The Patches Compliance Dashboard provides an overview of your environment.

Patches Compliance Dashboard Components

All Operating Systems Summary

Total Compliance:

% Total Compliance: The percentage (rounded up) of endpoints that completed all required actions based on the associated remediation plans.

Note - Endpoints that were not part of any remediation plan in the past are considered compliant, therefore they are not affecting the Total Compliance calculation.

Calculation - (total endpoints - pending - failed - exempted) / total endpoints

Example (from the above image) - (189 - 0 - 2 - 63) / 189 = 65.6%

Applicable endpoints: Represent the endpoints that JetPatch can theoretically patch. There are two cases of non-applicable endpoints:

1. Endpoints with not-supported OS or not exist in WSUS (Windows only) = "Patching Inapplicable" exemption.

2. Endpoints that were discovered by the Vulnerability Scanner integration = "Unknown Endpoint" exemption.

Calculation - Best way to calculate is to go to Endpoints > Management, then filter on all Exemptions minus Unknown (let's call that number one).  Then, filter only on patching inapplicable (let's call that number two).  Then do one minus two to get your applicable endpoints number.

Example (from the above image) - 189

Compliant Endpoints: Endpoints without future remediation actions

Calculation - (total endpoints - in progress - pending - failed - exempted)

Example (from the above image) - (189 - 0 - 0 - 2 - 63) = 124

In progress endpoints: Endpoints that should run a remediation action now (and are not exempted).

Pending endpoints: Endpoints that should run a remediation action in a future time (the Maintenance Schedule is for a future time) and are not exempted.

Calculation - Go to Patches > Remediation Plans and go into

Example (from the above image) - 0

Failed endpoints: Endpoints that failed to execute a patch process (workflow) or patch action.

Calculation - Best way to calculate is to go to Endpoints > Management, then filter on Patch Status failed (known issue - it sometime does not calculate accurately.  Target fix 4.2)

Example (from the above image) - 2

Exempted endpoints: Endpoints that are blocked from being patched (now and at a future time). Exempted Endpoints can be compliant.

Calculation - Go to Endpoints > Management and filter with the following exemptions:

• Maintenance Window Required (when it is needed)
• Suspended By User
• Powered Off
• Power Suspended
• Power Unknown
• Untested Endpoint
• Invalid Credentials
• Unsupported PowerShell Execution Policy (from EP Readiness)
• Unsupported PowerShell Version (from EP Readiness)
• Advisories Not Exist (from EP Readiness)
• Packages Not Exist (from EP Readiness)
• Subscription Missing (from EP Readiness)
  

Example (from the above image) - 63

For more information about endpoint exemption, see Endpoint Exemptions and Warnings

Effective Compliance:

% Effective Compliance: The percentage (rounded up) of endpoints that completed all required actions based on the associated remediation plans with ignoring exempted endpoints. 

Note - Endpoints that were not part of any remediation plan in the past are considered compliant, therefore they are not affecting the Total Compliance calculation.

Calculation - (total endpoints - pending - failed) / total endpoints

Example (from the above image) - (189 - 0 - 2) / 189 = 98.9%

Applicable endpoints: Total patch applicable endpoints in your environment excluding exempted endpoints

Calculation - (total endpoints - exempted)

Example (from the above image) - (189 - 63) = 126

Compliant Endpoints: Endpoints without future remediation actions

Calculation - (total endpoints - in progress - pending - failed - exempted)

Example (from the above image) - (189 - 0 - 0 - 2 - 63) = 124

In progress endpoints, Pending endpoints, Failed endpoints: Same as in "Total Compliance" excluding exempted endpoints (as defined above)

Detailed Data By Operating System

Here you can see a breakdown of endpoint compliance by the operating system.

Total Endpoints: Total patch applicable endpoints in your environment (per OS)

Iמ Progress, Exempted, Pending, Failed, Compliance: Same as in "Effective Compliance" above (per OS)

Download Reports 

There are two optional reports you can download:

1. Compliance Summary: Provides the following data (detailed by the operating system):
   • Total Servers
   • Failed Servers
   • In Progress Servers
   • Pending Servers
   • Exempted Servers
   • Compliant Servers
2. SLA Summary: Provides the status of the remediation plan according to their SLA time.
   • Learn more on SLA Reports