Vulnerability Remediation
Remediating vulnerabilities by deploying patches is a crucial part of maintaining a secure infrastructure. Using the patch management feature of Endpoint Central, you can remediate vulnerabilities manually or through automated patch deployment.
Overview
Patches are released by vendors to fix security flaws, bugs, or performance issues in software and systems. Neglecting to address vulnerabilities can expose an organization to significant risks. When vulnerabilities are left unpatched, attackers can exploit them to gain unauthorized access to critical systems, leading to data breaches, theft, or corruption. Hence, vulnerability remediation is essential for ensuring a secure and resilient infrastructure.
Vulnerability Remediation through Manual Deployment of Patches
To remediate vulnerabilities through manual deployment of patches:
- From the Software Vulnerabilities or Zero-day Vulnerabilities section, select the required vulnerabilities for which a patch is available and click Install/Publish Patches.
- From the Detected CVEs section, select the required vulnerabilities and click Fix CVEs.
You will be redirected to the Install/Uninstall Patch window, where the required missing patches to address the selected vulnerabilities will be listed. Configure the manual deployment settings to install these patches. To learn more about configuring manual deployment settings, refer to this page.
Automated Vulnerability Remediation
As enterprises grow and their IT environments become more complex, manually applying patches across many servers, workstations, and devices becomes increasingly difficult. Automated patch deployment allows you to scale patching efforts, applying updates to thousands of devices simultaneously.
Once you configure automated patch deployment, if the required patch is available and is approved, vulnerability remediation automatically occurs without requiring additional manual intervention — these approved patches will be deployed to the chosen targets automatically.
To learn more about configuring automated patch deployment tasks, refer to this page.