St. Bernard Software v7.01 manual Named Policies Install Required command

Page 18

St. Bernard Software, Inc. ­ Protecting Your Network Investment

Named Policies (“Install Required” command)

To get started, select your UpdateEXPERT machine and open the Policy Editor for the Default policy as follows; Policy > Open > Default > Open. You may now check one or more patches as required (example below). At this point, you should be in the Policy Editor for “Default”, as shown below. Checking an update makes it “global” in the sense that it will update all applicable machines (ignoring non­applicable machines) when you do Install Required. Policy > New lets you create additional named policies if you wish. Once policies are created and saved (Policy Editor > Save), use right­click > Assign Policy to associate a named policy to your machine.

Before deploying required updates, let’s run a conformance report to see if your machine is “out­ of­compliance” (as it should be, until patched). Basically, we need to 1) “check” an update for the Default Policy (and save it), 2) assign the Default policy to the machine, 3) configure Conformance Report options, and 4) run the report. So, pick a “not­installed” patch for your machine, check the patch in the Policy Editor in either machine or Research View (as explained next), and assign the Default policy to your machine. Then see Conformance Reporting (below).

With your machine selected, do View > Research View or click the button circled below, to switch to Research View, which is a list of every patch available in the UpdateEXPERT database. Required Updates can be specified here also. Most patches apply to multiple platforms. When you check/uncheck the patch, multiple line items will be automatically checked/unchecked for you, for multiple platforms. Below, as an example, we selected 898060 for Windows XP (yellow). Unchecking any one of them unchecks them all.

Note: Use the Checkmark button to filter­out all but the checked items. Go back to the machine detail view by de­selecting the button circled above (the button highlight goes away).

June 19th, 2006

UpdateEXPERT Premium v7.01 Evaluation Guide

16

Image 18
Contents UpdateEXPERT Premium V7.01 Evaluation Guide St. Bernard Software Europe, Asia, Africa Table of Contents June 19th UpdateEXPERT Premium v7.01 Evaluation Guide UpdateEXPERT Premium Overview PurposeInstall UpdateEXPERT Premium June 19th UpdateEXPERT Premium v7.01 Evaluation Guide Click Install June 19th UpdateEXPERT Premium v7.01 Evaluation Guide Launch UpdateEXPERT ... click Finish June 19th UpdateEXPERT Premium v7.01 Evaluation Guide Http//ueupdates.stbernard.com Identify the Web Proxy if applicableDownload the Latest UpdateEXPERT Database Enumerate Discover MachinesQuery your UpdateEXPERT Machine Agentless Query Requirements Download Patches Install Patches Named Policies Install Required command Conformance Reporting Other Reports Installing Master or Leaf­Agents Remote Local Command­Line Active Directory Leaf­Agent Configuration Agent SettingsWhat’s Next? Validation Scheduling Queries LoggingValidating Patches Scheduling Queries LoggingSecurityEXPERT Overview Configure SecurityEXPERT Web Proxy Download SecurityEXPERT Templates Creating a SecurityEXPERT Policy June 19th UpdateEXPERT Premium v7.01 Evaluation Guide June 19th UpdateEXPERT Premium v7.01 Evaluation Guide Testing SecurityEXPERT Compliance Assigning the SecurityEXPERT PolicyJune 19th UpdateEXPERT Premium v7.01 Evaluation Guide Modifying the SecurityEXPERT Policy Enforcing the SecurityEXPERT PolicyJune 19th UpdateEXPERT Premium v7.01 Evaluation Guide Using Profiles with SecurityEXPERT June 19th UpdateEXPERT Premium v7.01 Evaluation Guide Glossary Thank YouAppendix a Custom Install Options Server Master­Agent and Agent­ InstallerAppendix a Custom Install Options …