Large corporations as well as small businesses have begun to turn to automated patch management software for security and updates. The average user has become used to the security updates and fixes and businesses have much more to secure against. The frequent patches and additions to the Windows operating system has accustomed the consumer to the need for fixes on a regular basis.
A computer user in a home environment will often allow Windows to automatically search for, and apply patches or security packs on an automatic basis. In the corporate or business environment, the same is true, however there are additional programs running that must also be fixed in order to ensure a system is up to date and secure. Taking the time to research and assess each program on each machine could be a task that consumed labor and expense for businesses prior to the introduction of patch software.
However the software patch management programs have taken much of the burden off the workforce and allow these operations to be configured and executed automatically. Whether a company has two machines or an entire network of machines spanning the nation, the need is the same, to keep up to date. While formerly one or more employees might be dedicated strictly to updating and securing all the machines in a location, new software programs have freed them for more profitable duties.
The software will normally contain a console where administrator preferences can be set. That means the administrator can determine which programs should be updated and scanned and those which can be ignored. There are usually options to choose a patch download site in the console area as well.
Most computers on the network have specific functions and some will have different programs to carry out those functions. A management program for fixes and patches can scan the system and update those programs requested. Unlike a macro the programs can be configured to scan each machine or their own contents and then apply only those patches which are necessary for that specific machine.
One very common type of management program for patches is that of the agent based software. This solution employs an agent, or small program on each machine. The agent scans the machine and makes the necessary changes. When the changes and scan are complete the program reports the results to a central administrative machine.
Other types of management programs use a central machine as the controller. This central computer with a program on it scans each of the machines in the system applies the necessary system changes on the targeted computers in the network. This is known as agentless management in that the only requirement for the other machines is that they be connected to the network, instead of the internet as is required for agent based solutions. The agentless type of management software requires more direct supervision than the programs which reside on individual machines.
Whichever method is chosen the patch management software alternatives tend to save time and help improve security. This is particularly true when patching a large network with many machines. Before a decision is made in favor of agent or agentless software the business should assess the available work force, security needs and bandwidth of the company. While the agent based solution is more bandwidth intensive, it requires less supervision. The agentless method requires less bandwidth but is ultimately more controllable.
Nenhum comentário:
Postar um comentário