Patch Management Solution

I'm using PM to deploy Adobe Flash 11.4.402.278 (AFP11-44278).  When I try to run reports to check compliance of my policy I either won't see this bulletin or won't see any data when I select Adobe as the vendor.  Has anyone has this issue?  I'm using version 7.1 SP1.

Hello Brian,

AFP11-44278 is superseded by APSB12-22 in the latest Patch Data 7.1.365. Compliance report does not show superseded updates, so you will not see AFP11-44278 in compliance reports - APSB12-22 should be shown instead of AFP11-44278.

Please also be aware that AFP11-44278 applies only to Adobe Flash 11 (not Adobe Flash 10) - it will not be detected as applicable in case if you have Adobe Flash Player 10 or less installed on your clients.

In case if you really have Adobe Flash Player 11 installed on machine, but APSB12-22 bulletin does not appear in compliance reports after importing the latest Patch Data and executing Windows Assessment Scan on clients, please attach STPatchAssessment.log & STPatchAssessment.xml from affected client. Files are located at "C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{6D417916-467C-46A7-A870-6D86D9345B61}\cache\"

Also please attach screenshot from compliance report where issue is observed

Thank you,
Roman

Hi Roman,

Thanks for the reply.  It makes sense to not show superseeded updates, however since AFP11-44278 is a new version of the software I think it would make sense to be able to report on it's compliance.  It would be nice to be able check compliance on how many machines need to be updated to Adobe Flash 11.4.402.278.  Once 100% compliance is reached we would then be able to check compliance of APSB12-22.

Is this something you could pass along as a customer suggestion?

Hi Brian,

Customers may post their suggestions to Ideas on Symantec Connect. For Endpoint Management Ideas suggestion may be posted at https://www-secure.symantec.com/connect/endpoint-management/ideas

BTW, the latest patches and updates should be applied to managed machines in order to decrease vulnerabilities. I believe if Adobe Flash is not up to date on managed machines it should be updated to the latest available version. (Please note that APSB12-22 includes the latest Adobe Flash 11.4.402.287 which is newer than Adobe Flash  11.4.402.278 included to AFP11-44278)

Thanks,
Roman

Thanks for the info Roman.

What will be the best way for me to ensure that all computers in my environment have Flash Player 11?  Patch Management or Software Delivery?

Hi Brian,

Patch Management Solution detects status of patches for already installed software, so if Adobe Flash Player is not installed at all on some machines, Patch Management Solution does not tell you that Adobe Flash Player is missing for this computer because update is not actually applicable to it.

If you want to ensure that required product is really installed on some machines, you may use Software Delivery.
If you want to ensure that installed product has the latest available updates, you may use Patch Management Solution.

Thanks,
Roman