up vote 1 down vote favorite
share [g+] share [fb]

I'm currently in the process of looking for a patch management solution. The solution would need to be able to patch both MS software and 3rd party software like Adobe. It will also need to be able to patch computers outside of the network.

What is the best solution for this scenario?

link|improve this question
A similar question has been asked before serverfault.com/questions/21752/… – Tubs Oct 26 '11 at 15:08
feedback

closed as off topic by kce, Chris S♦ May 16 at 18:29

Questions on Server Fault are expected to generally relate to servers, networking, or desktop infrastructure, within the scope defined in the faq.

2 Answers

up vote 2 down vote

Tivoli Endpoint Manager (previously BigFix) does Windows & Linux/AIX/Solaris patch management and also patches some 3rd party apps including Adobe products, Java, Firefox, Chrome.

They have a relay mechanism which allows you to target endpoints outside the LAN just as well, you just need a relay server on a DMZ and a couple of firewall rules.

link|improve this answer
feedback
up vote 1 down vote

WSUS can handle the Microsoft stuff as well as some 3rd party apps. If you setup your remote machines with Windows Direct Access (or some sort of auto VPN connection) then can use it as well. If they can't VPN in you can setup WSUS with a public name and have those machines update via that URL by setting the reg keys manually before you deploy the machine.

Personally I like making the machines members of the domain and using direct access so that they automatically connect as needed to access internal network resources.

link|improve this answer
It was mentioned to me that WSUS allows you to create updates now as well. – Tubs Oct 26 '11 at 14:57
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.