Patch Management Solution

Hello,

I've read that Superseeded Bulletin are not reported "by design" in compliance report cf this article : https://www-secure.symantec.com/connect/forums/software-update-bulletin-dont-have-compliance-report

But we need this information : is there any way to have a compliance report with all active Bulletin, even if this bulletin are superseeded ? In the actual situation, we are delivering Bulletin but are unable to know if our computer are in compliance or not.

Hello David,

Take a look at HOWTO84835; this should get you what you are looking for. Keep in mind that Patch Management will not target IsApplicable=TRUE for a Superseded update, but this will show you what you want to see for historical targeting of old superseded updates.

As with any database modifications; be sure to back up the database, for this will update multiple stored procedures to allow for viewing Superseded updates within the Reports and Drill Downs.

Hope this helps,

Joshua

Thanks for your answer. I've not tested it for the moment but I've one question more : do you know if this correct the ITA Cube for patch management to ?

I'm not sure to understand this :

"Keep in mind that Patch Management will not target IsApplicable=TRUE for a Superseded update, but this will show you what you want to see for historical targeting of old superseded updates."

We are delivering superseeded update, and there are well targeted and installed on computers.

Hello,

I've tested the stored procedures update to have information about superseeded bulletin in reports and dashboard : it's perfect and correct effectively all.

Unfortunately, as I feared, ITA cubes are not update : the views used by patch management seem referenced to others functions.

To clarify: Patch Management does not target or report on Superseded Updates by design. The Patch Filter that is updated every 30 minutes; NS.Windows Patch Remediation Settings - scheduled task process will basically cross reference the associations from the Client's Assessment Scan data with the IsApplicable=TRUE rule logic, and that will build if the intersect between the two allows for the Software Update Policy to target and reports to build on compliance.

If an update is deemed 'Superseded' by Microsoft, as viewed on the Reports > Software > Patch Management > Software Bulletins > Windows Superseded Bulletins, it will be dropped from the target intersect collection (Patch Filter).

The updated reports I provided in that article will only display in the Windows Compliance Reports listed under Patch Management. Unfortunately, my focus is mainly Patch Management; you may want to post on the ITA forums; that way you can get insight on those reports from an ITA guru.

Let me know if there is anything more I can assist with and I will be happy to help.

Thank you for your explanation. I'll have a webex with BayDynamics - who builds ITA Cube - to look at how to modifiy cube.

I take you inform if possible

Joshua,

Bay Dynamics has helped me to modify the cube and we have now the wanted result.

For that, you have to modify the Stored Procedure in CMDB Database spITAnalytics_CSMP_CreateViews (edit it and create a new one).

In this stored procedure comment all 'where is null' clause searching word 'superseed'. When it's done, run the new modifed Stored Procedure ; process the Pach Management Cube (with all dimension linked) : it's done ! Now you have information about superseeded bulletins.

I hope my explanation was clear and it can help anyone.

Thanks for sharing, David.