Patch Management

Associate
Joined
25 Jun 2004
Posts
1,277
Location
.sk.dkwop.
Right, I'm looking for some suggestions. We use WSUS to patch our servers for Microsoft patches and also laptops. We're happy with this but we don't have anything to manage the likes of Adobe etc... Our security chap is doing his nut in and we need to come up with way to combat it.

What do you guys use for patching the likes of adobe flash / pdf etc...
 
Thanks for the suggestions, how does SCCM cope with multiple AD domains with no trusts between them, or would you need an installation for each AD you have?

I'm currently installing GFI Langaurd - seems to offer everything I need, but I'll check out SCCM as well. I did go through the pain of installing it a year or so again with extending schemas etc... but didn't really get very far into it. It didn't strike me as being an easy to pick up product.
 
I've been playing with languard now for a few hours on a test vm and so far I'm very impressed. For such little work it offers some great rewards, reminds me a lot of vmware VUM. Set up is dead easy, you give it an IP range, some user credentials and set the type of scan. Once complete you can remediate the issues applying all manner of fixes and schedule then for when you want with prompting the user or just crack on.

Not exactly expensive either - 1,000 targets for a little over £5k.
 
Back
Top Bottom