Patch Management and Endpoint Security

How it works:

Comprehensive patch management and deployment

Reduce infrastructure and resource costs by using a single solution to manage patches for heterogeneous environments. Achieve peace of mind by making sure Windows and Mac platforms, as well as potentially vulnerable third-party applications, such as Adobe Reader® or Oracle Java®, are patched and up to date. Get powerful administrative capabilities including customizable and automated patch scheduling based on dynamic filtering so you can right-size your patching plan for your business.

The Smart Labels feature in the KACE SMA allows you to classify your endpoints using self-selected parameters. Labels can include make and model, location, operating system and other designations. You can combine labels when you’d like to take a specific action on extremely granular groupings of endpoints.

Employ remote replication for multiple worksites

Significantly reduce the network impact of large patch deployments with remote-replication capabilities. The KACE SMA enables you to designate one computer in a remote subnet to kick off Wake-On-Lan during off hours for patching and distribution.

The KACE SMA patch management data is sent once over your network to the replication share, and all other systems at that remote office can then directly pull patches from the designated remote replication share through the LAN instead of from the KACE SMA — without the need for dedicated hardware or personnel at the remote facility.

Robust, standards-based vulnerability scanning

Quickly discover vulnerabilities in your environment and identify systems that aren’t compliant with your security and configuration policies with powerful security audits. Employ OVAL-based vulnerability scanning for all managed Windows systems. Manage common endpoint configurations and confirm organizational compliance with easy-to-use, automated Security Content Automation Protocol (SCAP) scheduling and detailed reporting.

Simplify configuration management and security policy enforcement

Streamline configuration and security policy enforcement processes, such as firewall, browser and registry settings, for Windows, Mac and Linux systems by automatically deploying scripts based on specific conditions, or manually running a script based on need. Easily create scripts that target individual systems, a specific group of systems or an entire network – or use a variety of pre-built scripts. Gain the ability to set and enforce desktop configurations and manage McAfee and Symantec antivirus packages.

* OVAL is the information community standard endorsed by the US Computer Emergency Readiness Team (US Cert.) and the Department of Homeland Security.