Patch Management

Patch Management Option

The time taken for attackers to develop an exploit when a patch is released from Microsoft is decreasing.  In the case of Blaster it was only 25 days from the release of the MS03-026 patch until attackers were able to take advantage of unpatched desktop computers.  Administrators cannot simply rely on network perimeter security, since desktop users download files directly from the Internet and use their laptops on unsecured networks when traveling or at home.

Desktop Authority’s Patch Management option builds on the Desktop Authority platform to dramatically simplify the task of installing Microsoft Operating System and application patches onto desktops across the enterprise, and shut the door on attacks that exploit unpatched systems.

The Patch Management Option takes the tasks of downloading patches from Microsoft, distributing them to deployment servers, selecting appropriate patches, selecting clients and deploying patches, and wraps them all up into the easy-to-use Desktop Authority Manager console, minimising the amount of time required by administrators to manage patch deployment, while maximising control over the patch management process.

When used in combination with all of Desktop Authority’s other capabilities, administrators can secure their desktops against a wide range of attacks.  Desktop Authority can implement desktop Security Policies, configure the Windows Firewall, lock down file and registry security and more, and the Spyware Removal option gives enterprise-class protection against spyware.

CLICK TO ENLARGE [+]

Features and Benefits

Integrated into DA Manager

Familiar navigation environment means there is no learning curve for configuring Patch Distribution and Deployment.  

Automated Patch Updates

Administrators do not need to search for the latest patches (nor older ones).

Patch Classification

Patches can be selected for download and deployed based on five severity levels (as defined by Microsoft) as well as by product or OS.  Administrators only need to manage those patches that are applicable to their network.  

Multiple Distribution Servers

Patch Management servers can be easily be deployed from within the DA Manager.  Clients can be configured to use either the closest PM server (as defined by AD sites) or a specific PM server.  Exclusive Validation Logic

As with all other configuration elements in Desktop Authority, Validation Logic allows a high level of granular control over which clients receive the selected patch(es) according to OS, machine class, connection type, OUs, Group memberships, and over 20 other criteria.  

Next Page - USB and Port Security