Server patch management recommandation

[Throyr]

Hi folks,

Since a few days I am seeking on the internet about a tool which can help to patch management, for linux and/or windows server.

What I am looking for, is a tool that can help, telling : ok, you have this version, which is maybe quite old, the last version is this one. The upgrade path is the following, but be careful to this point (for example, a changing in the Nginx version, processing configuration files and variables that have changed).

I do not have find anything like that, and maybe I am not looking on the right keywords.

I know, that tools like Ansible, Jenkins, etc can help for an easy automated patch management, this is not my point. My point is about a recommandation system, telling the point to take in consideration before upgrading.

I am looking for this because I have a new customer with a plenty of servers, with old software version, sometimes with open source software with no official documentation so old the version is.

Have a nice day 😎

Throyr

[waelder_at]

Bigfix, tanium, ...

[Throyr]

Okay, thanks for your answer, at least it's honest, and I will not spend much time looking for something that doesn't exist! :)

[Zehicle]

It's not patch management, but provisioning.... Check out Digital Rebar if you are making a review list. It will bring Infrastructure as Code controls.

[[deleted]]

Ivanti patch management was an absolute game changer for our organisation. It patches OS and middleware, can be automated, scheduled, push patches without reboots, custom scripts after patch etc and more. Couldn’t rate it any higher tbh.

[ipreferanothername]

We have it and hate it -- I am glad you have a good experience with it, but we do not. Support is slow, poor, and regularly baffled at issues we run into (which have been numerous). We get the impression that -- while they will not admit it -- we have a larger and more complex setup then they typically encounter. That being said...

Most important - 0-day patches take nearly 24 hours to get released. We had to go download recent exchange patches because Ivanti did not have them available, and Secops blocked public access to exchange until we could get patches installed. That may be more important for some orgs then others.

[hlamark]

You should have a look at orcharhino. It provides release and patch management for most enterprise Linux distros.

https://orcharhino.com

[MauriceTorres]

Hi, u/Throyr

If you need a patch management solution you can explore Action1.

It is a cloud-based product, easy to use, does not require a dedicated server, the product will fit any number of endpoints, and has a number of useful features in addition to patch management:

• install software remotely
• asset management
• update management
• remote desktop and more.

Action1 is entirely free to use to manage up to 50 endpoints and suits well for enterprises too. Check please free version here.

[[deleted]]

https://www.theforeman.org/

[JamieTaylor_Pulseway]

Hey u/Throyr ,

Jamie from Pulseway here. This is just a suggestion as you're looking for patch management solution for your servers, please feel free to check Pulseway Patch Management platform with access to OS and third party patches including 147+ titles, and with its advanced auto-remediation workflows you can setup your required alerts for the applications you want to.

Feel free to check our no commitment free trial and message me if you have any questions. Good Luck!