Quickly Identify and Patch Software Security Vulnerabilities with Lumension Patch and Remediation

Patch Management Business Issues and Challenges

Today’s IT departments are busy, spending the majority of their time fixing virus-infected user desktops and reactively fighting malware attacks, rather than proactively securing the organization’s network and preventing security vulnerabilities from being exploited.

The proliferation of Web 2.0 and social networking created new avenues to introduce malware into the workplace. In fact, Google has found well over 3 million malware-infected websites on the public internet. With software companies shortening software and OS lifecycle and releasing software prematurely, the number of bugs and design flaws is growing exponentially – on average, 19 new vulnerabilities are released per day¹. Exploits are getting more sophisticated - with the Conficker worm as a recent example of an exploit that has evolved over many months and continues to wreak havoc on networks that have not been updated with the latest Microsoft patches.

IT administrators can’t possibly stay updated on and implement the flood of software vulnerability patches consistently released by all the software vendors they use. A solution is needed that allows effective vulnerability patch management that can be automated for heterogeneous environments and alerts busy IT administrators to issues proactively so they can address them immediately.

Lumension Patch and Remediation provides rapid, accurate and secure patch management, allowing you to proactively manage threats in the most complex environments by automating the collection, analysis and delivery of patches throughout your enterprise. As an essential part of Lumension Vulnerability Management™, Lumension Patch and Remediation significantly decreases the costs involved in securing your organization from worms, Trojans, viruses and other malicious threats and allows you to:

• Inventory and manage both physical and virtual machines.
• Reduce corporate risk and optimize IT operations through the timely, proactive elimination of operating system and application vulnerabilities across all systems and servers, including Windows, Unix, Linux and Apple Mac OS.
• Decrease IT costs and improve productivity with a highly automated, subscription-based patch management solution.
• Seamlessly manage and report on Lumension and third party licensed content and prerequisite patches – all from one consolidated console.
• Manage system desktop configuration tasks, such as automating disk defragmentation and disk cleanup tasks, and enforcing policies for account, device control, domain, network, and system policy security settings.
• Improve your security posture through integration with Network Access Control (NAC) solutions to remediate ‘non-compliant’ machines to a compliant state before gaining access to the network
• Demonstrate compliance with security policies and government regulations through continuous patch monitoring and comprehensive reporting.

• A comprehensive agent-based scan proactively assesses application, operating system and operational vulnerabilities on corporate endpoints.
• Remediation policies are defined and patches are rapidly deployed using the intelligent patch deployment wizard. Automated deployments are scheduled based upon patch criticalities and defined security policies and can be deployed individually or in phases.
• Lumension’s patented Digital Fingerprinting™ Technology creates a patch fingerprint profile that includes all software, hardware, drivers, and existing and missing patches for each machine. Patch drift is eliminated by ensuring that endpoints get patched and stay patched enabling you to show validation of policy compliance and enforcement.
• A graphical “dash board” and over 20 standard reports document vulnerabilities, patch deployments, patch status, trends and inventory, assisting you to address operational, management and compliance reporting.

Visit the Lumension Patch and Remediation™ website!