Re: Patch Management

[Vic Vandal <vvandal () well com>]

You can use SCCM to deploy patches for all of those products mentioned - MS-OS/Office/etc., Flash, Adobe Reader, Java, 
etc. (Firefox, whatever).  Look into using SCUP with SCCM for Adobe products.  For some other products (Java), when you 
install them a MSI file and related CAB file(s) will be created, and you can copy those from a machine you installed to 
and then deploy them as a package in SCCM.  You can also deploy regular EXE files/updates/installations using SCCM.  
Create third party product directories under the sccm_packages source directory, then copy your applicable EXE file 
there and set a distribution schedule.  Depending on how you create the source directories and file names you may have 
to re-advertise to get the updates deployed to all applicable machines.
http://technet.microsoft.com/en-us/library/bb681010.aspx

If you have a heterogeneous environment then you may need to wait for SCCM 2012 to be able to deploy patches to Linux, 
Solaris, and a couple others (which it will reportedly support, although I can't say how well it will do). 
Otherwise you could try something like Patchlink, although it might not work as well as Satellite for RH Linux nor as 
well as other methods for distributing Solaris updates.  Also unless you're solely running MS-SQL as your DB backends 
you may need to patch other DB products using other tools.  And of course you'll need to patch your network devices 
using whatever varied mechanisms they support.  In short there is no totally unified solution, although in a pure MS 
shop you can use SCCM for most desktop and server software deployments, updates, and patches.  And since you said 
you're already using SCCM you may as well get its full value by reading up and learning everything you actually can do 
with it.

-Vic

----- Original Message -----
From: "Mahmoud Kaddoura" <Mahmoud.Kaddoura () injazat com>
To: "security-basics () securityfocus com" <security-basics () securityfocus com>
Sent: Monday, June 4, 2012 1:07:19 PM
Subject: Patch Management

Hi All

I am looking for a complete end to end patch management solution 

We are currently using multiple products to patch different applications like (WSUS , SCCM , EPO...) but I am looking 
for one centralized solution to cover all applications microsoft , flash , adobe, Java.... Others

Any suggestions?

Regards,
Mahmoud
Disclaimer: 
This e-mail message is intended solely for the individual or organization to which it is addressed. This message with 
all of its attachments (if any) may contain privileged and/or confidential information. 
Views, opinions or conclusive remarks expressed in this message are those of the sender and do not necessarily express 
the views of Injazat Data Systems LLC and its related companies. 
If you are not the intended recipient of this message, please immediately advise the sender by reply email or by 
telephone call to the number above or +971 2 699 2700; please also permanently delete this message. 
Any unauthorized use, printing, copying, retention, disclosure or distribution of this message is strictly prohibited. 

This email message has been scanned for the presence of computer viruses.


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------