Endpoint management shows all the endpoints in your environment. You can see what's their patching status when they were last rebooted and more. Moreover, you can select servers in order to either create a new vulnerability plan or suspend servers from receiving patch management for a period of time.
Go to Endpoints > Management from the left menu.
Management
The Management library contains an overall view of the endpoints.
Filters
You can filter the Endpoints using the following filters
- Search - Search endpoints by the Endpoint name
- Remediation Plan - Relevant endpoint for the chosen Remediation Plan ID. Note - This will change the values of "Patching Status" and "Endpoint Compliance" accordingly.
- Operating System
- Patch
- Patch Status
- Exemption - Check Endpoint Exemptions and Warnings for more information.
- More Filters:
- Vulnerability
- Tags
- Smart Group
Management Information and Actions
- When hovering over the "Patching Status" bar you will see how many patches were installed/Not Installed on each endpoint.
- If an endpoint has multiple exemptions, all of them can be shown by hovering over the Exemption cell
- You can create a Nexpose report by clicking on the Download Vulnerabilities Report button on the right
Endpoint Actions
By selecting the endpoint you can take the following actions using the "ACTIONS" button:
Suspend Patching
Set Suspensions
Users can suspend endpoints for a certain amount of time, based on dates or on Maintenance schedules.
- Select the Management tab located under the Servers menu
- Select the endpoints you want to suspend
- Click on Select Action > Set Suspensions
- A popup will appear enabling you to either Set suspension
- Under "Select suspension type" you can suspend the endpoint between certain dates or skip coming maintenance schedules.
Pending Reboot Suspension
If a reboot task is executed on the endpoint (as part of a single execution or in a Workflow sequence), JetPatch will suspend the endpoint for 1 day with the "Pending Reboot Suspension" exemption.
The new exemption will be removed if/when:
- Machine is rebooted
- User removes suspension
- 1 day passed since the “Pending Reboot Suspension” was created.
Note - if JetPatch executes the "Interactive Reboot" task and it is marked for make a reboot only if it's needed, and no need to perform a reboot on the endpoint, the "Reboot Pending Suspension" won't appear.
More information can be found in Tasks, Interactive Reboot, and Endpoint Exemptions and Warnings (Run Task section)
Remove a Suspension
Users can remove any suspension by:
- Select the Management tab located under the Servers menu
- Select the endpoints you want to suspend
- Click on Select Action > Set Suspensions
- A popup will appear, choose Remove Suspension
- Click on Save
Create a Remediation Plan Based On
More information can be found in Create Remediation Plan based on Vulnerability Scanners
Run Task
More information can be found in Tasks (Run Task section)
Endpoint Reports
Endpoint reports can be downloaded by clicking on the bottom left "Download Reports" ()icon.
The available reports are:
- Endpoints Management Report (CSV) - downloading extended information on the filtered endpoints.
- Endpoints with Missing Patches - List of all endpoints with the missing patches information
- Endpoints with Missing Security Patches - List of all endpoints with the missing security patches information, grouped by security category.
Comments
0 comments
Please sign in to leave a comment.