Re: check list for patch management

[Maurice Rich <maurice.rich () gmail com>]

FYI WSUS should most likely be a component of your strategy, it will
keep most selected Microsoft Products patched & updated.

For running up/deploying machines with standard builds with managed
operating environments various Microsoft management products including
SCCM should be considered/included.

SCCM allows Task Sequences to be created for performing exactly that
on collections & machines based upon custom defined criteria.

It allows applications including non-Microsoft applications to be
packaged & deployed to machines & collections.

You may also wish to look at Secunia's products including their CSI +
PSI which audit machines & provide facilities to update those
machines.

Simple standalone things similar to Secunia's PSI include FileHippo's
Update Checker.

Regards,

Maurice.

Sent from my iPad

On 28/06/2012, at 5:13 AM, John Hebert <jhebert () bizdps com> wrote:

> > -----Original Message-----
> > From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> > On Behalf Of shivaone () gmail com
> > Sent: Wednesday, June 27, 2012 1:00 PM
> > To: security-basics () securityfocus com
> > Subject: check list for patch management
> >
> > Hi All,
> >
> > Its grate any one in team share me the Manual[Excel] check list for patch
> > management for windows
>
> I don't have anything in Excel, but here's my overall process when working with new networks:
>
> 1. I try to automate Windows updates whenever possible.  This can be through WSUS, Windows Intune, and a variety of 
> 3rd party vendors.  This lets you focus on keeping a baseline and handling the exceptions rather than worrying about 
> each computer.  It also lets you see the status of computers in a central location.
> 2. I get a software inventory, remove software from computers that isn't needed, and look at the update options on 
> the remaining software.  Some of it may be auto-updating, some of it may be centrally managed and updated, and some 
> of it may require manual updating.  From there, I plan those updates accordingly.
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------