ZPA App Connector: Update Sarge Version

When you first deploy App Connector, you will notice two version appearing for it in the ZPA Admin Portal:

1. Sarge Version: The current App Connector Sarge version, the starting version when you deploy the App Connector.

2. Current Software Version: The current App Connector software version.

For App Connector Software Updates, you can specify a day and time where the App Connector software is updated to the latest version. When a new software version is available, a App Connector in the group is chosen at random to update. All these updates are done automatically by Zscaler in the backend via the ZPA Admin Portal.

As for App Connector Sarge Updates, this is organization's responsibility to update them via CLI same as how you will perform updates to the host OS of the App Connector.

To perform Sarge Updates, you can do the following commands:

1. For App Connector,

   [admin@zpa-connector ~]$ sudo yum update zpa-connector
   [admin@zpa-connector ~]$ sudo systemctl restart zpa-connector

2. For Private Service Edge,

   [admin@zpa-service-edge ~]$ sudo yum update zpa-service-edge
   [admin@zpa-service-edge ~]$ sudo systemctl restart zpa-service-edge

*Do take note the above commands will query both CentOS and Zscaler repository if you do not allow any unrestricted outbound access to the Internet for App Connector or Private Service Edge, this will most probably fails.

So if your the firewall is only open to *.prod.zpath.net and *.private.zscaler.com. To update the Sarge Version successfully, you can do the following commands instead:

1. For App Connector,

   [admin@zpa-connector ~]$ sudo yum --disablerepo="*" --enablerepo="zscaler" update zpa-connector
   [admin@zpa-connector ~]$ sudo systemctl restart zpa-connector

2. For Private Service Edge,

   [admin@zpa-service-edge ~]$ sudo yum --disablerepo="*" --enablerepo="zscaler" update  zpa-service-edge
   [admin@zpa-service-edge ~]$ sudo systemctl restart zpa-service-edge