Patch Management provides rapid patch remediation, allowing you to proactively manage threats by automating the collection, analysis, and delivery of patches throughout your heterogeneous enterprise to secure end points.
The ZENworks Server has a Web-based management user interface known as ZENworks Control Center. Its Patch Management feature allows you to monitor and maintain patch compliance throughout the entire enterprise. The ZENworks Primary Server can deploy a ZENworks Agent on every client system in the target network, ensuring that all systems are protected with the latest security patches, software updates, and service packs.
The Patch Management feature stays current with the latest patches and fixes by regular communication with external patch source through a secure connection. After the initial 60-day free trial period, the Patch Management feature requires a paid subscription to continue its downloads of the latest patch and vulnerability information.
As part of the ZENworks Agent, a Patch agent is installed on each device that is enabled for Patch Management. The Patch agent analyzes the device to determine what patches it needs, downloads the patches on-demand through the ZENworks content system, and then applies the patches based on the established patching schedule.
To support the ondemand downloading of patches, at least one Ondemand Content Master (OCM) is required. When the OCM receives a device's request for a patch that is not yet available in the ZENworks content system, it downloads the patch from an external site (either the ZENworks patch repository or a vendor's patch repository), stores it in the ZENworks content system, and serves the patch back to the device. Only Primary Servers can function as OCMs. The Patch Server, when configured, defaults as an OCM. You can add additional OCMs via the Server Hierarchy configuration.
NOTE:ZENworks Patch Management provides software updating and patching services for Windows operating systems and applications, eliminating the need to run the Microsoft Windows Update service. If necessary, however, you can continue to run Windows Update service on the same device as ZENworks Patch Management. Regardless of which solution performs the patch installation, ZENworks Patch Management detects and reports the installation status and source, allowing you to easily monitor the patch compliance of your devices in ZENworks Control Center.