New Capability: VA Change Control Limited Availability

Description

This feature allows eligible customers to control software updates on their virtual appliances.

New Capabilities

  • Opt-out of automatic updates
  • Email notification when updates are available
  • Manually apply updates via the user interface
  • Biweekly update cycle

Problem

By default, SailPoint makes automatic and frequent updates to the virtual appliance on behalf of customers to provide product enhancements, fixes, and vulnerability mitigation. However, this can be in conflict with your organizations’ security and compliance policies if they require you to anticipate, validate, and mitigate risks of changes made to components with your own infrastructure.

Solution

SailPoint is offering the ability to opt-out of automatic updates to the VA so that customers can align updates with their organizations’ change management processes. Updates will be available every other Thursday, with the exception of major holidays. Customers can subscribe to notifications for updates and can apply the updates themselves. Customers who opt-out will be responsible for applying updates throughout the lifecycle of their VA’s to maintain the latest versions. SailPoint will only support applications on the VA that are within 2 versions prior.

Who is affected?

This feature is not available by default and must be enabled by SailPoint. VAs will continue to update automatically as usual until opted out. In order to receive the opt out functionality, customers must engage directly with SailPoint to request the functionality, review and sign off on terms to acknowledge the additional responsibility in maintaining updates to the VA.

If your organization has security and compliance policies that necessitate change management procedures, please contact your CSM to establish eligibility to activate this feature.

Important Dates

Limited Availability - April 2025

Additional Resources

1 Like

Hi @bwong1 is there anyway to receive email notification of VA updates AND still have automated updates? Customers are keen to monitor update activity and version levels on the VAs without needing to log on to the VAs. Would be nice to know the updates have been applied without having to login to the VAs as sometimes they don’t actually get applied automatically…

Hi Scarlett, not at the moment but we recognize the broad desire for better awareness of updates. In the future, we plan to add additional notifications for updates fail and/or VA’s that have components that are out of date in terms of update versions.