Imagine having fully patched, fully protected computers without the days of planning, hours of downtime and the onerous job of applying them by hand. Imagine a place where you could automate the download and installation of patches across an entire network. That could all be a reality, as there is software available that can do all that and more. You’d still need to test and evaluate those patches, but you’d no longer need to worry about broadcasting and installing everything.
http://www.youtube.com/watch?v=Au7bMNU1ffI
Well said. I am not aware of what people against automatic patching are saying the disadvantages to it are, but come to think of it. If you are using a licensed software from a reliable development company, how would automatic patching be dangerous in a sense?
The potential “threat” is nothing compared to what is saved in manhours and what you can avoid in stress and headaches. Delays in patches are actually more dangerous as the actual threats are getting savvier in trying to invade networks. I’m all for automatic patching. There are far more better things to do than doing it manually. Look at your To Do list in a more strategic perspective.
Automatic patch management is a godsend, but make sure to not skip the ever vital step of testing patches before releasing them into the wild. You should always still take the time to see what a patch will do to your system and tools before rolling it out blindly across the network and creating a much larger and preventable headache.
I completely agree with you Carl. Very important tip!