https://www.channelfutures.com/wp-content/themes/channelfutures_child/assets/images/logo/footer-new-logo.png
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • 2022 MSP 501 Rankings
    • 2022 NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2022 Editorial Calendar
  • Awards
    • Back
    • 2022 MSP 501
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Channel Partners 101 (CP 101)
  • Events
    • Back
    • CP Conference & Expo
    • MSP Summit
    • Channel Partners Europe
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
Channel Futures
  • NEWSLETTER
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • 2022 MSP 501 Rankings
    • 2022 NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2022 Editorial Calendar
  • Awards
    • Back
    • 2022 MSP 501
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Channel Partners 101 (CP 101)
  • Events
    • Back
    • CP Conference & Expo
    • MSP Summit
    • Channel Partners Europe
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
    • Newsletter
  • REGISTER
  • MSPs
  • VARs / SIs
  • Agents
  • Cloud Service Providers
  • Channel Partners Events
 Channel Futures

From the Industry


Getty Images

Sponsor Content

Timely Tips for Non-Negotiable Patch Updates

Timely Tips for Non-Negotiable Patch Updates

  • Written by Barracuda MSP Guest Blogger
  • July 29, 2022
An RMM with automated patch management can help MSPs accelerate deployment while freeing staff up to focus on other mission-critical tasks.

For many software users, updates and patches are at best a nuisance and at worst a drain on productivity. However, deploying regular software patches has become a must in cybersecurity. Neglect patch updates for too long, and the data vulnerabilities rack up quickly.

MSPs have a big role to play in keeping client software updated, particularly as new threat advisories are emerging at a rapid pace. For example, just in June, Barracuda found several threats via its Security Operations Center (SOC), such as:

  • A zero-day exploit in all versions of Atlassian Confluence Server and Data Center products
  • A file version control functionality in Microsoft 365 and Office 365 that enables threat actors to encrypt files stored with ransomware
  • A vulnerability in Microsoft Azure Synapse, dubbed SynLapse, that allows cybercriminals to access significant amounts of sensitive user data

Because MSPs should be alerting clients to these risks, they need to know what software updates and patches are available to fix the problem.

MSPs should be able to download and apply patch updatesß and ensure correct installation. However, clients may push back on this process because of the time required to perform machine reboots. Remote monitoring and management (RMM) tools like those offered by Barracuda can help MSPs streamline and automate patch management while minimizing customer downtime.

An RMM with automated patch management that includes OS and third-party applications can help MSPs accelerate deployment while freeing staff up to focus on other mission-critical tasks. The RMM should be easy to use, fully configurable, and provide endpoint security and visibility into client patch status/compliance. Optimally, the system should help automatically scan systems for needed patches and allow MSPs to prioritize patches based on urgency or criticality.

These systems also help centralize patch management across the client base. As a result, staff can rapidly deploy a patch across clients and systems without manually managing lists, spreadsheets and schedules. The RMM also can enable continuous monitoring for patch status, which helps MSPs be more proactive with updates.

However, RMM is only part of a comprehensive approach to patch management. Other best practices include:

  • Inventory all devices and assets on client IT infrastructures. You cannot patch systems that you don’t know exist. (This can also help make recommendations about system consolidation if the threat surface is particularly sprawling.)
  • Create a comprehensive patch management policy that clients and staff understand. Having these policies in place helps ensure compliance and sets customer expectations.
  • Limit administrative privileges, if possible. Your clients may allow employees admin privileges for work computers, mainly if they take mobile units home or on the road. This can complicate the patch management process, as employees may ignore updates. Limiting those privileges will allow for better, centralized updates.
  • Prioritize patching of systems based on risk level and criticality. Some threats are more serious than others, and some patches address minor issues that don’t require an immediate response. This prioritization will help organize resources around the most critical systems and improve scheduling.
  • Test patches internally to verify they’re working before widespread deployment. Then, if there is a problem or an issue (or an incompatibility based on operating system release), you can work out the bugs before they affect client systems. Be sure to audit those patches to monitor for compatibility problems.
  • MSPs should also have a rollback plan in place if any performance issues are related to a specific update. That means there should be data backup and recovery solutions associated with patch processes.
  • Schedule updates around software patch releases (for example, vendors like Microsoft tend to release patches on a predictable schedule) and client working hours. This can help reduce downtime by keeping regular patching activity limited to, for example, nights or weekends. In addition, emergency patches can be deployed as they’re announced.
  • Thoroughly document all patching activities. This will enable you to more retrace your steps more easily retrace your steps if there’s a problem requiring a rollback or similar adjustment.

Automation removes a lot of the hassle of patch management for both the client and the MSP. More importantly, regular software patching can help ensure that client data remains secure without overtaxing the IT department with an increasingly frequent array of threat-based OS and firmware updates.

 

Anshu Prasad is Senior Product Manager, Barracuda. Anshu has 25 years of experience in cloud and software-defined networking, telecommunications and software applications. His roles have spanned product management, marketing, professional services and software development across multiple global technology and telecommunications companies. Anshu is a visionary and creative change-agent with a proven track record of leading teams to deliver innovative business and technical solutions that delight customers.

 

This guest blog is part of a Channel Futures sponsorship.

Tags: MSPs From the Industry Intelligence Security Barracuda MSP Sponsor Content

Most Recent


  • Technology integration
    IGI CyberLabs Sidles Up to Gradient MSP, Brings Added Value to MSPs
    Nodeware will now integrate with Gradient’s Synthesize platform, bringing about automated billing reconciliation.
  • New Chapter
    The Gately Report: SonicWall Partners to Play Big Role in Company's Next Chapter
    Meantime, a financially motivated threat actor is increasingly targeting hospitality, hotel and travel organizations.
  • Partner Hurdles Adopting AI
    As Artificial Intelligence Advances, Is Human Error Holding Up the Contact Center?
    LiveVox’s CEO discusses the challenges and promise of AI for the industry.
  • It will be alright
    It Will Be Alright: 10 Expert Tips for Surviving a Layoff
    Drawing from her own experience, Kathryn Rose explains how to watch out for your own best interests.

Leave a comment Cancel reply

-or-

Log in with your Channel Futures account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • seize the application modernization opportunity
    Seize the Application Modernization Opportunity
  • a growth mindset: your organization's strategic differentiator
    A Growth Mindset: Your Organization's Strategic Differentiator
  • Parallels RAS Provides HR Software Provider Protime with an Affordable, Secure Solution
    Parallels RAS Provides HR Software Provider Protime with an Affordable, Secure Solution
  • Are You Ready for the Microsoft Cloud Partner Program?
    Are You Ready for the Microsoft Cloud Partner Program?

Upcoming Events

View all

MSP Summit

September 13, 2022 - September 16, 2022

Channel Partners Conference & Expo

May 1, 2023 - May 4, 2023

Galleries

View all

The Gately Report: SonicWall Partners to Play Big Role in Company’s Next Chapter

August 19, 2022

As Artificial Intelligence Advances, Is Human Error Holding Up the Contact Center?

August 19, 2022

It Will Be Alright: 10 Expert Tips for Surviving a Layoff

August 19, 2022

Industry Perspectives

View all

How to Take Shared Responsibility for Securing Cloud

August 11, 2022

Seize the Application Modernization Opportunity

August 2, 2022

A Growth Mindset: Your Organization’s Strategic Differentiator

August 1, 2022

Webinars

View all

Outsmarting RaaS: Implementation Strategies To Help Your Clients Before, During, and After a Ransomware Attack

August 23, 2022

Why it is Important to Upgrade Aging Servers and How to use Live Optics to Upgrade Efficiently

August 25, 2022

Executives at Home are Not Alright: An Intro to Digital Executive Protection

September 8, 2022

White Papers

View all

Work Goes Remote – (and Other Top ITOps Trends)

May 25, 2022

The New Bottom Line: How MSPs Can Meet the Healthcare Crisis While Evolving Their Businesses

April 19, 2022

How to build a Security Operations Center (on a budget)

April 4, 2022

Channel Futures TV

View all

ThreatLocker Preaches Zero Trust, Addresses Industry Competition

Microsoft Targeting Partners to Sell Teams, Windows 365 to SMBs, More

August 15, 2022

ScienceLogic Debuts New Partner Portal

August 9, 2022

Vonage a ‘Single Communications Stack Provider’ for Partners, Customers

June 27, 2022

Twitter

ChannelFutures

.@IGIcyber sidles up to @meetgradient to bring ease of use and added value to MSPs. dlvr.it/SWwRSG https://t.co/vLFDPfAyQ1

August 19, 2022
ChannelFutures

Now Available: Expo Pass to Channel Partners Leadership Summit & #MSPSummit this September 13-16! Take a look at th… twitter.com/i/web/status/1…

August 19, 2022
ChannelFutures

How do you stay on top of your game? 💪 By connecting & sharing knowledge with other elite partners, ready to stay r… twitter.com/i/web/status/1…

August 19, 2022
ChannelFutures

How do you stay on top of your game? 💪 By connecting & sharing knowledge with other elite partners, ready to stay r… twitter.com/i/web/status/1…

August 19, 2022
ChannelFutures

.@NICELtd and @Microsoft have partnered to deliver personalized digital experiences via CXone on @Azure. @msPartner… twitter.com/i/web/status/1…

August 19, 2022
ChannelFutures

For the team at @advantagecg, the recently announced partnership with @ExtremeNetworks is a validation of the partn… twitter.com/i/web/status/1…

August 19, 2022
ChannelFutures

.@iamkatrose offers 10 tips for not only surviving, but bouncing back from a layoff dlvr.it/SWvYD6 https://t.co/YiKTzgpQa3

August 19, 2022
ChannelFutures

We are proud to announce Channel Partners events received a 12/12 sustainability score from our parent company,… twitter.com/i/web/status/1…

August 19, 2022

MSP 501

The industry's largest and most comprehensive partner awards program.

Newsletters and Updates

Sign up for The Channel Report, Channel Futures Update, MSP 501 Newsletter and more.

Live Channel Events

Get the latest information on the next industry-leading Channel Partners event.

Galleries

Educational slide shows and images from live events.

Media Kit And Advertising

Want to reach our audience? Access our media kit.

DISCOVER MORE FROM INFORMA TECH

  • Channel Partners Events
  • Telecoms.com
  • MSP 501
  • Black Hat
  • IoT World Today
  • Omdia

WORKING WITH US

  • Contact
  • About Us
  • Advertise
  • Newsletter

FOLLOW Channel Futures ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2022 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X