Overview
GFI LanGuard ships with a patch auto-deployment feature that enables you to deploy missing patches and service packs in all languages supported by Microsoft® products. GFI LanGuard also supports patching of third-party or non–Microsoft patches.
This article guides you on how to set up and configure the Patch Auto-Deployment feature.
Process
- Enabling Patch Auto-Deployment
- Configuring Patch Auto-Deployment Advanced Options
- Configuring Patch Auto-Download Settings
Enabling Patch Auto-Deployment
- Access GFI LanGuard.
- Go to Configuration > Software Updates > Patch Auto–Deployment.
- In the right pane, select the method for approval.
- Manual approval
Use the Manual approval tab to approve patches one by one. This is achieved by using the list of unapproved patches grouped by vendor or severity that you want to be approved.
NOTE: Key-in the search criteria and click Find to search for a specific application.
- Automatic approval
The Automatic approval tab enables you to specify which group of patches are automatically approved according to a category for a particular vendor.
- Manual approval
Configuring Patch Auto-Deployment Advanced Options
- Access GFI LanGuard.
- Go to Configuration > Software Updates > Patch Auto–Deployment.
- From the Common Tasks, click Advanced options.
- On the General tab, configure the following options. See the functions on the table below.
Option Description Send an email when new patches or service packs are available. Send an email when new patches are identified. Show All patches Displays all the identified patches.
Patches for products that were detected in the network: Displays only the patches identified on the selected network.
- Select the appropriate checkboxes and click OK to save changes.
Configuring Patch Auto-Download Settings
GFI LanGuard ships with a patch auto-download feature that enables the automatic download of missing patches and service packs in all languages supported by Microsoft® products. In addition, you can also schedule patch auto-download by specifying the time-frame within which the download of patches is performed.
- Access GFI LanGuard.
- Go to Configuration > Software Updates > Patch Auto–Download.
- From the right pane, click the link.
- In the General tab, select between All patches or Only needed patches.
- In the All patches tab click Configure to restrict auto-download of patches for configured languages.
NOTE: Selecting All patches > Configure enables administrators to manually select the Microsoft® patches to download, regardless of whether these are required for deployment. The Only needed patches option downloads only patches required for deployment.
- To change the location where the downloaded patches are stored click the Patch Repository tab and specify the required details.
- Select Use files downloaded by WSUS when available, if you are using an existing setup of WSUS.
- Select Remove patches that have not been used for and choose the time duration if you want to remove files that have not been used for remediation in the specified time interval.
- To change the time frame during which patch downloads are performed, click the Timeframe tab and specify the required details.
- Click Apply and OK to save the changes.
Priyanka Bhotika
Comments