Download patches manually

In some cases, Advanced EDR cannot get a download URL to install a patch automatically. This can occur for several reasons:

  • The patch requires payment, is not a publicly available patch, or requires user registration to download.

  • Patches protected by an EULA cannot be downloaded and distributed by Cytomic.

In such cases, Cytomic Patch provides a link to manually download the patch. If the link is not helpful, contact the vendor of the software to patch.

For these patches, you can download the patch manually and add it to the patch repository so other computers can install it.

You cannot download patches manually on Linux or macOS computers or devices.

To manually add a patch to the repository, you must have the download URL of the patch. To install patches that require manual download, follow these steps:

  • Identify patches that you must manually download.

  • Get the patch download URL from the vendor and download the patch.

  • Add the downloaded patch to the patch repository.

  • Mark the patch as manually downloaded and available to install.

  • Optional: Disable a manually downloaded patch for installation.

Identify patches that require manual download

  • From the top menu, select Status. In the My lists side panel, click Add. A dialog box opens that shows all available lists.

  • Select the Available patches list. Configure these filters:

    • Installation: Requires manual download.

    • Show non-downloadable patches: Yes.

  • Click the Launch query button. The list shows all patches that computers on the network require which Cytomic Patch cannot download automatically.

Get the download URL and download the patch

  • After following the steps in the previous section, in the Identify patches that require manual download list, click a patch that requires manual download. The Patch detected page opens and shows details of the patch.

  • Note the file name shown in the Patch details section. To download the patch, click the Download URL link.

Add the downloaded patch to the patch repository

  • Identify a computer on the network that has Advanced EDR installed and has the cache role. Copy the downloaded file to this path on the cache computer:

C:\ProgramData\Panda Security\Panda Aether Agent\Repository\ManuallyDeploy.

If you installed Advanced EDR on a computer drive that differs from the default installation drive, copy the file to:
X:\Panda Security\Panda Aether Agent\Repository\ManuallyDeploy
Where X is the drive where the repository is located. For more information, see Specifying the storage drive.

  • If the ManuallyDeploy folder does not exist, create it with read and write administrator permissions.

  • If needed, rename the downloaded file to match the File Name you noted in the Get the download URL and download the patch section.

Mark the patch as Manually downloaded

  • After you copy the patch to the repository, go to the Available patches list. Click the context menu associated with the patch.

  • From the drop-down menu, select Mark as manually downloaded. After you mark a patch as manually downloaded, its status changes from Requires manual download to Pending (manually downloaded) for all computers that need to install it and the patch can be installed like an automatically downloaded patch. For more information, see Download and install patches.

Cytomic Patch does not check whether there are patches with the Pending (manually downloaded) status on cache computers, or whether computers on the network that require a patch have a cache computer assigned that has the patch in its repository. You must make sure that cache computers used for patch downloads have all necessary manually downloaded files in the ManuallyDeploy folder.

Disable a manually downloaded patch for installation

If you no longer want a manually downloaded patch to be available to install, you can disable the patch for installation. To disable a manually downloaded patch for installation:

  • Go to the Available patches list and configure a filter with these characteristics:

    • Installation: Pending (manually downloaded).

    • Show non-downloadable patches: Yes.

  • Click the Filter button. The list shows all patches manually downloaded and enabled for installation.

  • Click the context menu of any patches you want to disable installation for. Select Mark as ’Requires manual download’ . The patch disappears from the repository of installable patches, and you cannot install it.