Looking for Reliable Tools for Software Patching and Remediation
Asked by
CreativeFox42
I'm searching for effective solutions to patch and remediate third-party applications, not just Windows patches. I'm specifically looking for systems that require minimal human input and align with security standards like ISO27001, NIST, or Cyber Essentials (UK). Currently, we're using Qualys for scanning and a Kaseya RMM. I'm in the early stages of investigating Qualys's patching product, but I also have some clients on Datto's patch management for Windows, which has been quite inconsistent. Ideally, I need a dependable product that can handle patching for a few thousand endpoints within 14 days of critical CVEs being disclosed. Any suggestions?
Answers
I'm a fan of Microsoft Configuration Manager paired with PatchMyPC Enterprise. Their patch catalog is constantly updated and their customer support is fantastic. What I really appreciate is that it keeps all my installation objects current, which means users always have the latest software when they install from the Software Center. Totally automated, which is a dream!
Reply to this answer
We utilize Ansible/AWX for OS and third-party patching. Works like a charm!
Reply to this answer
Is Chocolatey still a reliable option? I used it for third-party patching a while back and found it pretty dependable. I’m curious how others feel about it now since I’m experiencing similar patching challenges as OP.
Reply to this answer
We use Action1 for both Windows and third-party app patching. They've got a solid library of supported third-party apps, and you can even add your own. It's easy to set up, works well, and they offer up to 200 endpoints for free, which is pretty neat. Definitely worth a look!
Reply to this answer
We recently switched from an on-prem PDQ Deploy setup to their cloud-based PDQ Connect. It's great because as long as endpoints are online, we can keep everything patched and up-to-date. It's been particularly useful for quickly patching our VPN clients. Plus, it has excellent automation and CVE patching features.
Reply to this answer
Add your answer
Answers are reviewed before publication.
CreativeFox42: Thanks, I’ll check this out!