Patch management software has become more popular over recent years with businesses both large and small. Frequent fixes to the windows operating System fix security issues and sometimes add functionality to the programs. They have also gotten the consumer used to the fact that most programs require patches.
Most home users will enable automatic updates for the Windows operating system and this is a specific and limited type of patch management software. There are many more programs on almost every computer which also require patching. For the larger company or business, this can be a time and labor intensive job keeping up with patches and securing the system.
However the software patch management programs have taken much of the burden off the workforce and allow these operations to be configured and executed automatically. Whether a company has two machines or an entire network of machines spanning the nation, the need is the same, to keep up to date. While formerly one or more employees might be dedicated strictly to updating and securing all the machines in a location, new software programs have freed them for more profitable duties.
The software will normally contain a console where administrator preferences can be set. That means the administrator can determine which programs should be updated and scanned and those which can be ignored. There are usually options to choose a patch download site in the console area as well.
Not every machine on a large network will have identical software installed. These machines all may be used for different purposes and this influences what programs are installed. Patch management programs for businesses are able to scan each machine and identify what programs are present and may need patches as opposed to simply applying a set number of fixes or patches to all machines regardless of content.
There are two broad types of management programs for patches that are used in both businesses and for home users. The first is an agent based patching solution. Agent based means simply that a small program is resident on each computer and scans the machine it is on, downloads the necessary patches and then reports to a central computer. This method is bandwidth intensive but mostly automated and efficient on a large scale.
Agentless management programs on the other hand are centralized. The main machine performs all the scans upon the network and initiates the actions to patch. While agentless software is certainly more centrally configurable and permits closer monitoring of network machines than an agent based option. The cost for these programs will be higher than that of the agent based solutions. They also will require more supervision than those with agents.
These alternatives have cut the cost of maintaining some security aspects of a large network. It has become popular even among home users. However, a business should consider their available bandwidth, work force, and corporate needs before deciding upon particular management program, since the differences are so striking.
Tidak ada komentar:
Posting Komentar