You can use SCCM to deploy patches for all of those products mentioned - MS-OS/Office/etc., Flash, Adobe Reader, Java, etc. (Firefox, whatever). Look into using SCUP with SCCM for Adobe products. For some other products (Java), when you install them a MSI file and related CAB file(s) will be created, and you can copy those from a machine you installed to and then deploy them as a package in SCCM. You can also deploy regular EXE files/updates/installations using SCCM. Create third party product directories under the sccm_packages source directory, then copy your applicable EXE file there and set a distribution schedule. Depending on how you create the source directories and file names you may have to re-advertise to get the updates deployed to all applicable machines.
http://technet.microsoft.com/en-us/library/bb681010.aspx

If you have a heterogeneous environment then you may need to wait for SCCM 2012 to be able to deploy patches to Linux, Solaris, and a couple others (which it will reportedly support, although I can't say how well it will do).
Otherwise you could try something like Patchlink, although it might not work as well as Satellite for RH Linux nor as well as other methods for distributing Solaris updates. Also unless you're solely running MS-SQL as your DB backends you may need to patch other DB products using other tools. And of course you'll need to patch your network devices using whatever varied mechanisms they support. In short there is no totally unified solution, although in a pure MS shop you can use SCCM for most desktop and server software deployments, updates, and patches. And since you said you're already using SCCM you may as well get its full value by reading up and learning everything you actually can do with it.

-Vic

----- Original Message -----
From: "Mahmoud Kaddoura" <Mahmoud.Kaddoura (at) injazat (dot) com [email concealed]>
To: "security-basics (at) securityfocus (dot) com [email concealed]" <security-basics (at) securityfocus (dot) com [email concealed]>
Sent: Monday, June 4, 2012 1:07:19 PM
Subject: Patch Management

Hi All

I am looking for a complete end to end patch management solution

We are currently using multiple products to patch different applications like (WSUS , SCCM , EPO...) but I am looking for one centralized solution to cover all applications microsoft , flash , adobe, Java.... Others

Any suggestions?

Regards,
Mahmoud
Disclaimer:
This e-mail message is intended solely for the individual or organization to which it is addressed. This message with all of its attachments (if any) may contain privileged and/or confidential information.
Views, opinions or conclusive remarks expressed in this message are those of the sender and do not necessarily express the views of Injazat Data Systems LLC and its related companies.
If you are not the intended recipient of this message, please immediately advise the sender by reply email or by telephone call to the number above or +971 2 699 2700; please also permanently delete this message.
Any unauthorized use, printing, copying, retention, disclosure or distribution of this message is strictly prohibited.

This email message has been scanned for the presence of computer viruses.

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]