We help IT Professionals succeed at work.

Equivalent of WSUS for Solaris, AIX and Cisco devices

490 Views
Last Modified: 2017-04-12
There has been patches that were missed & lapses in patching timely for non-Windows
platforms.   I noticed, Wintel was quite up to the mark on patching & I reckon this is
due patch management automation using WSUS : patches (for both functional fixes
as well as security patches) are downloaded early.

Q1:
I heard Redhat Satellite (for patching automation like WSUS) can be used on Solaris
besides Linux.  Is there any equiv products for AIX & Cisco devices (routers, switches)?

Q2:
Does WSUS assess if particular MS patch is relevant or applicable to each server/endpoint
prior to deployment?  I mean if a software, eg, MS Access is running on that server/end-
point, then only patches for MS Access will be deployed to that server & checks the version
of the MS Access is applicable for the patches that are released
Comment
Watch Question

CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Author

Commented:
"IBM BigFix Patch" sounds good for our hundreds of AIX+Solaris environment (while we have less than 10 Linux only):
how is the cost like?  By number of endpoints or just one cost for the whole site regardless on the number of end-
points it's managing?

Author

Commented:
To use PCA, I'll need to permit firewall rules from each of our Solaris server out to Internet on
Tcp80 (or which other ports)?  Have a security concern esp for our servers that are not in
DMZ.

Does PCA checks against Oracle site (to check if our patches are outdated) & get the patches from
Oracle or some other non-Oracle site?

Author

Commented:
I guess PCA is like Linux yum  but not a central tool like WSUS, is this right?
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Author

Commented:
We use WSUS for Windows servers & SCCM for PCs/laptops.

Author

Commented:
If IBM  Big Patch is charged by endpoints, I would start gradually with a few AIX & Solaris first as pilot to see how well it goes
as our biggest audit gap now is with these platforms, not Wintel (presume the Wintel guys cope well with WSUS, SCCM &
MS Desktop Central)

Author

Commented:
Besides the UNIX OS/kernel, even utilities like ssh client+server, sudo, heartbleeds & any CVEs related to
UNIX & its tools   need to be patched, so am hoping PCA can give us a 'healthcheck' report for a start or
can it?
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
As far as Windows, I would leave that alone. Even though I do find it interesting that there is both SCCM and WSUS. As long as things are being handled well no need to rush to fix it.

I don't think that PCA is going to be the ideal tool for you to be honest. You would be better off with a properly supported product.

Author

Commented:
I just wanted to get PCA to see if it will give us a 'health-check' report or listing of
what are the patches missed.

Is the properly supported tool you have in mind BigFix?
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
Based on what's out there, I'd probably say it's your best bet. Especially with such a large number of systems (both AIX and Solaris), you appear to have the challenge of both knowing the health of the systems AND actually patching them (granted if you don't know the health, how do you know what to patch). At least BigFix should allow for both.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions