Performing a Pattern File Rollback

Procedure

  1. From the console menu, click Endpoint Protection on the bottom left pane.
  2. From the upper left navigation pane, go to Core Protection Module > Updates > Update/Rollback Patterns > Create Pattern Update/Rollback Task. The Pattern Update and Rollback Wizard opens.

  3. In the list of folders that appears, click the ">" icon to expand and display the pattern file version you want to rollback to.
  4. Click the Rollback To button across from the folder. In the pop-up window that appears, choose:

    • Deploy a one time action to open the Take Action window and the computers you want to apply this one-time Action to. Any computers included in the Target that are not relevant for the Action at the time of deployment will respond with a "not relevant" statement. Click OK.

    • Create an update Fixlet to open Edit Fixlet® Message window and configure a Fixlet that will deploy the Action whenever the selected clients become relevant. When finished, click OK and in the window that opens, click the hyperlink that appears below Actions to open the Take Action window.

    Note: In CPM 10.6, you can only perform a rollback on Virus Patterns and Engines.
  5. In the Target tab that opens, click All computers with the property values selected in the tree list below and then choose a property that will include all the computers you want to deploy this Action to.

    • Execution: Set the time and retry behavior for the update, (if any).

    • Users: This option works in combination with Target, linked by the AND operand (both conditions must be present for the install to occur).

  6. After selecting the computers you want to update, click OK. At the prompt, type your private key password and click OK.
  7. In the Action | Summary window that opens, monitor the "Status" of the Action to confirm that it is "Running" and then "Completed".
  8. Close any open windows to return to the console view.