Overview
Endpoint Management shows all the endpoints in your environment.
You can see their patching status, when they were last rebooted, and more.
Additionally, you can select servers to either create a new vulnerability plan or suspend servers from receiving patch management for a period of time.
Navigate to Endpoints → Management from the left menu.
| Tip: It is highly recommended to pause and try out each feature yourself as you follow along with this guide. |
Filters
You can filter the Endpoints using the following filters:
- Search – Search endpoints by endpoint name.
- Remediation Plan – Show relevant endpoints for the chosen Remediation Plan ID. Note: this will change the values of “Patching Status” and “Endpoint Compliance” accordingly.
- Operating System
- Patch
- Patch Status
- Exemption – Check Endpoint Exemptions and Warnings for more information.
-
More Filters:
- Vulnerability
- Tags
- Smart Group
Management Information and Actions
- When hovering over the Patching Status bar, you will see how many patches were installed / not installed on each endpoint.
- If an endpoint has multiple exemptions, all of them can be shown by hovering over the Exemption cell.
- You can create a Nexpose report by clicking on the Download Vulnerabilities Report button on the right.
Manage Tags and Tagging Endpoints
Learn how to efficiently organize and filter endpoints using customizable tags for better project alignment and operational efficiency.
For a detailed step-by-step guide, please visit Manage Tags and Tagging Endpoints.
Endpoint Actions
By selecting the endpoint, you can take the following actions using the "ACTIONS" button:
Assignments
- Assign to Maintenance Schedule - More information can be found at Maintenance Schedule - Endpoint Assignment
- Assign to Smart Group - More information can be found at Smart Group - Endpoint Assignment
- Create a Remediation Plan Based On - More information can be found in Create a Remediation Plan based on Vulnerability Scanners
- Run Task - More information can be found in Tasks (Run Task section)
Suspend Patching (freeze endpoints temporarily)
Suspending endpoints can be useful for a multitude of reasons — for example, to prevent patching during a critical business period, while waiting for a maintenance window, or to exclude specific machines from an ongoing plan.
| Important: Once suspended, endpoints will be restricted from all activities — even if they are included in ongoing Remediation Plans. |
Suspension Types
JetPatch supports two different methods of suspension:
| Suspension Type | Description |
| Between Dates | Suspends the endpoint for a fixed period between two specified dates. The endpoint will not perform any patching activities during this time. The suspension is automatically removed when the end date is reached. |
| Skip Maintenance Schedules | Skips the designated number of upcoming maintenance schedules. The suspension is automatically removed after the specified number of maintenance periods have passed. |
Set a Suspension
- Navigate to Endpoints → Management.
- Select the endpoint or endpoints you would like to suspend.
- Click Select Action → Set Suspensions.
- A pop-up will appear. Under “Select Suspension Type”, choose one of the following:
- Between Dates – Specify the start and end dates for the suspension.
- Skip Maintenance Schedules – Specify the number of upcoming maintenance schedules to skip.
- Click Save.
| Tip: Pause here and try setting a suspension on one of your endpoints before continuing. |
Remove a Suspension
If you decide that an endpoint no longer needs to be suspended, you can remove the suspension at any time:
- Navigate to Endpoints → Management.
- Select the endpoint or endpoints you want to unsuspend.
- Click Select Action → Set Suspensions.
- In the pop-up, choose Remove Suspension.
- Click Save.
Pending Reboot Suspension
If a reboot task is executed on an endpoint (as part of a single execution or Workflow sequence), JetPatch will automatically suspend the endpoint for 3 days with a “Pending Reboot Suspension” exemption.
This suspension will be automatically removed if/when:
- The machine is rebooted
- User removes suspension
- 3 days have passed since the “Pending Reboot Suspension” was created.
| Note: If JetPatch executes the “Interactive Reboot” task and it is marked to reboot only if needed, and there is no need to reboot the endpoint, the “Pending Reboot Suspension” will not appear. |
More information can be found in Tasks, Interactive Reboot, and Endpoint Exemptions and Warnings (Run Task section)
Endpoint Reports
Endpoint reports can be downloaded by clicking on the Download Reports icon at the bottom left of the table.
The available reports are:
- Endpoints Management Report (CSV) - downloading extended information on the filtered endpoints.
- Endpoints with Missing Patches - List of all endpoints with the missing patches information (more information on this report)
- Endpoints with Missing Security Patches - List of all endpoints with the missing security patches information, grouped by security category (more information on this report)
- Endpoint Management Report segment by Operating Systems - Overview of endpoint compliance across various operating systems
Comments
0 comments
Please sign in to leave a comment.