Patch Download Settings

• 2 min to read •

Default settings have been configured for your instance relating to the frequency of the content download, scan settings, device health delay, Autofix for newly downloaded updates and troubleshooting settings. 

You can find the Patch Download settings by clicking the Settings option in the toolbar at the top and selecting the Patch Download feature in the Communications section.

Prerequisites 

A Syxsense Manage account that has 'Admin' permissions

Discovery: Patch Settings

 

Settings Content Download Details

Patches that are created or updated are automatically synchronized every evening at 23:00 local time.

You can disable this automatic download by unchecking the 'Download patches' checkbox.

 If you disable this option, you must remember to periodically click 'Check Now'.

Automatic Scan Settings

Patches that are synchronized are automatically enabled during the next patch scan task. You can disable this option by unchecking the 'Automatic Scan' checkbox.

If you disable this option, you must remember to periodically click 'New Updates' in Vulnerabilities (Patch Manager) Advanced All and move new updates into 'To Be Checked'.

Set How Device Health Color is Calculated

The device health globes in the main console are affected by how many patches are missing, and how many patches are not yet scanned.

When new content is downloaded overnight, the next morning all device health globes will turn 'Red'.

To add a health delay, set the period:

  • 1 Week (Default)
  • 2 Weeks
  • 3 Weeks
  • 4 Weeks
  • Off

Include Feature Update version in Device Health:

Feature Updates eventually fall out of support and thus will not include new security updates.

When this occurs for outdated Windows devices, the indicator will remain red until the OS version has been upgraded.

 Strongly Recommended: Enabled. 

Deploy all Patches on Release

By default, 'Auto fix' is disabled.  

During any patch scan task, any detected patches with 'Auto fix' enabled will be automatically installed. To turn global 'Auto fix' on for new patch content as it is downloaded to the console, check the 'Globally enable Auto fix' box.

 If enabled, all devices which perform a patch scan task will install any updates missing, including Servers.

Troubleshooting Patch Deployment

This option is used by our helpdesk to troubleshoot any patch detection issues. Only enable this if requested to do so.

If enabled, it will automatically disable after 7 days.

Check Now Performs an immediate synchronization of the patch content database.
Log Contents of the last download of content from the central content database.

 

 

Last Update: Mar 12, 2024

Copyright ©2024 by Syxsense, Inc. All Rights Reserved