On patch Tuesday like today, when does Kace 1100 appliance receive critical windows updates?
We are currently in the process of testing the kace 1100 appliance, all the machines have been provisioned and had a successful patch with the previously released applications. Today March 12th, we attempted to use the kace 1100 to apply the windows and microsoft patches released for Windows XP to our machines, but did not receive the files that were listed when we manually updated some machines. We are wondering if there is a delay for the patches to be released on the server where Kace receives their files?
Answers (4)
Windows patch release timeframes:
Security Critical: 48 hours from release date
Important & Moderate Security patches: 5 business days from release date
Low & Non Security patches: 7 business days from release date
Platform service packs: 12 business days from release date
Taken from:
How soon after their release will patches be available for me to install from the K1000-series appliance?
http://www.kace.com/support/resources/kb/article/How-soon-after-their-release-will-patchesbe-available
Also, use this when patches are missing:
What To Do When Patches Are Missing From Your KBOX
http://www.kace.com/support/resources/kb/article/what-to-do-when-patches-are-missing-from-your-kbox
You should also check your KBOX settings for how often it downloads patch updates. If it isn't set to download patches every night that will also cause a delay.
Hi,
It can take up to 48 hours to download them after lumension does their testing. Sometimes faster but that depends on the number of patche released.
Also note that if lumension finds a problem with the patch, it won't be added to the feed, even though MS or Adobe..etc have released it. At that point you have to contact Kace support for assitance.
This has been my biggest single gripe about KACE. I know all the other systems management suites also tend to use lumension, but I often find myself waiting in excess of 5 days for a Java patch or another security related patch that isn't within Lumension's SLA to KACE to get out faster. So rather than allow a Patch run to take care of 3rd party patches I end up having to make managed installs to get 3rd party patches out in time.
My recommendation is that if KACE wants to support 3rd party patching they need to do 2 things. First, make Lumension's testing/SLA an option. I'm capable of identifying test computers to run with inside my organization. I don't feel like Lumension will know if Java is going to break a proprietary app or not, and I dislike a vendor trying to protect me from something I'll inevitably do anyways. Second, improve the response time of all patches period. Some of the wait times we see leave us vulnerable for far too long.
