Marketing description

WatchGuard Patch Management is a solution for managing vulnerabilities in operating systems and third-party applications. It also provides centralized, real-time visibility into the security status of software vulnerabilities, missing patches, updates and end of life (EOL) software, inside and outside the corporate network. It benefits your organization by reducing the attack surface, since 80% of all cyber attacks, exploit known vulnerabilities. This solution simplifies the complex patch management lifecycle for operating systems and third-party software. As a result, the attack surface is reduced, and the capacity to prevent and contain incidents caused by system vulnerabilities is strengthened.

Key selling points

• Single-panel view with real-time information of all vulnerable computers, pending patches and unsupported (EOL)software, with their remediation status
• Detailed information about pending patches and updates, details of relevant security bulletins (CVE)
• Automatic search for available patches in real time or at periodic intervals (3, 6, 12 or 24 hours)
• Notification of pending patches in exploit detections
• Ability to isolate, patch and deisolate computers and servers
• Patch and update planning and installation tasks
• Configure criticality and software to patch
• Schedule for immediate, one-time execution or for repeated execution at regular intervals (date/time)
• Control computer restarts and set exceptions
• Rollback to uninstall a patch that may cause an unexpected conflict with an existing configuration
• Dashboard and actionable lists
• High-level and detailed reports
• Lists of updated computers, computers with pending updates with errors
• Granular management based on groups and roles with different permissions
• Role-based visibility into vulnerable computers, patches and service packs
• Centralized control over updates, patches and software
• Ability to disable Windows Update and centrally manage operating system updates
• Ability to exclude specific patches by version and by type
• Capacity to exclude software (e.g. Java)
• Caching of downloaded patches