New reported patches feature (2019 SU2)

Endpoint Manager and Security 2019.1 SU2 adds a new "reported patches" view in Patch and Compliance > Reported patches. This feature analyzes and summarizes how successful your Windows patch deployments have been. After deploying a new set of patches to your pilot group, you may use this report to decide whether the patches are good candidates for broad deployment in your environment.

A new technology added to Endpoint Manager in previous versions allows it to better analyze the “real impact” of deploying a patch to an individual endpoint. This new analysis engine tries to go beyond the standard understanding of whether a patch was successfully installed into understanding if all the applications the patch impacted work as they should after installing the patch.

Reported patches relies on data from the user feedback agent, which isn't installed on endpoints by default. The feedback agent automatically collects data about application freezes, crashes, and user-provided feedback (optional).

Using this data, Endpoint Manager can estimate if after deploying a patch the application does not work as expected. Or, if nothing is reported after a user uses the application, Endpoint Manager will assume the application works as expected.

The feedback agent can work in the background (without a user interface) or it can be visible to end users.

Reported patches workflow

  1. Scan for all the supported software Ivanti offers. This will provide a clear overview of your patch status.
  2. Define what you want to patch and add it to a filter definition group, as described in Patch filter definitions (2019 and newer).
  3. Deploy the patch to your pilot group.
  4. Wait for the feedback agent to collect the relevant data.
  5. Go to the reported patches view to evaluate results.

    Tip: The report won't show complete results until the good patch timeout interval has passed. Patch incidents that cause crashes or freezes will be reported soon after they happen.

  6. If the results are good, deploy the patches more broadly.

For more information on using this feature, see Reported patches (2019 SU2).