Cloud Secure Edge Docs
App Auto Update
Overview
Admins can use this feature to enable silent desktop app version updates to end users' devices. This setting will be on by default for new orgs (i.e., orgs created after April 2026 release) and off by default for existing orgs.
Desktop app version 4.2.0+ will auto update on next restart without user interaction or admin permissions necessary. The console toggle (org-wide) controls silent auto update. The mdm_disable_auto_update flag in mdmconfig.json (per-device) controls whether the user sees an update notification.
How auto update works
| Console Toggle (Silent Auto Update) | MDM Flag (disable=true) | 4.2.0+ Behavior | Pre-4.2.0 Behavior |
|---|---|---|---|
| ON | false / not set | Silent auto update on next launch, no notification | No silent update; user gets notification |
| ON | true (disabled) | No silent update; no notification | No silent update; no notification |
| OFF | false / not set | No silent update; user gets notification | No silent update; user gets notification |
| OFF | true (disabled) | No silent update; no notification | No silent update; no notification |
Steps to Enable or Disable App Auto Update
In the CSE Command Center, navigate from Settings > SonicWall CSE Client > the Deployment tab.
Under the App Auto Update section, toggle on to enable auto update or toggle off to disable auto update and continue manually updating app versions.
