Tech Planning

Re: Patch Management solutions?

cpapaioa — Fri, 17 Jul 2009 18:07:23 GMT

Personally, I have done several implementations with SUS and have had no issues with the setup itself. It's better running if you have a pretty clean / maintained AD structure before considering implementing it.

Re: Patch Management solutions?

steve123 — Wed, 08 Jul 2009 18:15:10 GMT

Finding a robust patch management solution is becoming more and more difficult as machines are less and less accessible to the management console. I have found success using <a href="http://www.kaseya.com/products/patch-management/features.aspx">patch management</a> from Kaseya. Because of the agent based framework, I have connectivity to every machine that is connected to the Internet, independent of location.

Re: Patch Management solutions?

shipley.c — Sun, 10 May 2009 19:39:05 GMT

Nagios and Wireshark give many features that the product he linked has beyond patch management.

Re: Patch Management solutions?

Rog — Mon, 04 May 2009 20:24:31 GMT

shipley.c:
I think you'd be able to set up something yourself that would be no additional license cost with WSUS 3.0 and NAGIOS / WireShark. Seems like a lot of money to me for the service

WSUS, I get. But Nagios / Wireshark? I'm not sure how exactly that helps him monitor updates.

Nagios' native plugins can monitor whether a service is running. But I suppose you could get creative and write a tool that looks deeper inside Window's "guts" and finds some sort of a status (via a counter?) that tells whether or not an update is needed.

(I've seen Nagios plugins to do this for Debian packages, but not for Windows)

I'm totally lost on how Wireshark might be a fit...

Re: Patch Management solutions?

shipley.c — Sat, 02 May 2009 17:58:25 GMT

I think you'd be able to set up something yourself that would be no additional license cost with WSUS 3.0 and NAGIOS / WireShark. Seems like a lot of money to me for the service.

Re: Patch Management solutions?

tsg_kevin — Fri, 01 May 2009 21:36:15 GMT

Thanks guys. This may be an area that we can write something on be it a blog post or article.

Also I just discovered this:

http://www.gfi.com/lannetscan/

which claims to do patch management too. I'll give it a spin and see how it works.

-Kevin

Re: Patch Management solutions?

MikeWebb45 — Fri, 24 Apr 2009 13:00:54 GMT

We use WSUS v3.0. Works great for us.

Re: Patch Management solutions?

shipley.c — Fri, 24 Apr 2009 12:18:23 GMT

I script and use the Ct Offline Update tool produced by Heise Security. It gives me a lot of flexibility, especially for systems/networks that aren't connected to the Internet. [ This article describes version 3.0 ] of their product, but they are actually at [ version 5.2, which you can access by downloading ] from this page.

Patch Management solutions?

tsg_kevin — Thu, 23 Apr 2009 20:57:12 GMT

Hi guys,

I am at the RSA Conference and checked out the booth of Shavlik Technologies, a company that focuses on managing updates across a network. I was unfamiliar with such software/processes, and was wondering what solutions are employed in the NPO sector. Do we rely on WSUS and standard imagery to affordably manage patches? What other software/strategies are cost effective for NPOs?

-Kevin