Software Patch Management

This is a place to collect information, links and experience with automated software patch management tools. At this point in time, for budgetary considerations, I have decided to proceed with the installation of a Microsoft Software Update Services (SUS) server for windows patch management. [see below].

Relevant White Papers or Information Links

• patchmanagement.org PatchManagement.org is the industry's first mailing list dedicated to the discussion of patch management. Whether it's a Linux operating system patch or a Microsoft application hotfix, this is the place to find more information about it. Sign up now for the patchmanagement.org mailing list!



• Users turn to automated patch management tools [computerworld.com] September 1, 2003
• Patching Things Up [cio.com] August 1, 2003
• Patch Tools [cio.com]
• Patch management burdens customers [nwfusion.com] July 28, 2003
• Patch management: Surveying the vendor landscape [techrepublic.com.com] May 14, 2003
• Patching the Holes [mcpmag.com] March 2003
• Practical patch management [nwfusion.com] October 21, 2002
• Choosing a Security Update Management Solution [microsoft.com] November 26, 2002

Patch Management Tools

Multiplatform

• Citadel Hercules: Automated Vulnerability Remediation

  NT, 2000, XP, Linux Redhat, Solaris

  • Official Web Site [citadel.com]
  
  
• Ecora Patch Manager

  Solaris, Windows NT/2000/XP, MS-SQL Server, MSDE, Exchange 5.5 & 2000, Office 2000/XP, Windows Media Player, IIS

  • Official Web Site [ecora.com]
  
  
• IBM Tivoli Configuration Manager

  BM AIX 4.3.3, 5.1, Solaris 7, 8, HP-UX 11i Windows NT 4.0 SP6a, XP Pro, 2000 Pro, Windows 2000 Server, Advanced, Red Hat 7.1 (ix86), 7.2 (ix86), SuSE 7.2 (ix86), Red Hat zSeries (390), SuSE 7.0 (390), Novell Netware 5.1, 6.0, OS/2 Warp Server for ebusiness, OS/2 Warp 4, OS/400 (V4R5, V5R1),Windows 98, Windows 95 (per contract agreement only), Nokia Communicator, Palm OS, PocketPC

  • Official Web Site [ibm.com]
  
  
• PatchLink Update

  NT, 2000, 2003, XP, Unix (Linux, Solaris, AIX, etc.), IBM, Adobe, Corel, Symantex, McAfee, WinZip, Citrix and Novell.

  • Official Web Site [patchlink.com]

Windows Only

• BigFix

  NT, 2000, XP (Solaris and Linux being added)

  • Official Web Site [bigfix.com]


• HFNetChkPro

  NT, XP, 2000, Windows Server 2003, Exchange, SQL Server, Outlook, Microsoft Office, Java Virtual Machine

  • Official Web Site [shavlik.com]


• Microsoft Software Update Services (SUS)

  2000, 2003, XP

  • Official Web Site [microsoft.com]
  • SUSserver.com [SUSserver.com]
    a collection of Technical Information and Resources to assist in the implementation and troubleshooting of Microsoft Software Update Services
  • Deploying Microsoft® Software Update Services Server 1.0 Service Pack 1 [fusion13.com]
  • Personal Experience [vancleef.org]
  • FAQShop SUS Page [FAQShop.com]


• Microsoft SMS with Software Update Services Feature Pack

  2000, 2003, XP, Office

  • Official Web Site [microsoft.com]
  • Patch Management Guide [microsoft.com]
    This one gives you some idea as to the level of effort required to have a good patch management system.
  • Microsoft Systems Management Server Software Update Services Guide [microsoft.com]
    This one gives you a good overview of the systems capabilities.


• UpdateEXPERT

  NT, 2000, XP, 2003

  • Official Web Site [stbernard.com]

Linux Only

• Red Hat Network

  RedHat

  • Official Site [redhat.com]


• Current

  RedHat

  • Official Site [tigris.org]
  • Personal Experience [vancleef.org]


• APT (Advanced Package Tool)

  RedHat

  • Official Site [freshrpms.net]


• Synaptic

  GUI Front-end to APT-RPM

  • Official Site [savannah.nongnu.org]