Vulnerability Remediation
Remediating vulnerabilities by deploying patches is a crucial part of maintaining a secure infrastructure. Using the patch management feature of Endpoint Central, you can remediate vulnerabilities manually or through automated patch deployment.
Overview
Patches are released by vendors to fix security flaws, bugs, or performance issues in software and systems. Neglecting to address vulnerabilities can expose an organization to significant risks. When vulnerabilities are left unpatched, attackers can exploit them to gain unauthorized access to critical systems, leading to data breaches, theft, or corruption. Hence, vulnerability remediation is essential for ensuring a secure and resilient infrastructure.
Vulnerability Remediation through Manual Deployment of Patches
To find the patches associated with a specific CVE, navigate to Threats & Patches → Patches → Supported Patches and apply the CVE ID filter.
To remediate vulnerabilities through manual deployment of patches:
- From the Software Vulnerabilities or Zero-day Vulnerabilities section, select the required vulnerabilities for which a patch is available and click Install/Publish Patches.
- From the Detected CVEs section, select the required vulnerabilities and click Fix CVEs.
When a vulnerability affects multiple operating systems, deploy the applicable patches separately for each platform:
- Open Software Vulnerabilities and select the required vulnerability.
- Click the affected system count.
- Apply the Windows platform filter, select the applicable entries, and click Install Patch.
- Repeat the platform filtering and deployment separately for macOS and Linux, where applicable.
- Verify that every selected patch installs successfully.
You will be redirected to the Install/Uninstall Patch window, where the required missing patches to address the selected vulnerabilities will be listed. Configure the manual deployment settings to install these patches. To learn more about configuring manual deployment settings, refer to this page.
Automated Vulnerability Remediation
As enterprises grow and their IT environments become more complex, manually applying patches across many servers, workstations, and devices becomes increasingly difficult. Automated patch deployment allows you to scale patching efforts, applying updates to thousands of devices simultaneously.
Once you configure automated patch deployment, if the required patch is available and is approved, vulnerability remediation automatically occurs without requiring additional manual intervention — these approved patches will be deployed to the chosen targets automatically.
To learn more about configuring automated patch deployment tasks, refer to this page.