Lookout has two methods to monitor OS Out-Of-Date and Patch Level Out-Of-Date on end user devices.

• The manual method lets you specify the minimum OS version and (for Android only), security patch levels. When a new OS version or patch level releases, you need to update the minimum version required.

• The automatic method specifies minimum versions relative to the current version.

  For iOS:

  • the current OS version only
  • up to the last two major releases for iOS.

  • You can choose up to the last 3 releases for the minor updates (iOS n.x - where n is the major version and x is the minor version).

    iOS settings let you ignore devices that don’t have an iOS upgrade available from the vendor such as older iPhone models.

  For Android,

  • the current OS version only

  • up to the last 2, or 3, or 4 releases (due to many different Android platforms which might be in your fleet).

    When a new OS version releases, you don’t need to update the settings.

  You can also choose Manual for one OS and Automatic for the other OS as you may want a tighter control in one OS over the other.

  For Android only, the automatic method for the Patch Level Out-Of-Date policy classification lets you choose the last 2, or 3, or 4 ASPLs (Android security patch levels) relative to the current patch level.

  To use the OS Out-Of-Date policy classification:

  1. Navigate to Protections > Policies.
  2. Scroll down to the OS Out-Of-Date policy classification.
  3. Click settings.
  4. Select Manual or Automatic modes for iOS and Android.

  5. Choose the desired OS versions from the menu.

     To use the Patch Level Out-Of-Date policy classification (Android only):

  6. Navigate to Protections > Policies.
  7. Scroll down to the Patch Level Out-Of-Date policy classification.
  8. Click settings.
  9. Select Manual or Automatic mode.
  10. Choose the desired patch levels from the menu.