Educause Security Discussion mailing list archives

Re: Patch management


From: Roderick Cook <rcook () PACIFIC EDU>
Date: Fri, 25 Feb 2011 13:21:26 -0800

Early last year we evaluated three patch management products: LanDesk,
Symantec's Altiris, and Configuresoft's ECM (purchased by EMC during eval
and was changed to Server Configuration Manager or SCM).

Our requirements for evaluation included:
1. Application Flexibility - Must support multiple OS types (Win/Mac)
2. Minimal User Impact - Silent installs, low system footprint, and flexible
reboot schedule
3. Active Directory Integration
4. Inventory & Reporting Capabilities
5. Distributed Administration

Over the course of several months and meetings, the technical support staff
from our various distributed IT offices chose the EMC SCM product as it met
all of our requirements.  The other two products did not (at that time).

Unfortunately the project did not receive funding last year so we did not
move forward with the purchase.  It looks like we are to get funding soon
and will begin the evaluation process once again this next fiscal.

Hope that helps,

Roderick Cook
IT Security Officer
University of the Pacific


On 2/25/11 12:43 PM, "David Auclair" <d.auclair () UTORONTO CA> wrote:

Hi Everybody,

We've been looking at some patch management solutions recently, and we were
wondering if anybody has any input on this subject.  Any products you would
specifically recommend (or avoid)?
 
Specifically, does anybody have any good/bad experience with Secunia CSI?

Thanks for your input!


David Auclair
Information Security Group
Information and Technology Services
University of Toronto


Current thread: