Microsoft System Center Configuration Manager (SCCM) is great for patching. It’s the most effective way for you to manage devices across your network, enforce your policies, and apply updates in a swift, automated fashion.
So it’s only natural to think that, with Microsoft SCCM up and running, you’re covered against application vulnerabilities.
But that’s an assumption that leaves your organisation exposed.
According to the Flexera Vulnerability Review 2015, 15,435 vulnerabilities were discovered in 2014. But these weren’t all in Microsoft products – they were spread across 3,870 products from 500 different vendors.
In reality, 77% of the vulnerabilities uncovered in the 50 most popular applications on private PCs in 2014 affected non-Microsoft applications. So patching first party software with SCCM only solves part of the problem.
Of course, you’ve already spent time and money implementing SCCM. It’s a familiar tool that you use regularly, but it took time to learn its nuances and start using it efficiently.
Fortunately, you can leverage this existing investment and expertise to secure third-party applications right alongside Microsoft ones.
One of the hardest – and most time-consuming – parts of effective vulnerability management is achieving full visibility. Until you know the third-party applications that are used across your entire infrastructure, you can’t hope to check for vulnerabilities and patch them where appropriate.
SCCM includes a robust software inventory feature that can be used to scan for third-party applications. And when this is paired with an SCCM-integrated patch management platform, the results can form the foundation of your entire vulnerability work flow.
Flexera Corporate Software Inspector takes data from SCCM’s software inventory and assesses the security patch status of more than 20,000 programs, reconciling SCCM’s knowledge of your network with Flexera’s insight into third-party software, vulnerabilities, and patches.
While Microsoft attempt to rebrand it as ‘Update Tuesday’, Patch Tuesday is a long-standing part of the IT administrator’s routine. It’s when Microsoft release new patches – or updates – for its software, fixing known security vulnerabilities.
Thanks to its SCCM and Windows Server Update Services (WSUS) integration, Corporate Software Inspector can make third-party patching a seamless part of this established routine.
So, using a familiar interface that doesn’t slow you down, you can:
All in record time – and in a single downtime window.