Symantec ALTIRIS INVENTORY 7.0 SP2 - FOR NETWORK DEVICES... User manual

Altiris™Patch Management
Solution for Windows from
Symantec User Guide
Version 7.0 SP2

Altiris™Patch Management Solution for Windows from
Symantec User Guide
The software described in this book is furnished under a license agreement and may be used
only in accordance with the terms of the agreement.
Legal Notice
Copyright © 2010 Symantec Corporation. All rights reserved.
Symantec, the Symantec Logo, Altiris, and any Altiris or Symantec trademarks used in the
product are trademarks or registered trademarks of Symantec Corporation or its affiliates
in the U.S. and other countries. Other names may be trademarks of their respective owners.
The product described in this document is distributed under licenses restricting its use,
copying, distribution, and decompilation/reverse engineering. No part of this document
may be reproduced in any form by any means without prior written authorization of
Symantec Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS,
REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO
BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL
OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING,
PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED
IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, "Rights in
Commercial Computer Software or Commercial Computer Software Documentation", as
applicable, and any successor regulations. Any use, modification, reproduction release,
performance, display or disclosure of the Licensed Software and Documentation by the U.S.
Government shall be solely in accordance with the terms of this Agreement.
Symantec Corporation
350 Ellis Street
Mountain View, CA 94043
http://www.symantec.com

Technical Support
Symantec Technical Support maintains support centers globally. Technical
Support’s primary role is to respond to specific queries about product features
and functionality. The Technical Support group also creates content for our online
Knowledge Base. The Technical Support group works collaboratively with the
other functional areas within Symantec to answer your questions in a timely
fashion. For example, the Technical Support group works with Product Engineering
and Symantec Security Response to provide alerting services and virus definition
updates.
Symantec’s support offerings include the following:
■A range of support options that give you the flexibility to select the right
amount of service for any size organization
■Telephone and/or web-based support that provides rapid response and
up-to-the-minute information
■Upgrade assurance that delivers software upgrades
■Global support purchased on a regional business hours or 24 hours a day, 7
days a week basis
■Premium service offerings that include Account Management Services
For information about Symantec’s support offerings, you can visit our web site
at the following URL:
www.symantec.com/business/support/
All support services will be delivered in accordance with your support agreement
and the then-current enterprise technical support policy.
Contacting Technical Support
Customers with a current support agreement may access Technical Support
information at the following URL:
www.symantec.com/business/support/
Before contacting Technical Support, make sure you have satisfied the system
requirements that are listed in your product documentation. Also, you should be
at the computer on which the problem occurred, in case it is necessary to replicate
the problem.
When you contact Technical Support, please have the following information
available:
■Product release level

■Hardware information
■Available memory, disk space, and NIC information
■Operating system
■Version and patch level
■Network topology
■Router, gateway, and IP address information
■Problem description:
■Error messages and log files
■Troubleshooting that was performed before contacting Symantec
■Recent software configuration changes and network changes
Licensing and registration
If your Symantec product requires registration or a license key, access our technical
support web page at the following URL:
www.symantec.com/business/support/
Customer service
Customer service information is available at the following URL:
www.symantec.com/business/support/
Customer Service is available to assist with non-technical questions, such as the
following types of issues:
■Questions regarding product licensing or serialization
■Product registration updates, such as address or name changes
■General product information (features, language availability, local dealers)
■Latest information about product updates and upgrades
■Information about upgrade assurance and support contracts
■Information about the Symantec Buying Programs
■Advice about Symantec's technical support options
■Nontechnical presales questions
■Issues that are related to CD-ROMs or manuals

Support agreement resources
If you want to contact Symantec regarding an existing support agreement, please
contact the support agreement administration team for your region as follows:
[email protected]Asia-Pacific and Japan
[email protected]Europe, Middle-East, and Africa
[email protected]North America and Latin America
Additional enterprise services
Symantec offers a comprehensive set of services that allow you to maximize your
investment in Symantec products and to develop your knowledge, expertise, and
global insight, which enable you to manage your business risks proactively.
Enterprise services that are available include the following:
Managed Services remove the burden of managing and monitoring security
devices and events, ensuring rapid response to real threats.
Managed Services
Symantec Consulting Services provide on-site technical expertise from
Symantec and its trusted partners. Symantec Consulting Services offer a variety
of prepackaged and customizable options that include assessment, design,
implementation, monitoring, and management capabilities. Each is focused on
establishing and maintaining the integrity and availability of your IT resources.
Consulting Services
Education Services provide a full array of technical training, security education,
security certification, and awareness communication programs.
Education Services
To access more information about enterprise services, please visit our web site
at the following URL:
www.symantec.com/business/services/
Select your country or language from the site index.

Technical Support ............................................................................................... 3
Chapter 1 Introducing Patch Management Solution for
Windows .......................................................................... 11
About Patch Management Solution for Windows ............................... 11
How Patch Management Solution for Windows works ......................... 12
Where to get more information ....................................................... 13
Chapter 2 Implementing Patch Management Solution for
Windows .......................................................................... 15
Implementing Patch Management Solution for Windows ..................... 15
Chapter 3 Installing Patch Management Solution for
Windows .......................................................................... 17
Prerequisites for Patch Management Solution for Windows ................. 17
Installing Patch Management Solution for Windows ........................... 18
Upgrading Patch Management Solution for Windows ......................... 18
Migrating from Patch Management Solution for Windows 6.2 to
7.x ....................................................................................... 18
Uninstalling Patch Management Solution for Windows ....................... 21
Licensing .................................................................................... 21
Chapter 4 Installing the Software Update Plug-in .......................... 23
About the Software Update Plug-in ................................................. 23
Installing the Software Update Plug-in ............................................. 24
Upgrading the Software Update Plug-in ........................................... 24
Uninstalling the Software Update Plug-in ......................................... 25
About the Software Update Plug-in user interface .............................. 25
Chapter 5 Configuring Patch Management Solution for
Windows .......................................................................... 29
Configuring patch management Core Services settings ....................... 29
Customizing severity levels ............................................................ 30
Contents

Configuring vendor settings ........................................................... 31
Configuring software updates installation settings ............................ 31
Configuring inventory and vulnerabilities checking interval ................ 32
Core Services page ....................................................................... 33
Patch management vendor settings page .......................................... 33
Default Software Update Plug-in Policy page ..................................... 35
Chapter 6 Configuring Patch Management server tasks ............... 39
About Patch Management server tasks ............................................. 39
Downloading software updates catalog ............................................ 40
Downloading QChain .................................................................... 41
Checking Software Update packages integrity .................................. 42
Patch Management Import page ..................................................... 42
Download QChain page ................................................................. 43
Chapter 7 Staging and distributing software bulletins and
software updates ........................................................... 45
About software updates and software bulletins .................................. 45
About staging and distributing software bulletins .............................. 46
Staging software bulletins ............................................................. 47
Distributing software updates ........................................................ 48
Viewing the software update delivery summary report ....................... 49
About Software Update policies and maintenance windows ................. 49
Patch Remediation Center page ...................................................... 49
Software Update Policy Wizard pages .............................................. 51
Chapter 8 Using Patch Management reports ................................... 53
About Patch Management Solution for Windows reports ..................... 53
About compliance reports .............................................................. 54
About diagnostic reports ............................................................... 55
About remediation status reports .................................................... 55
About software bulletin reports ..................................................... 55
About the Patch Management home page ......................................... 55
Viewing Patch Management reports ................................................ 56
Chapter 9 Replicating Patch Management data in
hierarchy ......................................................................... 59
About replicating Patch Management data ........................................ 59
About Patch Management Language Alert rule .................................. 60
Replicating Patch Management language alerts ................................. 60
Contents8

About Patch Management software update catalog replication ............. 61
Replicating Patch Management import data ...................................... 61
About Software Update policy replication ......................................... 62
Replicating Software Update policies ............................................... 62
Appendix A Technical reference ............................................................ 65
About hierarchy and data replication direction .................................. 65
About Patch Management security roles ........................................... 66
Index .................................................................................................................... 69
9Contents

Contents10