| Table of Contents |
|---|
What is Patch and Update Management?
Patch management and update management is are the regular updating and patching of Operating Systems and applications. Keeping software up to date is important to protect users and their data.
How are Patches Delivered?
Computers at Carleton are automatically patched in a number of ways:
1) Windows Software Update Service (WSUS)
Windows computers are configured to receive Microsoft updates from the WSUS server on campus. This server gets Windows operating system patches, as well as patches for Internet Explorer, Office, and other Windows applications from Microsoft. Windows computers check for new updates at least once a day, and they usually find new updates to apply about twice a month, soon after the second and fourth Tuesdays of the month.
2) McAfee VirusScan (Windows 7 only)
McAfee VirusScan software is set to automatically retrieve updates at least once a day, usually over the noon hour. Windows computers check for updates and policies from the Carleton McAfee ePO server every 10 minutes.At Carleton, when talking about desktop/laptops, we use the term Patch to refer to security patches for third-party applications delivered by the K1000's patching mechanism. These applications include:
- Adobe AIR
- Adobe Acrobat
- Adobe Reader§
- Adobe Flash Player (on Windows, ActiveX and plugin)§
- Adobe Shockwave Player
- Apple iCloud (Windows)
- Apple iTunes (Windows)
- Apple QuickTime (Windows)
- Apple Safari web browser (Windows)
- Audacity (Windows)
- Citrix Receiver
- FileZilla Client (Windows)
- Google Chrome (Windows)
- Google Earth (Windows)
- Inkscape (Windows)
- Microsoft Silverlight and Remote Desktop (Mac)
- Microsoft Office (Mac)
- Mozilla Firefox (consumer version)§
- Mozilla Firefox ESR§
- Notepad++ (Windows)
- Oracle Java (Java Runtime Engine, or JRE)§
- VideoLAN VLC media player (Windows)
- VMWare Fusion, Player, Workstation
- WinZip and 7-Zip (Windows)
- WireShark and WinPCap (Windows)
Updates, then, refer to Windows updates delivered by the WSUS server, or macOS updates delivered by the App Store. Also, you can update any of the third party apps listed above by setting their preferences to automatically check for updates or by selecting their check for updates feature. These application updates come directly from the vendor, not through the K1000.
How are Patches Delivered?
| Anchor | ||||
|---|---|---|---|---|
|
...
K1000 (KBOX) Patch Management
| Panelbox | ||
|---|---|---|
| ||
The K1000 only manages Carleton-owned computers. |
The K1000 receives patches from Lumension , a security company. These patches are then delivered to campus computers. Patches in the K1000 are security related patches only. Feature related patches and upgrades are not available from K1000 patch management. K1000 Patch Management is covered in detail here.
How are Updates Delivered?
Apple Software Updates
Updates for the macOS come directly from Apple via the Mac App Store. You should apply updates whenever they are available. macOS 10.14 has introduced a system preference to set up automatic updates.
Windows Software Update Service (WSUS)
Windows computers are configured to receive Microsoft updates from the WSUS server on campus. This server gets Windows operating system patches, as well as patches for Internet Explorer, Office, and other Windows applications from Microsoft. Windows computers check for new updates at least once a day, and they usually find new updates to apply about twice a month, soon after the second and fourth Tuesdays of the month.
McAfee VirusScan (Windows 7 only)
McAfee VirusScan software is set to automatically retrieve updates at least once a day, usually over the noon hour. Windows computers check for updates and policies from the Carleton McAfee ePO server every 10 minutes.
Manual Updates Within Applications
Most applications on campus computers have automatic update checking turned on. Verify automatic update checking is enabled for Adobe Acrobat, Adobe Reader, Adobe Flash Player, Firefox, Google Chrome, Java, and Office for the Mac or contact the ITS HelpDesk (x5999). These applications also have an option to check for updates on demand.
What About Exceptions?
If there is a technical reason that your software cannot be updated, or a custom schedule is needed, contact ITS HelpDesk (x5999).