Dashboard
The Ivanti Neurons Patch Intelligence default dashboard tab is All Patches, once a connector has been added the My Environment tab becomes available. Select the My Environment tab to restrict the data to only the devices in the connected environment. For both of these tabs you can customize the data that displays to relate to All Patches, Latest Patches (excludes patches that have been superseded) or those Revised within 60 days.
The dashboard is made up of two parts; the charts and the data grid. The charts change depending on whether you have All Patches or My Environment selected. You can use the charts to filter the data that displays in the grid by clicking on any of the colored segments in a pie or bar chart, re-click the colored segment to remove the filter from the grid.
All Patches Charts
When the All Patches tab is selected the following charts display:
Top Vendors: This chart displays the top 5 vendors that have released the most patches within the last 14 days.
Patch Types: This chart displays the number of each type of patch across all vendors, released within the last 14 days.
Why 14 Days? - Research has shown that patching vulnerabilities within 14 days of identification is the optimum period to reduce risk of exploitation.
MS Patch Tuesday: All of the Microsoft Patch Tuesday patches, categorized by vendor and severity. This chart also includes Third Party vendors which have at least one CVE associated with an MS patch. Select the ellipsis to export the chart in .png format.
Add a Connector
To add an Ivanti Endpoint Manager (EPM), Security Controls, Patch for MEM connector, IES Connector, or DSM connector select Add Connector at the top of the dashboard, the Help panel Get Started with Connectors slides out, select Go To Connectors which walks you through the steps required.
Alternatively you can use the Ivanti Neurons Platform > Connectors menu option.
Adding a Connector
- Open the Admin menu.
- Select Connectors. See the Setting up connectors topic for further details.
- Select Add Connector for the desired server.
The connector tiles display. - Select the required connector tile.
The connector form displays. For more information on how to complete the form see the relevant connector Help topic.
My Environment Charts
When the My Environment tab is selected the following charts display:
Devices Exceeding SLA chart: This chart replaces the Top Vendors chart if you have My Environment selected. It allows you to easily see how many devices within your environment are nearing or exceeding your service level agreement (SLA) and the percentage of devices that are compliant, and not. Click on either of the device numbers in the chart to filter the grid, and hover over a number to see how many patches have been identified as missing from the devices.
Select the chart ellipsis to carry out one of these actions:
- Configure: Configurable settings for the chart are:
- Title and Description: The title and the description for the chart can be customized, up to a limit of 60 characters.
- Patch type: The default for the chart is to include all patch types, but you can select to only include specific patch types based on security severity. For example, select Security Critical to only show the number of devices nearing or exceeding your SLA that are missing security critical patches.
- Your SLA limit: Set the number of days for your SLA. This can be between 1 - 365.
- Your SLA threshold: Set the number of days for your SLA threshold. This is the number of days before the actual SLA limit that you want to be notified about, it can be between 0 - 365, but not higher than the SLA value. You must have permissions to edit the SLA settings, to assign permissions to a role navigate to Admin > Roles > Permissions > Patch Management > Patch Intelligence > Edit SLA Config.
- Export CSV: The data can easily be exported in CSV format, see the To export section for details on what gets exported.
- Generate Report: Create a report to show each update, the release date, total devices affected, and the trend toward compliance compared to your defined SLA. You can define the scope of the report including time frame, vendors, and severity. You can also filter by Exploited or specific CVE IDs to report on high risk updates specifically. The report is saved to your browser default download location.
Patch Types chart: This chart displays the number of each type of patch across all vendors, released within the last 14 days.
Why 14 Days? - Research has shown that patching vulnerabilities within 14 days of identification is the optimum period to reduce risk of exploitation.
Known Vulnerabilities: This chart replaces the MS Patch Tuesday chart if you have My Environment selected. It allows you to easily see if there are any vulnerabilities in your environment. There are two levels of vulnerability:
- Vulnerable: At least one CVE registered against a missing patch.
- Exploited: At least one CVE that has a known exploit against a missing patch.
The patch scan results are used to provide this information. Click on either the Number of Devices or Number of Patches column to filter the grid results to only show the list of patches that fix either the vulnerability or the known exploit.
For more detail on known exploits, see the Patch information CVE tab.