What's everyone using for Patch Management

jasonhand · 2014-10-16T14:27:38.000Z

What are some good Patch Management options out there? We’re looking for something to use to send out patches that come out, for example the SandWorm vulnerability, would be nice to have something that can show what pc’s need it and just send it out to them.

@Microsoft

randy1699 · 2014-10-16T14:28:23.000Z

Shavlik and Ninite for Java, etc.

alexakselrod · 2014-10-16T14:36:37.000Z

out of all the products I’ve used in the past, IBM Big Fix was the most reliable.

bnoga · 2014-10-16T14:43:02.000Z

For local domain: WSUS, GPO, and PDQ Deploy

For remote offices: GFI Cloud

kimbelrich2492 · 2014-10-16T14:52:37.000Z

SCCM via GPO

Denis-Kelley · 2014-10-16T15:41:57.000Z

WSUS and just got approval for the Pro version for PDQ Deploy.

Phil-Adler · 2014-10-16T16:32:16.000Z

PDQ Deploy along with PDQ Inventory. They have great support, its a great product and very reasonably priced.

steveg4807 · 2014-10-17T11:53:58.000Z

SCCM 2012 r2 here. learn it, love it, live it

kevinmitchell · 2014-10-17T11:54:21.000Z

WSUS and F-Secure Policy Manager with a software update add-on. We also use PDQ as a back up when needed.

rgibson · 2014-10-17T12:01:38.000Z

AR-Beekeeper:

Shavlik and Ninite for Java, etc.

and WSUS for Microsoft.

coreyfonseca · 2014-10-17T12:05:07.000Z

Currently using GFI LanGuard, but it’s a pain to maintain and it never really works. Currently switching back to WSUS and probably going to look into PDQ Deploy since the pricing is awesome.

zzaffis · 2014-10-17T12:13:43.000Z

We used languard for a good while, but it became really problematic. It’s overly done and the integration with WSUS is meh… We have WSUS… why add to it…?

We have since switched to PDQ Deploy, after testing a number of other vendors.

For cheap and dirty, ninite was great, but PDQ has some extra knobs that we found to be useful.

phantomtulaba · 2014-10-17T12:17:57.000Z

WSUS for Microsoft and some scripts for Adobe Reader, Adobe Flash, and Java.

rheycasama · 2014-10-17T12:18:44.000Z

been running Microsoft System Center 2012 R2…

mconley68 · 2014-10-17T12:18:46.000Z

I’d throw in another +1 for PDQ Deploy. It’s cheap and efficient. I do wish it had built-in AMT support to power on machines before deploying packages.

dszulc · 2014-10-17T12:34:33.000Z

We have just recently investigated the patch management products as we want to achieve LV 1 PCI Compliance.

We have ended up with Lumension Patch and Remediation

Really good product. and it’s not expensive to get. It allowed us to get rid of WSUS as it wasn’t working for us.

It’s got a HUUUUGE library of patches - Microsoft ones and a plethora of 3rd party ones as well. You can easily create your own.

Also Security baselines, unwanted software uninstalls, lots of security settings, own policies etc. Hardware and software inventories.

It’s really easy to use as well.

Really happy with the choice.

ajstringham · 2014-10-17T12:40:29.000Z

Ninite is good. I’ve heard good things about PDQ Deploy but haven’t personally used it. The Patch Management in GFI is really nice too!

ajstringham · 2014-10-17T12:40:49.000Z

Still, for general Windows patches, etc. you can’t beat a WSUS server.

derek-a · 2014-10-17T12:47:05.000Z

Combination of NiNite Pro and WSUS.

dougread2526 · 2014-10-17T12:50:08.000Z

We use Dell Kace K1000 for our patch management