Patch Management Solution
June 04, 2004
For clients: $25; for servers: $60
- Ease of Use:
- Value for Money:
- Overall Rating:
This is a self-contained, fully integrated system that offers more than just patch management.
Does not support non-Microsoft products and is complex to set up as part of a framework.
Best considered as a useful addition to the wider management suite, rather than an end in itself.
Patch Management uses Microsoft's Baseline Security Analyzer (MBSA) with the Altiris Inventory and Software Delivery Solutions modules to scan for security vulnerabilities, report the findings, and distribute Microsoft's security patches (downloaded from its site).
The main task is the correct setting up of the Altiris Notification Server that contains inventory and software delivery services. When loading, the wizard checks to see if Internet Information Services and specific versions of Microsoft SQL Server are available. If there is no database, Microsoft SQL Server Desktop Edition is provided.
Next, the agents must be distributed to the clients using the built-in software distribution service and the inventories must be discovered. Clients can be grouped (the process is not as easy as it could be) and it does allow for test configurations.
The server uses MBSA to determine which systems need patching. The clients must have an internet connection to access the Mssecure.cab file or it needs to be downloaded and kept updated. Patching can be done using a browser from any web-enabled device on the network. When deciding which patches are important, the browser can display the latest information from Altiris or Microsoft for help.
The system targets the experienced administrator and requires careful management. A greater degree of polling and automation would be helpful, but it is likely that it will only be part of a larger management framework. This implies the console will be used frequently to check on other parameters that are controlled and monitored by the other modules. This solution is as an integral element of the Client and Server Management Suites. It has an advantage over most point solutions because it integrates with Altiris Recovery Solution, allowing each machine to be backed up before patches are implemented.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Interim CISO (Chief Information Security Officer) - Cyber Security Director
CYBER EXECS - London (Central), London (Greater)
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- The information security implications of M&A deals
- Cyber-security must reflect risk not just regulation
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?
- 90% of ITDMs believe IAM is crucial to digital transformation success