Phone Lines icon GFI Support

Articles in this section

See more

Configuring Patch Auto-Deployment in GFI LanGuard for Missing Updates

Author: Andriy Rybalchenko Updated

Overview

GFI LanGuard ships with a patch auto-deployment feature that enables you to deploy missing patches and service packs in all languages supported by Microsoft® products. GFI LanGuard also supports patching of third-party or non–Microsoft patches.

This article guides you on how to set up and configure the Patch Auto-Deployment feature.

Process

Enabling Patch Auto-Deployment

  1. Access GFI LanGuard.
  2. Go to Configuration > Software Updates > Patch Auto–Deployment.
  3. In the right pane, select the method for approval.
    1. Manual approval
      Use the Manual approval tab to approve patches one by one. This is achieved by using the list of unapproved patches grouped by vendor or severity that you want to be approved.

      2019-09-11_23-13-19.png

      NOTE: Key-in the search criteria and click Find to search for a specific application.

    2. Automatic approval
      The Automatic approval tab enables you to specify which group of patches are automatically approved according to a category for a particular vendor.

      2019-09-11_23-13-43.png

Back to top 

Configuring Patch Auto-Deployment Advanced Options

  1. Access GFI LanGuard.
  2. Go to Configuration > Software Updates > Patch Auto–Deployment.
  3. From the Common Tasks, click Advanced options.
  4. On the General tab, configure the following options. See the functions on the table below.

    2019-09-11_23-14-12.png

    Option   Description
    Send an email when new patches or service packs are available.   Send an email when new patches are identified.
    Show   All patches

    Displays all the identified patches.
    Patches for products that were detected in the network:

    Displays only the patches identified on the selected network.
  1. Select the appropriate checkboxes and click OK to save changes.

Back to top

Configuring Patch Auto-Download Settings

GFI LanGuard ships with a patch auto-download feature that enables the automatic download of missing patches and service packs in all languages supported by Microsoft® products. In addition, you can also schedule patch auto-download by specifying the time-frame within which the download of patches is performed.

  1. Access GFI LanGuard.
  2. Go to Configuration > Software Updates > Patch Auto–Download.
  3. From the right pane, click the link.
  4. In the General tab, select between All patches or Only needed patches.
  5. In the All patches tab click Configure to restrict auto-download of patches for configured languages.

    2019-09-11_23-14-37.png

    2019-09-11_23-50-29.png

    NOTE: Selecting All patches > Configure enables administrators to manually select the Microsoft® patches to download, regardless of whether these are required for deployment. The Only needed patches option downloads only patches required for deployment.

  1. To change the location where the downloaded patches are stored click the Patch Repository tab and specify the required details.

    2019-09-11_23-50-57.png

    • Select Use files downloaded by WSUS when available, if you are using an existing setup of WSUS.
    • Select Remove patches that have not been used for and choose the time duration if you want to remove files that have not been used for remediation in the specified time interval.
  2. To change the time frame during which patch downloads are performed, click the Timeframe tab and specify the required details.
  3. Click Apply and OK to save the changes.

Back to top