Understanding Password Policy Enforcer Supportability
Overview
Netwrix Password Policy Enforcer (PPE) helps customers enforce consistent password policies. This article defines what level of support you can expect based on the version of PPE you are running, and sets clear expectations for how bug fixes, security patches, and configuration assistance are provided.
Only the latest available version of PPE receives active bug-fix support. The previous major version (N−1) receives configuration guidance and security vulnerability fixes. Versions older than N−1 are out of support entirely.
Currently Supported Versions
The latest version of PPE is always the definitive reference — check the Netwrix Customer Portal for the current release.
| Version Track | Example | Support Level | Bug Fixes | Security Fixes | Config Advice |
|---|---|---|---|---|---|
| Latest (N) | 11.x (current) | Active Support | Yes | Yes | Yes |
| Previous Major (N−1) | 10.x | Limited Support | No | Yes | Yes |
| All Earlier Versions | 9.x and below | Discontinued | No | No | No |
Support Level Definitions
Active Support (Latest Version)
The latest version of PPE — always available in the Netwrix Customer Portal — is the only version in Active Support. A version in Active Support:
- Receives bug fixes and defect resolutions
- Receives security vulnerability patches
- Is eligible for full technical support assistance from Netwrix
- Is eligible for professional services assistance
- Is the only version against which Netwrix engineers will test and verify reported issues
NOTE: All PPE components — the PPE Server, Client, Configuration Console, and PPE Web — ship together as a single release. To be on the latest version, all components must be upgraded together. A mixed-version deployment (for example, latest Server with an older Console) is not a supported configuration.
Limited Support (N−1: Previous Major Version)
The previous major version of PPE receives Limited Support. This means:
- Netwrix will not develop or ship new bug fixes for this version.
- Netwrix will patch security vulnerabilities discovered in this version.
- Netwrix support engineers will provide configuration guidance to help you get the best results from your existing installation.
- Netwrix will only investigate bug reports on N−1 if you can first reproduce and confirm the issue on the latest version — if confirmed, a fix will target the latest version only.
- Professional services assistance is available for existing configurations, but not for new customizations.
Netwrix will work with you on your existing installation and help you configure your environment effectively. Netwrix strongly recommends upgrading to the latest version and will raise this recommendation on every interaction. Upgrades take time, and Netwrix will continue to provide guidance during this period.
Discontinued Support (N−2 and Earlier)
Any version of PPE that is two or more major versions behind the current release is fully out of support. This means:
- No bug fixes, security patches, or updates of any kind
- Not eligible for technical support assistance
- Not eligible for professional services assistance
- Not available for download in the Netwrix Customer Portal
Customers on discontinued versions must upgrade to a supported version to receive any assistance. The Netwrix support team can provide guidance on the upgrade path.
PPE Components and Version Alignment
PPE is composed of the following components, which are released and versioned together:
| Component | Description |
|---|---|
| PPE Server | Core enforcement engine, installed on domain controllers |
| PPE Client | End-user-facing component providing password feedback at the workstation |
| Configuration Console | Administrative UI for managing password policies |
| PPE Web | Web-based interface for self-service password changes and resets |
All four components ship as a single versioned release. For a deployment to be considered fully on the latest version — and therefore eligible for Active Support and bug fixes — all components must be upgraded to the same current release. Running mismatched component versions is not a supported configuration and may result in unpredictable behavior.
Instructions
For Customers on the Latest Version
If you are running the latest version of PPE with all components upgraded:
- You are fully supported and eligible for bug fixes, security patches, and full technical assistance.
- When reporting an issue, be prepared to describe your environment, the components involved, and steps to reproduce.
- Netwrix engineers will test against your configuration and, if confirmed, file and fix the defect.
For Customers on N−1 (Previous Major Version)
If you are on the previous major version of PPE:
- The support team will provide configuration guidance to help you work within your current version.
- If you report a bug, Netwrix will ask you to first verify whether the issue exists in the latest version (in production or a test environment).
- If the issue is confirmed in the latest version, Netwrix will develop a fix for the latest version only and will not backport it to N−1.
- Netwrix will patch security vulnerabilities for N−1.
- Netwrix will recommend upgrading to the latest version at every opportunity.
NOTE: Maintaining a small test lab with the latest PPE version allows you to verify reported issues and use the latest fixes without disrupting your production environment.
For Customers on N−2 or Earlier
Customers on any version older than N−1 are not eligible for support. Netwrix strongly recommends upgrading to the latest version. The support team is available to help you plan and execute the upgrade path.
Upgrade Guidance and Best Practices
Staying current with PPE is the best way to ensure your password policy enforcement is secure, effective, and fully supported. Netwrix recommends:
- Upgrade all PPE components together when a new version is released — never mix component versions.
- Review the release notes before upgrading to understand what has changed.
- Test upgrades in a non-production environment before rolling out to your full domain.
- Plan upgrades proactively rather than reactively — waiting until you encounter an issue on an unsupported version limits your options.
- Contact the Netwrix support team if you need assistance planning your upgrade.
Always download the latest version of PPE from the Netwrix Customer Portal. The Portal is the authoritative source for the current release and its release notes.