Administrator Guide

290 | Posture Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
Interface
Parameter
Description
n Notify Before Install - Patch Agent is turned on
and will notify user before installing updates.
NOTE: The values specific to the selected product are
displayed in the Status Check Type field. For example,
all the 5 values are displayed for Microsoft Windows
Automatic Update. For SCCM, only No Check,
Disabled, and Notify Before Install are displayed.
l Install Level Check Type: Select No Check, All,
Selected on Server, or Security. This option is only
enabled if the Product-specific checks check box is
checked. For Microsoft SCCM, selecting All, Selected
on Server, or Security will return the full list of all
missing patches.
n All: Check for all missing patches, and search for
all available patches.
n Selected on Server:Check only for the patches
pre-selected on the server. Some Patch
Management products can push the patches to
the endpoint device. This option provides the
ability to check for only the pre-selected patches.
n Security: Check only for security updates. Some
of the products can install only security-related
patches.
NOTE: If you select the Microsoft Windows Update
Agent from the Select Patch Management product
list and you select an option from the Install Level
Check Type list, the results are listed below:
n All: Returns the full list of missing patches.
n Selected on Server:Returns a list of missing
patches that are pre-selected on the server site.
n Security: Returns a list of missing patches that
Microsoft classifies as Security Updates.
n No Check - Disables the Grace Period and Scan
Interval fields.
l Grace Period: Configure the time period for which
OnGuard Agent should ignore missing patches. You
can specify the grace period in hours, days, weeks,
or months. For example, if the Grace Period is set to
3 days, then clients will be treated as ‘healthy’ for 3
days even if some patches are missing. After 3 days,
OnGuard Agent will treat clients as ‘unhealthy’ if the
patches are still missing. You can enable Auto-
remediation to install the missing patches and to
treat them as ‘healthy’. This field is disabled if you
selected No Check from the Install Level Check
Type field.
Table 146: Patch Management Page Parameters (Continued)