Patch Management
Fully integrated in GravityZone, Patch Management keeps operating systems and software applications up to date and provides a comprehensive view on the patch status for your managed Windows and Linux endpoints.
The GravityZonePatch Management module includes several features, such as on-demand or scheduled patch scanning, automatic or manual patching, and reporting on missing patches.
Learn more about Bitdefender Patch Management supported vendors and products.
Note
Patch Management is an add-on available with a separate license key for all available GravityZone packages.
Linux endpoints use license seats from the pool of licenses for server operating systems.
Patch Management settings are automatically configurable with maintenance windows. See details here.
To manage patches manually, learn about:
Components
Patch Management uses the following components:
GravityZone Control Center
Security agent (Bitdefender Endpoint Security Tools installed on Windows and Linux endpoints)
Install and configure Patch Management
To start using this feature, follow the steps below:
Important
If your endpoints already have the BEST agent deployed, but the Patch Management module is not installed, you can use a Reconfigure agent task to add the module to the endpoint.
If no agent is installed, you will need to use an installation package to deploy BEST on your endpoints along with all required modules.
Below we have included both procedures.
Go to the Installation packages page.
Click the Create button in the upper-right side of the screen.
Type in the Name and Description for the new installation package.
Select the modules you want to deploy.
Note
Make sure you include the Patch Management module.
Click Save.
Select the newly created package from the list of packages and click Send download links.
Enter the email addresses of the recipients and click Send.
Policies are used to enable and configure features both on endpoints and in terms of general functionality.
GravityZone comes with a default set of policy settings, that are custom tailored to meet the most common customer needs.
You can use these default policy settings and leave the configuration of the policy for a later date, but you need to follow the steps below to assign a maintenance window to your policy:
Go to the Policies page.
You can either:
Apply Patch Management settings into your network, by going to the the Patch Management page and assigning the maintenance window to a policy.
Save your policy.
If you created a new policy, apply it on the endpoints where the feature is deployed.
Go to the Network page.
Select the endpoints you want to apply the policy to.
Click the
Assign Policy button at the upper side of the table.Select the policy you want to apply.
Click Finish.
Note
For more information, refer to Assigning device policies
If you have edited an existing policy, make sure it is applied to all endpoints where the feature is deployed.
This will ensure that the feature is enabled and configured to best suit your company's needs.