Forced Updates

The forced update option is a feature of the Zappl agent that allows you to install an app update more urgently than the Scheduled Update Prompts feature. This feature is particularly useful when a zero-day vulnerability has been identified, enabling you to patch the affected app as quickly as possible.

</aside>

You can use the Deploy Software Script to mark apps for forced updates. The Zappl agent regularly checks for forced update receipts in the background. When it finds a receipt, it takes immediate action. If the app isn't in use, Zappl updates it silently. If the app is in use, Zappl prompts the user to quit the app before updating it.

Marking Apps for Forced Updates

This example demonstrates marking forced updates with Jamf Pro. Before proceeding, ensure you have added the latest Deploy Software Script to your Jamf Pro environment by following the steps outlined in the Deploying Zappl page.

</aside>

In Jamf Pro, navigate to Computers > Policies and click New.

Within the General payload, set a suitable display name, select the Zappl category, select Recurring Check-in as the trigger and Once per computer as the Execution Frequency.

Navigate to the Scripts payload and click Configure

Locate the Zappl - Deploy Software script and click Add

Add the Unique Identifier to the Application Identifier parameter for the App you are updating (this can be found in the App Catalog) then set update as the Action parameter value. Optionally, set a custom grace period and any allowed deferrals with a Minimum Deferral Window (the amount of time the allowed between deferrals) if desired.

Navigate to the Scope tab, configure your desired scoping target for the update and click Save.

The scoping target set above is the most basic target for this type of policy and initiates a one-off patch. If desired, create a Smart Computer Group which defines computers running a specified vulnerable version of the App, then set the Execution Frequency as Ongoing to ensure that the known vulnerability is patched on an ongoing basis.

</aside>

User Experience

The below prompt is a typical prompt shown when Firefox has been marked for a forced update and an update is required for Firefox. Deferrals have been configured for the forced update.

The below prompt is shown during the forced update when the update progress prompt is enabled.

The below prompt is shown after a forced updated when the display complete prompt setting is enabled.

Navigation

Frequently Asked Questions

Deploying Zappl

Deploy Using Jamf Pro