Patch Management: Problems and Benefits
Patch management is a vital and complicated process. Timely and correctly managed updating optimizes cybersecurity, compliance, availability, and capability. Haphazard software update management can result in security gaps, compatibility problems, slow or inconsistent performance, needless downtime, or unavailability of key features. Patching involves more than periodic updates of an OS and apps for servers and user machines. Firmware patches can be a critical for peripheral devices such as printers and scanners, infrastructure appliances such as switches and wireless APs, and IoT devices like alarms and health monitors.
Progent's Patch Management programs can oversee IoT devices such as sensors and health monitors
The patching process can pose a range of complications that can differ for various environments. Assets that may need patching can reside on-premises, in a public or private cloud, on the road, or in the offices of telecommuters. Environments may include any mix of Microsoft Windows, Linux, Apple, and Google operating systems and applications. Some updates can be installed programmatically and at scale with management tools such as Configuration Manager, Microsoft Intune, or Azure Automation Update Management. Other updates must be implemented manually. Updating for vital systems must be timed to avoid business disruption. In some line-of-business systems, patches must be carefully validated prior to being approved for production.
Progent's managed services for software and firmware patch management provide businesses of any size a flexible and cost-effective alternative for evaluating, validating, scheduling, applying, and documenting updates to your ever-evolving information network. Besides maximizing the safety and functionality of your information system, Progent's software and firmware update management services free up time for your in-house IT staff to concentrate on strategic initiatives that deliver maximum business advantage to your information system.
Patch management is a closed-loop lifecycle central to your risk management plan
Progent's Software Update Management Activities
Progent offers regular and specialized service programs for software and firmware patching. These services allow you to outsource some or all of your software update management activity to a network consulting organization with more than two decades of background providing network design, deployment, and support to companies of all sizes worldwide. Progent operates closely with your network managers to define the scope of the managed services you need. Programs offered by Progent for patch include:
- Discover network assets: This can include key platforms such as Exchange and SQL Server, web-facing servers, desktops and mobile endpoints, security appliances like firewalls, and network infrastructure devices like routers and wireless access points.
- Select assets to be placed under management: Progent's experts will confer with your IT team to identify which of your network resources you choose for ongoing patch management services. Progent provides a selection of regular programs that cover certain types of items and Progent can also provide specialized programs to meet your unique requirements.
- Deploy patch management tools: Progent is experienced with a wide selection of software update platforms and update inventory reporting systems. Examples of tools include Azure Automation Update Management for cloud-hosted resources, Microsoft Configuration Manager for on-premises assets, Intune for mobile devices, IT Glue for documentation, as well as a selection of modern anti-virus products. Used together, these tools enable you to automate and track updates for IT assets residing in public and private clouds, on site, on the road, at branch offices, and in the residences of at-home workers.
- Determine update status and perform risk analysis of missing patches: Generally, environments with current patching are more protected and dependable than those with inconsistent patching. Still, occasionally software updates are rushed into production and carry the ability to disturb essential network processes by introducing compatibility problems, system instability, or unfamiliar alterations to end-user environments. Progent can assist you to determine which patches carry a risk to your company's IT environment, or which updates should be assigned an urgent priority because they defend against an imminent cybersecurity attack. Progent's experience providing update management support can assist you to maintain a safe network without compromising business value.
- Create a software update management program: Progent's group of consultants can help in devising and administering a patch management program that fits your business needs. Progent can provide standard and custom patch management service programs and can assist with both automated as well as manual patching. Progent can manage business-critical resources only, all patchable assets, or anything in between.
- Patch testing: Even the largest networks including Amazon AWS and Microsoft Azure have experienced widespread outages that resulted from updates that were insufficiently tested before being rolled out to live systems. For businesses with no tolerance for service disruption, Progent can help develop pilot systems that permit you to verify that the latest updates will not introduce stability issues for your network.
- Rank and schedule updates: Progent can assist you to determine which patches should be implemented quickly and which can be delayed so as to reduce business interruption. Some key industry standards, such as the PCI Data Security Standard, mandate that the most critical cybersecurity patches be implemented within a specified time period.
- Document patch history and status: Progent's regular update management service programs include the creation of a centralized knowledge base for tracking the update level of every monitored asset. This simplifies the job of locating where patches can be accessed and includes release dates, release notes, and other important data needed for a complete patch management system.
- Debug patch problems: Updates to some key items such as an operating system or app server can cause unexpected compatibility or reliability issues, most commonly with outdated or home-grown applications or older devices. Progent has the breadth of experience to help you to understand and resolve issues that may appear due to applying a patch.
Software Update Management for Infrastructure Appliances from Cisco and Other Providers
Software updates are frequently developed for network infrastructure devices like firewalls, routers, switches, and wireless access points. These updates typically are intended to harden cybersecurity, enhance features, or correct stability and compatibility problems. Managing patches for these network appliances can pose a challenge, particularly in mixed-vendor networks and systems that include a mixture of on-site datacenters, telecommuters, branch offices, and cloud-based resources. In addition to tracking and accessing the latest updates, network managers have to ensure that network infrastructure appliances have enough free disk storage and that updates are transferred uncorrupted and operate properly.
Progent has delivered high-end support for Cisco infrastructure appliances for more than two decades and also offers expertise for devices from other leading vendors such as Palo Alto Networks, Fortinet, and WatchGuard. Progent's end-to-end services for patch management can assist your organization to consolidate your patching solution to cover network appliances along with physical and virtual servers, endpoints, applications, and Internet-of-Things devices.
Progent can provide software update management expertise for network appliances from Cisco and other vendors
Progent's Standard and Custom Patch Management Plans
Progent provides a variety of standard software update management packages that include backup, extensive reporting, and thorough documentation. Cost is based on the type and quantity of devices covered. Extra support including creating systems for initial software update testing are invoiced at normal rates. Specialized packages are also offered and usually cover unusual hardware and/or apps.
PROACTIVE Server Software Update Management Services
Onsite or Private Cloud-hosted Server:
Azure Cloud Servers Patch Management:
- Compliance scan of all Windows and Linux servers
- Update compliance evaluation results for enabled machines
- Scheduled Patching and Maintenance Maintenance
- License & Asset reporting and management
- Managed Anti-Virus - Current AV system
- Initiate server backup once complete
- Additional Services Invoiced at T&M Rates
- IT Glue access control and asset documentation
On Premises or Virtual Workstation:
- ProSight Availability Monitoring
- OS & 3rd Party Patch Management
- Scheduled Patching and Maintenance Maintenance
- Managed Anti-Virus - current AV system
- Hosted Anti-Spam - Spam Hero
- Additional Services Invoiced at time and material Rates
- IT Glue access control and resources documentation
BASIC Server Patch Management
Managed Patch both Physical and Virtual Servers:
On Site or Virtual Workstation Patch Management:
Server or Workstation Security Service-Level Agreement - Add on service
Security Critical Patches - completed within 48 hours of Progent being notified - invoiced only when required
PROACTIVE Network Device Patching
Internet Facing Hardware - Managed Devices (Security appliances, firewalls, routers):
Internal Network Hardware - Managed devices (wireless controllers, Wi-Fi access points, switches):
Network Device Security SLA - Add-on service
Security Critical Patches - applied within 48 hours of Progent being notified - invoiced only when needed
Initial Patching Process Extra Costs:
Initial patching will be subject to an extra cost for each server or network device to enable capture and recording of current update level and any other documentation necessary for effectively managing the patching services as defined above. If multiple patches are needed that require additional time for the first-time patching, Progent will provide any estimates beyond the regular update cost.
Other Services Available:
Download the Software Update Managed Services Datasheet
To download a datasheet about the features of Progent Software Update Managed Services, click:
Progent Patch Management Services Datasheet. (PDF - 330 KB)
Contact a Progent Expert about Software/Firmware Update Management Solutions
To find out more about Progent's patch management offerings, call Progent at 800-993-9400 or go to Contact Progent.