The Patch Status Page

Each patch features a page that lists statistics and details about itself: the Patch Status page.

This page is divided into four tabs:

The Not Patched Tab: This tab lists each endpoint that the patch applies to. However, the patch is not installed on these endpoints yet. View this page to find out which endpoints you still need to patch for a vulnerability.

The Patched Tab: This tab lists each endpoint that the patch is installed on. You can view this page after a deployment to confirm that your endpoints are patched.

The Do Not Patch Tab: This tab lists each endpoint marked as Do Not Patch for a given patch (Do Not Patch means the patch is exempt from being installed on the endpoint). If you determine that an endpoint shouldn't have a certain patch installed, check this tab to see if the endpoint is already marked Do Not Patch.

The Information Tab: This tab lists metadata about the patch itself.

Viewing Content Patch Statuses

You can view details of a specific content item by selecting the desired content item and clicking the item name.

View a content item's patch status by clicking a content item's hyperlink from a content page list. The Patch Status page represents the results of the content item analysis and displays detailed data regarding the content item.

  1. From the Navigation Menu, select Review > Vulnerabilities > --- All --- (or any of the other vulnerability options).
  2. Select a content item from the list. You can only view the details of one content item at a time.
  3. Click the content item’s name.
    The Patch Status page for the selected content item opens.

The Not Patched Tab

This tab lists each endpoint that the patch applies to. However, the patch is not installed on these endpoints yet. View this page to find out which endpoints you still need to patch for a vulnerability.

The Not Patched Tab Toolbar

Button

Description

View Package

Opens the Packages page and displays the package for the applicable content item.

Deploy...

Opens the Deployment Wizard. For additional information, refer to Using the Deployment Wizard.

Export

Exports the page data to a comma-separated value (.csv) file. For additional information, refer to Exporting Data.

Important: The Enhanced Security Configuration feature for Internet Explorer suppresses export functionality and must be disabled to export data successfully. Pop-up blockers in Internet Explorer or other supported browsers may also suppress export functionality and should be disabled.

Options

(menu)

Opens the Options menu. For additional information, refer to The Options Menu.

The Not Patched Tab List

Column

Description

Name

The name of the endpoint. Click the link to view its The Endpoint Details Page.

DNS Name

The domain name system for the endpoint.

IP Address

The IP address of the endpoint.

Operating System

The operating system that the endpoint uses.

OS Service Pack

The service pack applied to the operating system (if one is installed).

Analysis Date

The last date and time that the endpoint was scanned for the patch.

The Patched Tab

This tab lists each endpoint that the patch is installed on. You can view this page after a deployment to confirm that your endpoints are patched.

The Patched Tab Toolbar

Button

Description

View Package

Opens the Packages page and displays the package for the applicable content item.

Deploy...

Opens the Deployment Wizard. For additional information, refer to Using the Deployment Wizard.

Export

Exports the page data to a comma-separated value (.csv) file. For additional information, refer to Exporting Data.

Important: The Enhanced Security Configuration feature for Internet Explorer suppresses export functionality and must be disabled to export data successfully. Pop-up blockers in Internet Explorer or other supported browsers may also suppress export functionality and should be disabled.

Options

(menu)

Opens the Options menu. For additional information, refer to The Options Menu.

The Patched Tab List

Column

Description

Name

The name of the endpoint. Click the link to view its The Endpoint Details Page.

DNS Name

The domain name system for the endpoint.

IP Address

The IP address of the endpoint.

Operating System

The operating system that the endpoint uses.

OS Service Pack

The service pack applied to the operating system (if one is installed).

Analysis Date

The last date and time that the endpoint was scanned for the patch.

The Do Not Patch Tab

This tab lists each endpoint marked as Do Not Patch for a given patch (Do Not Patch means the patch is exempt from being installed on the endpoint). If you determine that an endpoint shouldn't have a certain patch installed, check this tab to see if the endpoint is already marked Do Not Patch.

The Do Not Patch Tab Toolbar

Button

Description

Do Not Patch...

Disables the selected patch for specific groups and endpoint that you select. For more information, see Disabling Content for Groups/Endpoints.

Export

Exports the page data to a comma-separated value ( .csv ) file. For additional information, refer to Exporting Data.

Options

(menu)

Opens the Options menu. For additional information, refer to The Options Menu.

The Do Not Patch Tab List

Column

Description

Name

The name of the endpoint. Click the link to view its The Endpoint Details Page.

DNS Name

The domain name system for the endpoint.

IP Address

The IP address of the endpoint.

Operating System

The operating system that the endpoint uses.

OS Service Pack

The service pack applied to the operating system (if one is installed).

Result

Indicates if the patch is installed on the endpoint.

  • In most cases, the result is either Not Applicable or Not Patched (since it's the Do Not Patch tab after all.)
  • In some rare cases, the result may be Patched. This result indicates either:
    • The patch was installed before the patch was marked Do Not Patch for the endpoint.
    • The patch was installed manually by an end user.

Analysis Date

The last date and time that the endpoint was scanned for the patch.

Each endpoint in the list can be expanded to show more detail about how it was assigned a patch exception. Expanding an endpoint shows whether it was assigned the patch exception directly or through group inheritance.

Column

Description

Source

The source from which the endpoint inherited its Do Not Patch state.
  • Endpoints directly placed in a Do Not Patch state have a Source of Direct Assignment.
  • Endpoints that inherit their Do Not Patch state from a group list the source group.
  • Endpoints can have multiple Do Not Patch sources.

Reason

The last reason that Ivanti Endpoint Security user defined when granting a group or endpoint a patch exception.

Last Modified By

The user who last edited the group or endpoint Do Not Patch state

Last Modified Date (Server)

The server date and time that the group or endpoint Do Not Patch state was modified.

The Information Tab

The Information tab, unlike other Patch Content Details page tabs, features no list. Rather, it features reference information for the applicable content item.

The Information Tab

This tab lists metadata about the patch itself.

The Information Tab Buttons

Button

Description

View Package

Opens the Packages page and displays the package for the applicable content item.

Deploy...

Opens the Deployment Wizard. For additional information, refer to Using the Deployment Wizard.

Export

Exports the page data to a comma-separated value (.csv) file. For additional information, refer to Exporting Data.

Important: The Enhanced Security Configuration feature for Internet Explorer suppresses export functionality and must be disabled to export data successfully. Pop-up blockers in Internet Explorer or other supported browsers may also suppress export functionality and should be disabled.

Options

(menu)

Opens the Options menu. For additional information, refer to The Options Menu.

The Information Tab List

Name

Description

Vulnerability Name

The name of the content item.

Content Type

The content item type.

Beta

Indicates if the content item is in beta.

Downloaded on (UTC)

The date and time on which the content was downloaded.

Modified on (UTC)

The date and time the content item was last modified.

Associated packages

The number of packages associated with the content item.

Packages status

The cache status for the content item packages.

Ivanti Endpoint Security ID

The Ivanti Endpoint Security identifier for the content item.

Custom Patch Lists

A listing of all Custom Patch Lists that the content item is included in.

State

The enabled/disabled/completed status of the content item.

Enabled/Disabled by

The Ivanti Endpoint Security user who last disabled or enabled the content.

Enabled/Disabled date (Server)

The date and time the content was disabled or enabled.

Enable/Disable reason

The reason the user provided for disabling or enabling the content. You can click the Edit link to change the reason.

Vendor name

The name of the content item vendor.

Vendor product ID

The identifier given to the security content item by the vendor.

Vendor release date/ time (UTC)

The date and time the vendor released the software in the content item.

Common Vulnerability Exploit (CVE)1

The CVE number for the content.

Vulnerability Code Description1

A description of the vulnerability associated with the content item.

Reference Text1

The reference text(s) associated with the content item vulnerability.

Description1

The narrative description of the distribution package. This section may include important notes about the content item and a link to more information.

1This meta data appears conditionally based on whether it was added for the content item. Additionally, there may be multiple instances of each meta data section.

Information

This section displays information about the applicable content item.

Name

Description

Vulnerability Name

The name of the content item.

Content Type

The content item type.

Beta

Indicates if the content item is in beta.

Downloaded on (UTC)

The date and time on which the content was downloaded.

Modified on (UTC)

The date and time the content item was last modified.

Associated packages

The number of packages associated with the content item.

Packages status

The cache status for the content item packages.

Ivanti Endpoint Security ID

The Ivanti Endpoint Security identifier for the content item.

Custom Patch Lists

A listing of all Custom Patch Lists that the content item is included in.

State

The enabled/disabled/completed status of the content item.

Enabled/Disabled by

The Ivanti Endpoint Security user who last disabled or enabled the content.

Enabled/Disabled date (Server)

The date and time the content was disabled or enabled.

Enable/Disable reason

The reason the user provided for disabling or enabling the content. You can click the Edit link to change the reason.

Vendor name

The name of the content item vendor.

Vendor product ID

The identifier given to the security content item by the vendor.

Vendor release date/ time (UTC)

The date and time the vendor released the software in the content item.

Common Vulnerability Exploit (CVE)1

The CVE number for the content.

Vulnerability Code Description1

A description of the vulnerability associated with the content item.

Reference Text1

The reference text(s) associated with the content item vulnerability.

Description1

The narrative description of the distribution package. This section may include important notes about the content item and a link to more information.

1This meta data appears conditionally based on whether it was added for the content item. Additionally, there may be multiple instances of each meta data section.