Symantec Management Platform (Notification Server)

 View Only
  • 1.  Creating Multiple Patch Policies

    Posted Oct 12, 2011 03:40 PM

    Has anyone else had an issue when creating a single policy that contains multiple bulletins?

    Example:

    From the compliance by bulletin report, I highlighted the entire group of MS bulletins released in 4/2011 and chose Distribute Packages.

    The policy was created and I enabled it. However, somehow several bulletins within the policy didn't get included as they should have. If I create a policy for the missing bulletin separately it does work.

    What is the best practice for policy creation? Should multiple bulletins be included in a single policy?

    Thanks



  • 2.  RE: Creating Multiple Patch Policies
    Best Answer

    Posted Oct 12, 2011 06:18 PM

    I found the issue. I split them in half and it only ended up having a problem with half of them. So I re-created those packages and it started working as normal again.

    I am still interested in a best practice if anyone has info..

    Thanks



  • 3.  RE: Creating Multiple Patch Policies

    Posted Oct 12, 2011 07:41 PM

    In 7.1 SP1, you can select patches and create a policy, and it will download/stage the patches for you.  This eliminates the issue you might be seeing in your pre-7.1SP1 environment if you try to create a policy for patches that are not staged, or are staged but require package recreation.  I advise a month of bulletins per policy as a maximum, since doing yearly amounts can be difficult to manage and there are limitations on the number of bulletins per policy.



  • 4.  RE: Creating Multiple Patch Policies

    Posted Oct 12, 2011 09:21 PM

    I would not do to many bulletins per policy as you cannot manage bulletins very well at all with 7.  6 did a lot better job of letting you add or remove bulletin, with 7 you basically have to start from scratch each time... as you probably discovered.