Schedule and deploy approved patches at desired times or manually deploy to groups or individual devices.
Choose software vendors, products, and the severity of patches to scan and install. Easily create exclusions for applications.
Download all missing patches to a master agent that seamlessly distributes patches to all managed devices in the network.
Schedule patch scans to run automatically every 24 hours and set patches to deploy automatically every Thursday. These default settings can be customized at any time.
Manage all software patches and view graphical summaries of installed, missing, or failed patches from any device.
Deploy patches for Windows Operating Systems and thousands of other third-party software applications for comprehensive protection.
View detailed results from a single platform that includes information on missing patches, severity levels, knowledge base links, release dates, descriptions, and more.
Simply rollback patches if they are unstable from individual devices or ignore so they don’t show in patch results or get redeployed.
Manage your AVG endpoint protection solutions from one central platform. Patch Management can only be managed from the console. Learn more about the Management Console
Yes, it is highly recommended that you change Windows Update settings for your devices via the Windows Update Center and/or Group Policy so Patch Management can provide updates.
The Windows Update service must not be disabled; rather, it should be set to either Manual or Automatic to successfully deploy patches. In addition, the Windows Update setting on each target machine (Control Panel > System and Security > Windows Update > Change settings) should be set to Never check for updates.
You can set your patch schedule in Device Settings > Policy > Patch Management > Step 2. All devices or groups under the Patch Management policy will follow the schedule you set.
The Patches page provides an overview of all missing patches for all devices connected to your console. The Devices page provides a list of your devices and the Device Patch Results tab identifies missing patches for that particular device.
You will see detailed information on the severity of missing or installed patches with vendors, and on software applications.
You will be able to see how many devices are licensed for patch under the ‘Subscriptions’ section in the console.
We are planning to support Patch Management for Mac OS X devices at a later time.
Could be due to the following reasons:
You can modify the patch deployment schedule and exclude vendors and applications by going to Device Settings > Select Policy > Patch Management tab.
Yes, you can manually deploy patches to individual devices and groups of devices in one action.
Patches will be in one of the following states.
It could take from a few seconds to hours. The time depends on the size of the patch that is being downloaded to the device, the software application it is updating, and the hardware of the device.
Yes, the device you have selected as the Master Agent will be used to store the software application patches and will distribute them to devices on the network so as to save bandwidth. If you do not have a Master Agent selected, devices will download the software application patch directly from the internet (not recommended).