Patch Management

The Patching service provides a comprehensive solution for managing the patching of the operating systems running on the infrastructure in your cloud environment. The Patching service is a critical component in the overall Security Posture of your cloud environment.

We provide a fully customisable monthly Patching Schedule, configured to suit the needs of your business operations, that controls the deployment of patches to your resources in Patch Waves. Patch Waves are groups of resources that are planned to be patched together in a specified time period.

In the Patching Schedule you can define up to three (3) Patch Waves, that include the:

• Week of the month,

• Day of the week,

• Start time that each Patch Wave should run, and

• Any change freeze windows that should be observed.

We store the configuration of your Patching Schedule in the Operations Definition. You can view the Operations Definition, in the dedicated Confluence space that we provide to you during onboarding. If required, you can modify the Patching Schedule by raising a Service Request. For more information, refer to Getting Support.

The Patching service automatically installs agents to your resources based on the values of tags set in your cloud environment. A Tagging Policy for Patch Management provides you with comprehensive coverage that you can modify to suit your business requirements, for example, you can modify the values of the tags assigned to a device, to change the Patch Wave assigned to it.

The service supports a comprehensive suite of operating systems, including variants of Windows and Linux. For more information, refer to the sections Supported Operating Systems and Unsupported Operating Systems in the User Guide.

Related Information

For more information, refer to:

• Managing Patching

• Tagging Resources

• Tagging Resources for Patching