Overview
Patch Management gives you an overview of the complete patching process. It brings patch information, device scanning, and patch deployment together in one place. You can use it to understand how Missing Patches, Installed Patches, All Patches, Scan Devices, Patches by Device, Manual Deployment, and Auto Deployment work together.
What is Patch Management Overview?
Patch Management, found under Endpoint Manager → Secure, is the starting point for managing patches. The pages are grouped into three categories: Patch View, Devices, and Deployment. Each category covers a specific part of the patch management process, from identifying missing patches to deploying and verifying them.
Patch View
Patch View pages give you visibility into patch status across your environment, organized by patch rather than by device.
| Page | Use When You Want To… |
|---|---|
| Missing Patches | See missing patches, listed by patch, and identify which patches need urgent attention. |
| Installed Patches | Confirm a specific patch has rolled out and see how many systems already have it. |
| All Patches | See missing and installed counts side by side for every patch in the catalog, in one list. |
Go to: Endpoint Manager → Secure → Patch View
Devices
Devices pages give you visibility into patch status by device, and are where scanning happens.
| Page | Use When You Want To… |
|---|---|
| Scan Devices | Check enrolled endpoints against the patch catalog to detect missing updates. This must run before any other page shows current data. |
| Patches by Device | See missing and installed patch counts per device, and deploy missing patches directly from the list. |
Go to: Endpoint Manager → Secure → Devices
Deployment
Deployment pages are where missing patches actually get pushed to your devices.
| Page | Use When You Want To… |
|---|---|
| Manual Deployment | Choose specific patches, targets, schedule, and retry rules for a one-time or controlled rollout. |
| Auto Deployment | Set up recurring, policy-based deployment so routine patches roll out automatically without manual intervention. |
Go to: Endpoint Manager → Secure → Deployment
How the Sections Work Together
- Devices → Scan Devices → Scan devices to identify missing patches.
- Patch View → Missing Patches (or) Devices → Patches by Device → Review which patches are missing and which devices require them.
- Deployment → Manual Deployment (or) Auto Deployment → Deploy the missing patches manually or through an automated schedule.
- Patch View → Installed Patches → Verify that the deployed patches are now installed.
Related Prerequisites
- Devices must be enrolled in Zecurit and actively checking in.
- The Zecurit agent must be installed and running on target endpoints.
- Appropriate permissions to view inventory, patch management, and reports.
Best Practices
- Always scan before reviewing patch counts, unscanned devices won’t show current data.
- Use Patches by Device for quick, per-device triage; use Manual Deployment when you need control over timing, targets, or specific patches.
- Use Auto Deployment for routine, recurring patches, and reserve Manual Deployment for exceptions or urgent fixes.
- Cross-check Severity across Patch View pages to prioritize Critical and Important patches first.
- Re-scan after every deployment to confirm results, rather than assuming a deployment succeeded.
Troubleshooting Tips
| Issue | Resolution |
|---|---|
| Patch counts look outdated everywhere | Re-scan the device from Scan Devices; all Patch View and Devices pages depend on scan results. |
| A device shows 0 missing patches unexpectedly | Check the Remarks column, a 0 count can mean the scan didn’t complete rather than the device being fully patched. |
| Deployed a patch but it still shows as missing | Allow time for install and check-in, then re-scan and refresh the relevant page. |