Configuring the discovery of missing patches

Accessing the settings

  • From the top menu, select Settings. From the side menu, select Patch management.

  • Click the Add button. The settings page opens.

Required permissions

Permission Access type

Patch management

Create, edit, delete, copy, or assign patch management settings profiles.

View patch management settings

View patch management settings profiles.

Permissions required to access the patch management settings

 

General options

  • Enter a name and description for the settings profile.

  • To make sure that Cytomic Patch manages Windows updates on your computers, enable the Disable Windows Update on computers toggle.

    On devices running Windows 10 and higher, the operating system enables you to defer quality updates, but not disable them. Therefore, these updates are applied after 30 days despite you select Disable Windows Update on computers.

  • Click Save.

  • From the list of profiles, select the profile you created. The Edit settings page opens. To select the computers you want to assign the settings profile to, click the Recipients (No recipients selected) link.

  • To add computers individually, click . To remove them, click .

  • On the Edit settings page, enable the Automatically search for patches toggle to enable patch search functionality.If the toggle is not enabled, patch management lists do not show missing patches, although you can use patch installation tasks to install missing patches on computers.

Patch installation

When you configure Cytomic Patch, you can select different patch installation options to apply to recipient computers and computer groups:

  • Install patches: Installs patches on recipient computers and computer groups.

  • Designate as test computers and install patches: Identifies recipient computers and computer groups as test computers for patch installation. For more information, see Cytomic Patch features.

  • Do not install patches: Does not install patches on recipient computers or computer groups. This option is applicable to service providers who purchased CYTOMIC Nexus. For more information, see Security produc settings chapter in Web Help of CYTOMIC Nexus.

Search frequency

Search for patches with the following frequency specifies how often Cytomic Patch searches the cloud-based patch database to check for missing patches for your computers.

Patch criticality

Specifies the importance (or criticality) of the patches that Cytomic Patch searches for in the databases of available patches.

Windows Service Packs are not applied to macOS or Linux computers or devices.

Software vendors define the importance of the security patches they make available to address vulnerabilities. Patch classifications are not universal and vary by vendor. To determine whether you want to install a patch, we recommend that you review its description, especially for patches that a vendor does not classify as Critical.

The Other patches category includes patches with bug fixes and feature enhancements for macOS and Linux.