Viewing the list of updates

The Patch Management section of Kaspersky Endpoint Security Cloud Management Console displays a list of updates for the applications installed on your users' devices running Windows, including patches that fix software vulnerabilities detected on the devices.

To view the Patch Management section:

1. Open Kaspersky Endpoint Security Cloud Management Console.
2. Select the Security management → Vulnerability Assessment and Patch Management section.
3. Under Patches and updates, click the View button.
4. Under Patches and updates, click the View button.

The Patch Management section is divided into two tabs:

• Not installed

  Updates that have not been installed on devices yet or that are being installed.

• Installed

  Updates that have already been installed on all affected devices.

The list on each tab contains columns with the following information about updates:

• Installation status

  Displayed only on the Not installed tab. The information about installation of the update on affected devices is as follows:

  • Disabled

    Installation of updates is disabled. To install updates, you must define an update installation schedule.

  • License agreement pending

    Installation of updates is enabled. To install this update, you must accept related license agreements.

  • Approval pending

    Installation of updates is enabled. To install this update, you must approve it.

  • Planned

    Installation of updates is enabled. Installation of this update on the devices is planned according to the defined settings, but has not started yet.

  • In progress

    Installation of updates is enabled. Installation of this update has been started on at least one device.

• Installed on

  Displayed only on the Installed tab. Date and time when the update was last installed on a device.

• Update

  Update name and type: Security patch (if the update fixes a vulnerability) or Software update (if there are no vulnerabilities that the update fixes).

  After you click a link in this column, the console displays more detailed information about the update.

• Importance

  Importance level of an update: Critical, High, or Medium for patches that fix software vulnerabilities; Low for other updates.

  Attribute of an update. If a third-party update or Microsoft update is a patch that fixes vulnerabilities, its importance level is determined by the most critical severity level among the vulnerabilities that the patch can fix. If an update does not fix any vulnerability, its importance level is Low.

• Installed on devices

  On the Not installed tab: Number of devices on which this update has already been installed and total number of affected devices.
  On the Installed tab: Total number of devices on which this update has been installed.

  After you click a link in this column, the console displays a list of affected devices. This list includes the detailed status of update installation on each of the devices, and recommendations if the update cannot be installed on any of them. You can filter the list of devices by the update installation status.

You can filter the list of updates by the following parameters:

• Installation status (only on the Not installed tab)
• Importance level
• Application type (vendor of the application for which the update is issued: Microsoft, third-party vendors, or all vendors)

You can sort the list of updates by column: Installation status (on the Not installed tab) or Installed on (on the Installed tab).

To sort the list,

Click the link containing the column name.

The column name is displayed in uppercase characters. Next to the name of the column, an up arrow (˄) indicates the sorting direction. To change the sorting direction, click one more time. Next to the name of the column, a down arrow (˅) appears.

The Search entry field is located above the list. You can use this field to quickly find and switch to an object in a long list.

You can also configure the updates installation by clicking the Settings button above the updates list, and then selecting the following parameters:

• By schedule

  Select this parameter and configure the scheduled installation settings of updates.

• Unscheduled

  Installation of the updates will be started at the optimal time estimated by the security application.