Overview
The Remediation Plans board is the place to see all Remediation Plans in JetPatch. Remediation Plans can move back and forth depending on their current status.
Remediation Plan Board Columns
New
The “New” column represents non-active Remediation Plans that were rejected (from the ITSM) or never activated.
Possible statuses:
| Status | Description |
| Missing Configuration | Newly created Remediation Plans that are not fully configured. |
| Activation Required | Newly fully configured Remediation Plans that were never activated. |
| Rejected by ITSM | Remediation Plans rejected via ITSM. |
| Note: Non-active Remediation Plans that were active in the past and canceled will appear in the “Completed” column. |
Pending
Remediation Plans will be placed in “Pending” if the plan is waiting for something to happen before it can execute successfully.
Possible statuses:
| Status | Description |
| Pending ITSM Approval | JetPatch is checking if ITSM is configured for approving the Remediation Plan. If there is no ITSM configured, this status should appear for a few seconds only. |
| Sent for Approval | A Change Request was opened and JetPatch is waiting for an approved/rejected status. (ITSM integration only) |
| Pending Execution | JetPatch is pending execution of the Remediation Plan. This occurs if there are non-compliant endpoints with any exemption status (preventing execution), or if the configured Maintenance Window is not currently active. For more information, click on the “Compliance Report” action and check the “Devices Status” section. |
In Progress
JetPatch will move the Remediation Plan to “In Progress” if there are actions to perform at the moment: patch execution (valid endpoints in the maintenance window) or patch setup (WSUS operations needed).
Possible statuses:
| Status | Description |
| Updating WSUS | JetPatch is currently updating the WSUS with the requested information from the Remediation Plan. |
| Failed to Update WSUS | JetPatch encountered failures while trying to update WSUS and will try again in a few moments. Possible reasons: connectivity issue with the WSUS server, or JetPatch is trying to update a Computer Group that no longer exists. |
| Executing | JetPatch is currently executing the patching workflow on one or more endpoints, based on the patch information from the specific Remediation Plan. |
| Execution Paused | JetPatch can execute operations on needed endpoints, but there is another Remediation Plan currently executing actions on the same endpoints. |
| Cancellation | The user canceled the Remediation Plan and chose to wait until the currently executing workflows are finished. JetPatch won’t start a new workflow execution and will move the ticket automatically when possible. |
Completed
When there are no future actions to make (in the scope of a specific Remediation Plan), the ticket will move to “Completed”.
Possible statuses:
| Status | Description |
| Done | The patching process is finished for all applicable endpoints — all patches were either installed/removed or attempted and failed. |
| Canceled by X | A user canceled the Remediation Plan, it was canceled by policy, or it was canceled by ITSM. |
| Note: If a completed Remediation Plan with “Done” status is no longer 100% compliant (e.g., a new endpoint was added to the relevant group), the plan will move back to “In Progress” during the assigned Maintenance Window. After the remediation action is completed, it will return to “Completed”. To avoid this scenario, cancel the plan. |
Archived
The “Archived” column is an optional column to hide Remediation Plans that are in “Completed” status. A Remediation Plan can be archived by clicking on the “Archive” action on a completed plan.
- You can expand/collapse the column by pressing the “Archived” column header.
-
If a Remediation Plan is archived, JetPatch will automatically cancel it.
Remediation Plan ticket and actions
When looking at a Remediation Plan ticket, you can find the following information:
-
Creation entity - Remediation Plan creation can be triggered in two ways:
- User trigger - by creating the remediation plan after choosing patches from the patch catalog or creating a remediation plan based on the vulnerability scan (located in the Management table). Will be marked with an icon.
- The created user can be seen when hovering over the person icon.
- Automatic trigger - following the Automatic Remediation Plans rule, JetPatch will create a new Remediation plan if necessary. Will be marked with the Number sign (#). For more information, go to Automatic Remediation Plans
- Remediation Plan ID - the ID JetPatch is generated for this remediation plan.
- Create time - the date of creating the remediation plan. The exact time can be found in a remediation plan compliance report. Hovering the date will show you the number of days passed.
- Plan Name - the plan name. It can be redefined if the remediation plan is in the "New" column. Description can be seen when hovering over the plan name.
-
Plan special signs - Representing special plans.
- Plan with Critical patches - will be shown with a red circle and "C".
- Emergency plan - will be shown with a red circle and "E".
- Sequence plan - will be shown with a purple circle and "S"
-
Endpoints Compliance Status – The status of the applicable endpoints:
- Compliant – Green.
- In Progress – Yellow.
- Non-Compliant – Red.
-
Actions status
- Applied successfully - green
- Not applied yet - gray
- Failed - red
Actions
The following actions are available on Remediation Plan tickets, depending on their status:
| Action | Description |
| Activate | For plans with “Activation Required” status. Activates the Remediation Plan. |
| Edit | For plans with “Activation Required” status. Allows editing the Remediation Plan information. |
| Delete (New) | For plans with “Activation Required” status. Deletes the plan from the board. |
| Predict |
For plans with future actions. Redirects the user to the Predictive Patching page with the relevant plan ID. For more information, see Predictive Patching. |
| Duplicate | Duplicates the Remediation Plan. The new plan appears in the “New” column. |
| Archive | For plans with “Done” status. Moves the ticket to the “Archived” column when there are no actions to do at the moment. |
| Delete (Canceled) |
Only available for canceled Remediation Plans. Removes all entities from the system (Dashboard, RP Board, and related filtering options). Learn more about how to automatically delete a Remediation Plan. |
| Compliance Report | For active or canceled plans. Shows detailed compliance information about the Remediation Plan. |
| View | For active plans. Shows the Remediation Plan details as defined. |
| Cancel on Completion | For plans currently executing operations. JetPatch will cancel the plan after the current in-progress workflow is finished. |
| Cancel / Cancel Immediately | For active plans. JetPatch will cancel the plan immediately without considering the current running activity. No new activities will be executed. Note: Workflows won’t be fully executed. |
| Note: In either canceling method, you can cancel and move the plan to the ‘Completed’ tab, or cancel and archive. |
Board-Level Actions
Users can also perform the following actions on the Remediation Plan board:
- Bulk actions to manage RP Tickets.
- Create Blank Remediation Plan.
- Create New Sequence Patching.
- Download Reports.
Download Reports
Reports can be downloaded by clicking the ACTION button and choosing Download Reports.
The available reports are:
- Remediation Plans Summaries (CSV) – Downloads extended information on the filtered plans (e.g., from date X to date Y). This report includes a list of patched endpoints (compliant endpoints).
Notes
JetPatch audits the following Remediation Plan activities in the logs:
- When a new Remediation Plan is created from the following channels: UI, API, Vulnerability Parser, or by duplicating a Remediation Plan.
- When a Remediation Plan execution is paused.
- When the user archives or unarchives a Remediation Plan.
Comments
0 comments
Please sign in to leave a comment.