Device Health (Patches)

• 3 min to read •

In the Device Patches section, you can find out more about available patches for all detected vulnerabilities and patching history.

In the Security section, you can check out which vulnerabilities are detected in your corporate network, which are not, and for which the system has not yet been scanned.

Important Information

Detected Vulnerabilities - Patches that have been detected on this device.

Critical - detected patches with a CVSS severity of Critical only.

Patch Tuesday – detected patches released on the previous 'Patch Tuesday'.

Top 10 Most Critical – detected patches that fall within the 10 most detected patches in Syxsense. If the device is not vulnerable to all 10 patches then less than 10 patches will be listed.

Not Detected - Patches that are not needed on this device.

Not Scanned - Patches that have not yet been scanned on this device.

Resolved - Patches that have been deployed to this device using any method.

History – Information on each patch such as its status, when it was first scanned, last scanned, resolved, etc.

Discovery: Device Health GlobesDiscovery: Device Health Globes

Device Health Icons

Green - No severity-rated patches are detected and all severity-rated patches have been scanned (non-severity, or N/A, may be required).

Blue - Only Low-severity patches are detected or unscanned (non-severity, or N/A, may be required).

Yellow - No Critical- or High-severity patches are detected or unscanned, one or more medium severity patches are detected or unscanned (lower-severity may be required).

Orange - No Critical-severity patches are detected or unscanned, only High-severity patches are detected or unscanned (lower-severity may be required).

Red - A Critical-severity patch is detected or is unscanned (lower-severity may be required). If the device is on a Microsoft-unsupported version of Windows 10, the indicator will remain Red until upgraded to a supported version of Windows 10.

Health Delay - Solid color with the top quadrant showing higher severity. There are new updates available; however, the health indicator will not change full color until the Device Health Delay has elapsed. This ensures previous and successful deployments are not instantly erased when new content becomes available.

Feature Update out of Support - Device Health icon is purple if Feature Update Version is out of support. This is critical because Microsoft will automatically rollback any deployed patches to out of support versions of Windows 10, leaving you vulnerable.

Device Quarantine - The device has been quarantined from the internal and external networks.

Patch Icons

A patch is current and not superseded.

At least one component of the patch is superseded and at least one component of the patch is still current.

All components in the patch are superseded.

Allows viewing patch components and tracking patch settings.

Checks all patches in the list.

Unchecks all patches in the list.

Checks all patches that are highlighted.

Patch(es) which are enabled can be scanned on demand. This starts the Scan Task wizard.

Detected patches can be installed/uninstalled on demand. This starts the Patch Deploy wizard.

The 'Install Selected' button performs two functions. If left as default it performs an installation of the selected patch(es). During the Deployment Wizard work, if needed you can decide to 'Uninstall' the selected patch(es). This is very useful when you need to remove a problematic patch from your devices.

Video Tutorial: Device Health Globes Settings Video Tutorial: Device Health Globes Settings

Set how Device Health color is calculated Video

Last Update: Mar 12, 2024