Vulnerability Management

Key Features

• Deploy patches where required, removes required Vulnerability to patch CVE:KB Map from device.
• Report on Required Patches and Vulnerabilities, comparing Required CVE:KB map to device Relevant patch status. Refresh Relevant status from the patch source first, if it has not already been refreshed today.
• Retrieve Relevant drivers and patches from patch source. Optionally refresh cached data where it is under 24 hours old.

Setup

• This Product Pack contains both Rules and instructions.
• Upload this Product pack with the help of Tachyon Product Pack Deployment Tool.
• A Guaranteed State Policy named Vulnerability Management will be created.
• A Guaranteed State Rule named Map CVE to KB data will be created.
• An Instruction set named Patching and Updates containing all the instructions will be created.

Usage

1. Review the Map CVE to KB data rule that will be used to update local Agent storage with CVE and associated KB data.
2. Check the Triggers when this Rule should be evaluated.
3. Validate the check.
4. The Fix is optional so you can choose your desired fix.
5. Enable the required Map CVE to KB data Rules.
6. Assign the Vulnerability Management Policy to a management group.
7. Deploy the Vulnerability Management Policy.
8. Within a period of a day or more this will apply any recent updates found to the CVE KB resource file under 1E Client resource folder.