Patch for Windows® Servers, powered by Shavlik

> Patch Management > Patch Management Overview > Scanning Engine Overview

Scanning Engine Overview

The Ivanti Patch for Windows® Servers scan engine performs security patch assessment against a variety of Windows-based operating systems and products from Microsoft and other product vendors.

The Ivanti Patch for Windows® Servers engine uses an Extensible Markup Language (XML) file that contains information about which security hotfixes are available for each product. The XML file contains security bulletin name and title, and detailed data about product-specific security hotfixes, including:

Files in each hotfix package and their file versions

Registry changes that were applied by the hotfix installation package

Information about which patches replace which other patches

Related Microsoft Knowledge Base article numbers

Cross references to the Common Vulnerabilities and Exposures (CVE) database hosted by Mitre.org (CVEID)

The XML patch data file, which is contained on the console in a secured file named WindowsPatchData.zip, is created and hosted by Ivanti.

When you run Ivanti Patch for Windows® Servers (without specifying advanced file input options), the program must download a copy of this XML file so that it can identify the hotfixes that are available for each product. The XML file is a digitally signed CAB file and is available on the Ivanti website. Ivanti Patch for Windows® Servers downloads the CAB file, verifies its digital signature, and then extracts the XML file to your local computer. Note that a CAB file is a compressed archive that is similar to a ZIP file.

After the XML file is extracted, Ivanti Patch for Windows® Servers scans your machine (or the selected machines) to determine the operating system, service packs, and programs that you are running. Ivanti Patch for Windows® Servers then identifies security patches that are available for your combination of installed software. Patches that are applicable to your machine but are not currently installed are displayed as Missing Patch in the resulting output. In the default configuration, Ivanti Patch for Windows® Servers output displays only those patches that are necessary to bring your machine up to date. Ivanti Patch for Windows® Servers recognizes roll-up packages and does not display those patches that are replaced by later patches.

 

 

 

 


Was this article useful?    

The topic was:

Inaccurate

Incomplete

Not what I expected

Other