4. Step 3: Fixing vulnerabilities

4.1 Introduction

Following a scan, GFI LANguard enables you to automatically fix some of the issues identified during your network audit. This is achieved through the built-in tools that ship with the product. Available remediation actions include:

•	Auto-patch management – This remediation feature automatically downloads missing Microsoft updates and deploys them network-wide.

•

Applications auto-uninstall – This remediation action enables the auto-uninstall of applications that support silent uninstall. The process involves a test phase (called validation) during which an application is uninstalled automatically to identify if silent uninstall is supported by target application. If it is, all the other instances on the network will be automatically uninstalled during scheduled scans.

4.1.1 Deployment options

The general deployment options allow you to configure the actions and processes that must be triggered pre/post deployment of the selected file. Supported actions include:

•	Send notification/deployment request to the currently logged on user.

•	Automated reboot of target computer following deployment operation.

To edit the general deployment options:

1. Under Common Tasks in the left pane click Deployment options…

Screenshot 35 - General deployment options

2. Configure the Before deployment options.

3. Configure the Copy software to deploy to target computer via:

option by selecting between administrative or a custom shares.

4. Configure the After deployment options.

Screenshot 36 - Advanced deployment options

5. Click Advanced tab to configure advanced deployment options including:

•	the number of patch deployment threads that will be used

•	deployment timeout

•	authentication credentials for the deployment agent service.