Patch Deployment Monthly or Quaterly

Usage and Config Patch
1

Hi Team,

Please suggest what is best for patch deployment-

  1. Monthly or Quarterly.
  2. How to choose which patch is require in our environment.
  3. How to check which machines doesn’t have up to date patches installed.

Thanks & Regards
Wakkas Ahmad
Mob No: +91-9580326153

2

Deciding what is best for your environment is something that can’t be decided in a forum like this.

Also, these are patching policy decisions and nothing to do with Bigfix, the answers should be the same whatever deployment mechanism you use.

2 Likes
3

But what is the best practice for patch deployment, what is the suggestion from Bigfix team on this.

4
  1. You did not specify which platform you’re patching.
  2. As trn points out, depends on your environment.

This isn’t something we, or even IBM, can tell you. You need to make an informed decision based on the information available from the vendor of the updates, not the tool you use to deploy said updates.

A quick google search returns several Microsoft pages detailing best practices for Microsoft updates. I’m sure the same is true for Red Hat, or CentOS, or IBM Linux, or whatever OS you’re planning on patching.

https://www.google.com/search?q=microsoft+security+updates+best+practices

1 Like
5

Mostly we are using Windows & MAC in our environment.

6

For windows we find that monthly is much more reliable.

For “hand-hold” systems we do quarterly.

7

@wakkas using the N-1 approach for patching windows machines is one of the better ways to do patching. N is the current month.

This helps in avoiding any vulnerabilities or bugs that are present in the current patches of the present month.