EPA client version management through Device Posture service

Administrators can manage EPA client versions through the Device Posture service by maintaining a minimum supported EPA version.

Previously, Device Posture service enforced a single fixed EPA client version across all endpoints, leading to operational challenges, such as the following:

• End users often lacked administrative rights to update or install the required client version.
• Administrators had to ensure endpoints stayed on that fixed version, which resulted in complicated patch and feature rollouts.

Benefits:

EPA client version management through Device Posture service solution offers the following benefits:

• Streamlined version control
• Reduced support overhead
• Ensured endpoint compliance with Device Posture service requirements

How it works

Device Posture service upgrades the client version based on the platform-specific settings in the Device Posture admin console.

• Minimum supported version: When an administrator sets the minimum supported version, Device Posture service enforces the following actions:

  Client devices	Enforced action
  Devices with no client installed	The latest EPA client is installed.
  Devices with client version lower than the minimum	Upgraded to the latest version.
  Devices with version equal to or greater than the minimum version	No change enforced.

• Always use latest version: When an administrator sets the Always use latest version option, all endpoints are enforced to run the latest available EPA client version.

  In case where the EPA client is not installed or is outdated, Device Posture service enforces the following actions:

  Client devices	Enforced action
  Devices with no client installed	The latest EPA client is installed.
  Devices with older versions	Upgraded to the latest version.

Example:

Consider the following example for a specific platform where the minimum supported version is 24.8 and the latest version is 25.8.

The following table summarizes the actions enforced by the Device Posture service based on the settings configured in the admin console:

Note:

When the Device Posture service introduces a new feature requiring an updated EPA client, administrators must revise the minimum supported version to ensure compatibility and optimal functionality.

Set the EPA client version management option

1. Navigate to Device Posture > Device Scans and click Settings.
2. Enable the EPA client minimum version toggle and click Edit.

3. For each platform, choose one of the following options for client version management:

   • Always use latest version
   • Minimum version listed (for example 24.8.1.19 for Windows)
4. Click Save.

Important:

• EPA client version management supports the versions listed in the drop-down list. We recommend that your end users use these or higher versions. Any version not listed in the drop-down menu is not recommended for a production environment.
• For the latest client versions, see Citrix Endpoint Analysis.

EPA client distribution and version management considerations

Consider the following points for EPA client distribution and version management:

• Distribution strategy: Use standard Endpoint Management tools (for example, SCCM for Windows, Jamf for macOS) to deploy or patch the EPA client.
• Standardized rollouts: Gradually roll out client updates by setting a minimum supported version aligned with your deployment schedule.
• Immediate feature rollout: Ensure that the Always use latest version setting is enabled so that all users receive the latest EPA version when it is released.
• Compatibility assurance: Update the minimum supported version whenever new Device Posture service dependent features are released to avoid unsupported client versions.