Users Guide

Parameter Action/Description
n No Check: W-ClearPass Policy Manager server ignores the Patch
Agent Status value. This means it will not check the status of the Patch
Agent application on the client.
n Enabled: Patch Agent is turned on and it automatically updates the
client.
n Disabled: Patch Agent is disabled and it will not check for missing
patches and update the client.
n Notify Before Download: Patch Agent is turned on and it notifies the
user before downloading updates.
n Notify Before Install: Patch Agent is turned on and it notifies the user
before installing updates.
NOTE: The values specific to the selected patch management product are
displayed in the Status Check Type field.
For example, all five values are displayed for Microsoft Windows Automatic
Update. For Microsoft System Center Configuration Manager (SCCM), only No
Check, Disabled, and Notify Before Install are displayed.
Install Level Check Type This option is only enabled if the Product-specific checks check box is
checked. For Microsoft SCCM, selecting All will return the full list of all missing
patches.
n No Check: W-ClearPass Policy Manager server ignores the Patch
Agent Status value. This means it will not check the status of the Patch
Agent application on the client.
n All: Checks for all missing patches and searches for all available
patches.
NOTE: If you select the Microsoft Windows Update Agent from the Select
Patch Management product list and you select an option from the Install
Level Check Type list, the results are as follows:
n All: Returns the full list of missing patches.
n No Check: Disables the Grace Period and Scan Interval fields.
Grace Period Configure the time period for which OnGuard Agent should ignore missing
patches.
You can specify the grace period in hours, days, weeks, or months.
For example, if the Grace Period is set to 3 days, clients will be treated as
healthy for three days even if some patches are missing. After three days,
OnGuard Agent will treat clients as unhealthy if the patches are still missing.
You can enable Auto-remediation to install the missing patches and to treat
them as healthy.
If you selected No Check from the Install Level Check Type field, Grace
Period is disabled.
Scan Interval Specify the Scan Interval by specifying the number of hours, days, weeks, or
months.
If you selected No Check from the Install Level Check Type field, Scan
Interval is disabled.
Table 157: Patch Management Parameters (Continued)
When you save your patch management configuration, the configuration information is displayed on the
Patch Management page:
Dell Networking W-ClearPass Policy Manager 6.6 | User Guide Posture | 311