Embed Size (px)
Citation preview
Developing Patch ManagementBest Practices
An In-Depth Technical Webcast
Today’s Agenda
Introduction
Curing Your Patch Management Headache with Lessons Learned from the Field• Laying the Groundwork• Before Patch Tuesday• On Patch Tuesday• After Patch Tuesday
Q&A
Today’s Panelists
3
Russ ErnstGroup Product ManagerLumension
Jim Czyzewski Supervisor – Clinical Desktop SupportMidMichigan Medical Center
4
Why Is Patch Management Important
AVDevice Control
Application Control
Patch & Configuration Management
5%
Zero-Days30%
Missing Patches
65%
Misconfigurations
Sources of Endpoint Risk
Today’s Endpoint Security Stack
5
Benefits of a Solid Patching Process
Malware Costs Money Patching Reduces Target Size
6
Patch Management Best Practices
Laying the Groundwork
On Patch Tuesday
Before Patch Tuesday
After Patch Tuesday
PatchManagement
Process
Laying the Groundwork
Discover Assets
8
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Agent Maintenance
Lumension Reporting Services (LRS)
9
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Classify Value and Risk
10
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Establish Workflow and Groups
Users
Groups
Roles
11
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Identify Test Groups
12
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Staff Training
Learning Portals
13
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Before Patch Tuesday
Prepare Resources
15
•Schedule Resources» Allocate IT resources for Patch Tuesday while also integrating additional patch
release schedules from third-party applications, such as Adobe, Apple (ad hoc), Java and so forth
» Review the patching needs of any internally-developed applications and/or custom patches and consider deploying these patches as part of the monthly patch cycle
•Reserve Down-Time for Servers» Reserve time slots to be able to deploy patch updates to any mission-critical
servers within 72 hours of the Patch Tuesday release
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Watch for Pre-Announcements
16
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Confirm Reporting Up-to-Date
17
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Deploy Missing Updates and Pre-Requisites
18
Laying the Groundwork | Week Before | Patch Tuesday | Week After
On Patch Tuesday
Study Information and Security Briefings
• Important information to consider when understanding the impact of Patch Tuesday on your environment includes:
• Bulletin Severity• Whether or not the vulnerability is known/publicly disclosed at the time of release• Does the vendor know of any active exploits at the time of release• Value of the asset being patched
20
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Prioritize Potential Patches
21
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Test and Install Patches
• Follow Internal Change Control Planning and Approval Process • Staged Testing
• Deploy applicable bulletins to test groups • Ensure successful deployment before rollout to additional groups in the environment • Pay special attention to impact to custom-developed, internal applications
• Staged Deployments
22
Laying the Groundwork | Week Before | Patch Tuesday | Week After
After Patch Tuesday
Deployment History
24
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Calculate Time to Deploy
25
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Monitor for Compliance
Mandatory Baseline
26
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Continuous Improvement
•Checks and Balances» Review the Effectiveness of Patch Tuesday Remediations
•Metrics Improvement» Modify system settings, distribution parameters and so forth to further optimize
the system for next month’s updates» WAN optimization, polling frequency and minimizing the patches being detected
can all help further optimize performance» Look for computers that did not receive updates at all or those that took
unusually long to receive updates
27
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Q & A
More Information
• Free Vulnerability Scanner Tool» Discover all OS and application vulnerabilities
on your network http://www.lumension.com/Resources/Security-Tools/Vulnerability-Scanner.aspx
• Lumension® Patch and Remediation» Online Demo Video:
http://www.lumension.com/vulnerability-management/patch-management-software/demo.aspx
» Free Trial (virtual or download):http://www.lumension.com/vulnerability-management/patch-management-software/free-trial.aspx
• Get a Quote (and more)http://www.lumension.com/vulnerability-management/patch-management-software/buy-now.aspx#6
29
Global Headquarters8660 East Hartford Drive
Suite 300
Scottsdale, AZ 85255
1.888.725.7828
http://blog.lumension.com
