Rolling Back the OfficeScan Agents

OfficeScan can only rollback OfficeScan agents to the same version of the server being restored. You cannot rollback OfficeScan agents to an older version than the server.


Ensure that you roll back OfficeScan agents before rolling back the OfficeScan server.

  1. Ensure that OfficeScan agents cannot upgrade the agent program.
    1. On the OfficeScan XG web console, go to Agents > Agent Management.
    2. Select the OfficeScan agents to be rolled back.
    3. Click the Settings > Privileges and Other Settings > Other Settings tab.
    4. Enable the OfficeScan agents can update components but not upgrade the agent program or deploy hot fixes option.
  2. On the OfficeScan XG web console, go to Updates > Agents > Update Source.
  3. Select Customized Update Source.
  4. On the Customized Update Source List, click Add.

    A new screen opens.

  5. Type the IP addresses of the OfficeScan agents to be rolled back.
  6. Type the update source URL.

    For example, type:

    http://<IP address of the OfficeScan server>:<port>/OfficeScan/download/Rollback

  7. Click Save.
  8. Click Notify All Agents.

    When the OfficeScan agent to be rolled back updates from the update source, the OfficeScan agent is uninstalled and the previous OfficeScan agent version is installed.


    Administrators can speed up the rollback process by initiating a Manual Update on OfficeScan agents. For details, see Updating OfficeScan Agents Manually.

  9. After the previous OfficeScan agent version is installed, inform the user to restart the endpoint.

    After the rollback process is complete, the OfficeScan agent continues to report to the same OfficeScan server.


    After rolling back the OfficeScan agent, all components, including the Virus Pattern, also roll back to the previous version. If administrators do not roll back the OfficeScan server, the rolled-back OfficeScan agent cannot update components. Administrators must change the update source of the rolled-back OfficeScan agent to the standard update source to receive further component updates.