Jump to content

Patch Management


CoachIT
 Share

Recommended Posts

I've never really used it and the company I work for deploys the patches via group policies, when they are available.

Link to comment
Share on other sites

I've never really used it and the company I work for deploys the patches via group policies, when they are available.

I'm using WSUS within my GPOs, however I would like to deploy a patch management solution for my non MS applications from adobe, apple, java... etc

Link to comment
Share on other sites

From my understanding, if the software in question has an msi alternative installer, or uses one by default, you can push them out with GPO/Active Directory. If the programs only use .exe's, then you can use something like LanGaurd : http://kbase.gfi.com/showarticle.asp?id=KBID003162

I think BigFix still requires the user to update the files manually, and only notifies you of updates, as where with LanGaurd it will do the installs silently and also you can use PsExec and some scripting to push updates as well. I've never done this myself or used LanGaurd, but I've come across the same question before and picked up the tips reading somewhere before.

Link to comment
Share on other sites

  • 3 weeks later...

I used to use WSUS but It's a pain configuring the group polices to work on both XP and Vista in a mixed environment. Plus I didn't like the fact that it's 'pull' rather then 'push' management.

I've been using GFI LanGaurd for 2 years now and I really like it. You can asses clients security (patches, open ports, miss configured polices) no matter the OS, and deploy patches via Push. You can also retract patches and sofware which is great for rollbacks.

One other thing I like is you can also deploy non MS software, basically any .EXE. You can add custom switches to the installation allowing for silent installs are custom package configuration.

http://www.gfi.com/lannetscan

Link to comment
Share on other sites

  • 2 weeks later...

I've demo'd Languard (great price) but use PatchLink (very expensive) and WSUS. I find that Patchlink is very thorough but the agents sometimes go corrupt. WSUS works find but only for MS patches (although Eminentware has software that will addon to it so you can install third party software).

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...