You can instantiate your Patch Feed, apply custom ratings to Windows and Linux patches published by the OS vendor using APIs and patch devices against custom rated patches.

You can qualify the patches by providing the following attributes using API:

  • Patch rating (Whitelisted, Blacklisted)
  • CVE ID (Common Vulnerabilities and Exposures identifier)

Two patch feed types are supported:

  • Windows patch feed – Generated from Microsoft authoritative source to contain all the patch data released by Microsoft for different operating system versions.
  • Linux patch feed – Generated from Linux repositories to contain patch data from different distributions of Linux from all its authoritative sources.

You can install the patch feed for Windows and Linux from the Integrations page in the Setup tab.

  1. Select a client from the All Clients list.

  2. Go to Setup > Integrations > Integrations.

  3. Go to the Available Integrations section and click Patch.

  4. When the Windows or Linux patch feed is displayed, click the required OS patch feed.

  5. From PATCH FEED INTEGRATION, click Install.

  6. From the Install Patch Feed Integration window, provide details for the following parameters:

    • Name: Unique name for the patch feed integration.
    • Upload Logo: You can browse to upload a logo of your organization.
    • Use Service Provider Feed: You can inherit Patch Qualifications and Available Patches details from your Service Provider.

  7. Click Install.

  8. From PATCH FEED INTEGRATION, the Authentication section in the API tab displays Authentication Type. The default Authentication Type is OAUTH2.

  9. Click Save. The Authentication section displays Tenant Id, Key, and Secret. You can use the Key and Secret to generate the authentication token required for API.

  10. Copy the patch feed UID. You can use the patch feed UID while rating the patches for the respective patch feed through API.

  • When the client user does not select the Use Partner Feed, the Qualifications section on the Patch Feed Integration page does not display the Patch Rating and corresponding count.
  • When the client user unselects the option Use Partner Feed, the ratings of the patches changes to Not Rated and auto-approval of patches reverts to the unapproved, and a new feed for the client is created.
  • Patch integration is displayed in My Integrations after installation.
  • The rated patches are listed as Whitelisted.

For more information on how to create a Patch Feed using API, click the Patch Feed API.