# Seamlessly deploy patches for the vulnerabilities detected by InsightVM (On-Prem)

The Endpoint Central and InsightVM (On-Prem) integration streamlines the process from vulnerability detection to remediation. This empowers IT administrators to effortlessly deploy patches from the Endpoint Central console for vulnerabilities detected by InsightVM (On-Prem). No more hassle of switching between multiple dashboards or manually correlating vulnerabilities with their patches. The Endpoint Central - InsightVM (On-Prem) integration simplifies these tasks and streamlines the entire process.

## Steps to integrate InsightVM (On-Prem) with Endpoint Central

Video walkthrough:  
https://www.youtube-nocookie.com/embed/Q1kI9DURW1I?si=mDURSIIxW9nwWpiG

### Configure API Settings in Endpoint Central

- Navigate to **Admin > Integrations > Threat scanner settings** and click on **InisghtVM (On-prem)**.

![ec-insightvm-op-1](https://www.manageengine.com/products/desktop-central/images/ec-insightvm-op-1.png)

- Enter the login credentials of InsightVM - **base URL, Username** and **Password**. User with **Basic permissions** is sufficient to integrate. Ensure the following permissions are enabled:  
  1. **View Site Asset Data**  
  2. **Create Reports**  
  3. **View Vulnerability Investigations**

![InsightVM (On-Prem) Integration Settings](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/patch-management/insightvm-settings.png)

- If a proxy is configured to block access to the local InsightVM server, you can enable the **Skip Proxy** option, but only if the InsightVM hosted server URL is not globally whitelisted. Enabling this option overrides the proxy settings, allowing direct connection to the InsightVM server.
- Configure the frequency at which you want the data sync to happen.
- Click on **Save** to enable the Integration.

## Workflow

- After enabling the Integration, Endpoint Central will import the vulnerability details and the affected machine details from Insight VM (on-prem).
- Identify the corresponding patch/fix for the respective vulnerabilities and remediate those vulnerabilities by installing the appropriate patch.
- Threats detected by Insight VM (On-prem), with the patch availability, will be listed under **Insight VM (On-prem) Threats**. Users can also deploy patches for vulnerabilities from this view.

![ec-insightvm-op-4](https://www.manageengine.com/products/desktop-central/images/ec-insightvm-op-4.png)

If you have any further questions, please refer to our [Frequently Asked Questions](https://www.manageengine.com/products/desktop-central/help/patch_management/patch-faq.html#intfaq) section for more information.