should run. We recommend having the task run on a monthly schedule. 5. From the **Actions tab**, click **Start a program**. 6. Browse to the folder where the agent-autoupdate utility is installed and select the utility, `agent-autoupdate.exe`. 7. Click **Ok** to save the task. You will be prompted to enter the password for the selected user account. 8. To test if the task is working, right-click on the task in the Task Scheduler Library and click **Run**, making sure to enable the task history to view detailed logs of when the task ran and any issues that might have occurred. > **HINT:** Subsequent releases of the agent auto-update utility don't require recreating a new task unless explicitly stated in the [changelog](https://www.fastly.com/documentation/reference/changes/ngwaf-announcements). In addition, the artifacts and logs created by `agent-autoupdate.exe` in Windows temporary directories (`Temp`) may require periodic file scrubbing if the Windows system doesn't reboot often. ### Troubleshooting If the scheduled task fails or doesn't run as expected, you can manually run the agent-autoupdate utility by navigating to the directory where installed and running the binary from a command prompt with administrator privileges to view diagnostic output. ## Related content - [Getting started with the agent](https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/agent-management/getting-started-with-the-agent) - [Agent end-of-support policy](https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/agent-management/agent-end-of-support-policy)