Endpoint Central's Patch repository is updated periodically, with the details of the latest patches that are released by Microsoft, Apple, Linux and other 3rd party vendors. Every enterprise has a Patch Database, in order to perform patch management activities using Endpoint Central. Enterprises sync their Patch Database with the Endpoint Central Patch Repository to ensure that their database is up-to-date. All the machines are scanned for the missing patches, only based on the Patch Database. Configuring the Patch Database Settings, refers to the time interval during which the Patch Database will sync the patch details from the Endpoint Central's Patch Repository.
Administrators can choose to use patch management for patching a specific type of Patch like, OS related patches or third party patches etc. Though there could be a lot of patches released frequently, not every enterprise will have a need to update all those patches to all the computers. So, Administrators use the "Decline Patch" feature. Administrators can also choose to scan only the specific type of patches like OS related patches or 3rd party patches. All the computers will be scanned to identify the missing patches, based on the selection. For example administrators can choose to install only patches related to Mac operating system and 3rd party patches related to windows operating system. Then computers will be scanned to identify the missing patches related to "Mac, Linux and 3rd party patches related to windows operating system".
To configure the Patch Database settings, follow the steps below:
Navigate to the Admin page.
Under the Patch Settings, select Patch Database settings
Users can select the type of patches that are to be managed. These patches can be selected individually for the provided Operating Systems. This feature is provided to ensure maximum feasibility of the Patch management activity. Endpoint Central will receive updates from patch repository on the whole irrespective of the type of patches selected. Once Patch Database sync is completed, the managed Computers will be scanned and only missing patches related to selected patches will be listed.
"Enable" the Schedule Vulnerability Database Update and fill in the fields to activate the patch database sync.
If you wish to receive the notifications on the patch database settings, provide your email address in the corresponding field.
Click Save to enable the patch database sync settings.
Setting the time in Starts at field will enable patch sync to happen at that time on a daily basis.
If you wish to receive mobile app notification, install the mobile application version of Endpoint Central and configure the changes here.
This procedure is not applicable for Endpoint Central cloud Version.
Note: To have your Patch database updated, it is recommended to schedule the patch database sync on a daily basis.