RSS
Email
Print
ShareRolling Review: Lumension PatchLink
Posted by Michael Biddick on March 12, 2008
Lumension Security's PatchLink Update is an agent-based patch manager that plays well with heterogeneous operating systems. Unlike the first product we reviewed, Shavlik NetChk Protect, which supported only Microsoft environments, PatchLink Update works with Mac OS X, Unix, Linux, Solaris and VMware as well as Windows. In addition, it can protect a number of applications supported on these platforms, including Adobe Flash, antivirus products and alternative Web-browsers like Firefox.
THE UPSHOT |
|
CLAIM: Lumension manages critical security and application patches across most operating systems, all from a single, easy-to-use Web-based console that connects to agents. CONTEXT: This Rolling Review will rate patch management tools on breadth of platforms supported, testing and staging capabilities, reporting, the ability to roll back and more. Lumension is the first cross-operating-system patch product reviewed. In total, we've invited 15 vendors to participate. CREDIBILITY: While its overall features and capabilities were not as polished as our first reviewed product, Shavlik, PatchLink's cross-platform support will be a life saver for organizations that are not 100% Windows. Do be prepared for higher ongoing costs, however. |
If, like us, you're hesitant about deploying agents, you'll appreciate PatchLink's Agent Management Center, a central interface that helps with agent administration and deployment. PatchLink also integrates with Active Directory for dynamic creation of groups with cascading assignments of baselines, agent policy and user permissions. The product's inventory management feature allows for identifying and reporting on software, hardware and services, while user policy features enable some administration to be delegated while still maintaining security. The system's patch repository is updated daily; after patches are tested by Lumension, they're packaged and delivered securely to the application.
Finally, the reporting component offers flexible charts and graphs for analyzing vulnerabilities, deployment status, agents and baseline compliance. Notifications via e-mail are available for just about any type of event.
Let's Get Patching
We were pleasantly surprised to find PatchLink's agents a breeze to install—we simply connected to the update server via a Web browser to get rolling. For Windows agent installs, the Agent Management Center can automate deployment with remote registry and file and print sharing enabled. Command line silent installs speed up deployment on non-Windows systems.
Add Your Comment: