Data Security and Compliance
Security and Update Patch Management for
Servers, Endpoints, Infrastructure, and IoT Devices Software and Firmware
Patch Management: Challenges and Solutions
Patch management is a critical and complex task. Timely and properly managed patching optimizes cybersecurity, compliance, availability, and functionality. Haphazard patch management can result in security gaps, compatibility problems, sluggish or erratic performance, unnecessary downtime, or loss of important features. Patching involves more than periodic updates of operating systems and applications for servers and endpoints. Firmware patches can be essential for peripherals such as printers and scanners, network infrastructure appliances like routers and Wi-Fi access points, and Internet-of-Things (IoT) devices like sensors and robotics.
The patching process can present a range of complications that vary from network to network. Resources that may require patching can be on-premises, in the cloud, mobile, or in the homes of telecommuters. Environments may include a mix of Windows, Linux, Apple, and Google operating systems and applications. Some patches can be installed automatically and at scale using tools like Microsoft Configuration Manager, Intune, or Azure Update Management. Others must be performed manually. Patching for core systems must be scheduled to minimize business disruption. In some mission-critical environments, patches must be carefully tested before being approved for production.
Progent's managed services for patch management provide businesses of any size an affordable end-to-end solution for identifying, acquiring, evaluating, testing, prioritizing, scheduling, applying, and documenting software and firmware updates to your ever-evolving IT network. In addition to optimizing the security and functionality of your IT network, Progent's patch management services free up time for your IT staff to focus on strategic projects and tasks that deliver maximum business value to your network.
Progent's Patch Management Processes
Progent offers standard and custom service programs for software and firmware patching. These managed services allow you to offload part or all of your patch management tasks to a nationwide IT support firm with over two decades of experience providing network design, deployment, and support to organizations of all sizes worldwide. Progent works closely with your IT managers to define the scope of the services you require. Services available from Progent for patch management include:
- Discover network assets: This can include business-critical applications like Exchange and SQL, web-facing servers, desktop and mobile endpoints, security appliances such as firewalls, and network infrastructure devices like switches and Wi-Fi access points.
- Identify assets to be managed: Progent will work with you to determine which of your network assets you wish to select for ongoing patch management services. Progent offers a variety of standard programs that cover specific classes of items and Progent can also create custom programs to meet your unique requirements.
- Deploy patch management tools: Progent is familiar with a wide selection of patch installation tools and patch tracking databases. Available tools include Azure Update Management for cloud-based assets, Configuration Manager for on-prem assets, Intune for mobile devices, IT Glue for documentation, plus a selection of advanced anti-virus platforms. Together, these tools allow you to automate and track updates for resources located in public and private clouds, on-premises, on the road, at branch offices, and in the residences of at-home workers.
- Analyze patch status and perform risk analysis of missing patches: Generally, systems with up-to-date patching are more secure and stable than those with sporadic updates. However, some patches have the potential to disrupt essential business operations by introducing compatibility problems, system instability, or unfamiliar and confusing changes to user experiences. Progent can help you determine which patches carry a risk to your organization's IT environment, or which patches should be assigned a high priority because they block a major security threat. Progent's experience with patch management can help you maintain a secure network without compromising productivity.
- Develop a patch management program: Progent's team of experts can assist in designing and managing a patch management program that fits your business needs and security requirements. Progent offers standard and custom patch management services and can help with automated as well as manual patching. Progent can manage mission-critical assets only, all patchable resources, or anything in between.
- Patch testing: Even the world's largest networks, including Amazon AWS and Microsoft Azure, have experienced major outages caused by updates that were insufficiently tested before being applied to production systems. For organizations with no tolerance for downtime, Progent can help create test environments that allow you to make sure new patches will not cause stability problems for your network.
- Prioritize and schedule patches: Progent can help you determine which patches should be performed immediately and which can be safely delayed in order to minimize business disruption. Some regulatory standards, such as the Payment Card Industry (PCI) Data Security Standard, require that the most critical security patches be installed within a certain timeframe.
- Document patch history and status: Progent can create a centralized knowledge base for tracking the patch level of every monitored asset. This makes it easy to find where software, firmware, or driver updates can be downloaded and includes patch release dates, release notes, and other important information required for a comprehensive patch management solution.
- Troubleshoot patch failures: Patches to some key resources such as operating systems or application servers can cause unforeseen compatibility or stability issues, especially with legacy or home-grown software or older devices. Progent has the breadth of experience to help you quickly identify and mitigate problems that may arise as a result of applying an update.
Software and firmware updates are frequently released for network infrastructure appliances like firewalls, routers, switches, wireless controllers, and Wi-Fi access points. These updates typically harden security, improve feature sets, or mitigate stability and compatibility issues. Managing updates for these infrastructure devices can pose a challenge, especially in mixed-vendor environments and networks that have a combination of on-premises datacenters, at-home workers, branch offices, and cloud-hosted resources. In addition to tracking and acquiring updates, IT managers must make sure network appliances have sufficient disk space and patches are transferred cleanly and work properly.
Progent has provided advanced support for Cisco networking products for more than two decades and also offers expertise with other major vendors including Juniper, Palo Alto Networks, SonicWall, Fortinet, WatchGuard, and CheckPoint. Progent's managed services for patch management can help you consolidate your software update solution to include network appliances along with servers, endpoints, applications software, and IoT devices.
Progent's Standard and Custom Patch Management Services
Progent offers a range of standard patch management packages that include backup services, reporting, and documentation. Pricing is based on the type and quantity of devices covered. Additional services including building environments for pre-installation patch testing are billed at time and material rates. Custom packages are also available and typically cover specialized devices and/or applications.
PROACTIVE Server Patch Management
On Prem or Private Cloud Server:
- ProSight Performance Monitoring
- Key Application Maintenance - Exchange, SQL, etc.
- Scheduled Patching and Preventative Maintenance
- License & Asset reporting and management
- Managed Anti-Virus - Current AV system
- Initiate Server backup once complete
- Additional Support Billed at T&M Rates
- AIX Scan - Active Directory and report yearly
- IT Glue access control and asset documentation
- Compliance scan of all Windows and Linux servers
- Update compliance assessment results for enabled machines
- Scheduled Patching and Preventative Maintenance
- License & Asset reporting and management
- Managed Anti-Virus - Current AV system
- Initiate Server backup once complete
- Additional Support Billed at T&M Rates
- IT Glue access control and asset documentation
- ProSight Availability Monitoring
- OS & 3rd Party Patch Management
- Scheduled Preventative Maintenance
- Managed Anti-Virus - current AV system
- Hosted Anti-Spam - Spam Hero
- Additional Support Billed at T&M Rates
- IT Glue access control and asset documentation
Managed Patch both Physical and Virtual Servers:
- Physical and Virtual Servers
- Windows Server Patch Management
- Exchange and SQL
- Patch Reporting
- Initiate Server backup once complete
- IT Glue access control and asset documentation
- ProSight Availability Monitoring
- OS & 3rd Party Patch Management
- Scheduled Preventative Maintenance
- Additional Support Billed at T&M Rates
- IT Glue access control and asset documentation
Security Critical Patches - applied within 48 hours of Progent being notified - invoiced only when needed
PROACTIVE Network Device Patching
Internet Facing Hardware - Managed Devices (Security appliances, firewalls, routers):
- Monthly Network Health Review
- Firewall, router and Managed Switch Patching
- Additional Support Billed at T&M Rates
- IT Glue access control and asset documentation
- Firewall, router, wireless controllers and managed switches patching
- Additional Support Billed at T&M Rates
- IT Glue access control and asset documentation
Security Critical Patches - applied within 48 hours of Progent being notified - invoiced only when needed
Initial Patching Event Additional Costs:
Initial Patching will have an additional cost per server or network device to provide for review and documentation of current patch level and any other documentation needed for properly managing the ongoing patching as defined above. If multiple patches are needed that require additional time for the initial patching, Progent will provide any estimates beyond the normal patching cost.
Additional Services Available:
- SentinelOne Active Security Monitoring and AV
- Bitdefender AV
- Auvik Network and ProSight Systems Monitoring
- Patching testing before deployment
- Server hosting in private data center
- Customized management and patching available
- Security and compliance services
- Disaster recovery and business continuity planning
To download a datasheet about the features and benefits of Progent Patch Management Services, select:
Progent Patch Management Services Datasheet. (PDF - 330 KB)
Contact a Progent Expert about Patch Management Services
For more information about Progent's patch management services, call Progent at
Ransomware 24x7 Hot Line: Call 800-462-8800
Progent's Ransomware 24x7 Hot Line is designed to help organizations to take the time-critical first step in mitigating a ransomware attack by containing the malware. Progent's online ransomware expert can help you to identify and quarantine breached devices and guard undamaged assets from being compromised. If your network has been breached by any strain of ransomware, act fast. Get immediate help by calling Progent's Ransomware Hot Line at 800-462-8800. For more information, visit Progent's Ransomware 24x7 Hot Line.
An index of content::
Microsoft Exchange Server 2010 Migration Consult
Exchange 2007 to Exchange 2010 Upgrade Consulting
Progent can provide comprehensive help for every phase of your Exchange Server 2010 upgrade with services that include end-to-end project management services, site analysis, project planning, specification of all new software and hardware required, suggested sourcing, pilot testing at customer site or at Progent's test facility, managing transitional coexistence between Exchange Server 2010 and Exchange Server 2003 or 2007, implementation of the production system, deactivating the previous servers, and webinar training for customer's support staff and users.
After Hours Meraki MR53 Access Point Consulting
Best Network Consulting Meraki MR20 Access Point
Progent's Meraki wireless AP consultants provide remote and onsite support to assist businesses of any size to design, install, maintain, expand or debug Wi-Fi systems that utilize Cisco Meraki wireless access points. Progent can help you to set up and support Cisco's Meraki-based wireless networks for environments that range from a telecommuter's home or a remote office to a campus or a multi-site enterprise. Progent can also help you to configure additional Cisco products including Catalyst and Nexus switches, ASR routers and firewalls to create a cohesive ecosystem that delivers identical access, performance, security, ease of management and availability for wired and wireless users irrespective of their mobility or device.
Small Medium Business Information Technology Management
SMB Small Business Network Consulting Companies
Progent offers technical services for mid-size businesses who have 100 to 250 network clients. The medium size business or work group has typically been an underserved part of the market for network support expertise. The cost structures and service access models of major third-party support organizations make them too expensive for the typical mid-size business or small medium business (SMB), which usually relies on a modest information technology budget with which to support an information network whose complexity and sophistication are frequently comparable to the networks of much bigger enterprises. Progent's support delivery model, which takes full advantage of remote support, virtual network infrastructure and 24x7 server monitoring, significantly reduces the network maintenance expenses of an SMB while providing the small company with big-company service from certified, IT experts with background in a broad array of midsized business network solutions. If your mid-sized organization or small business is looking for levels of network help appropriate by a mid-size organization without budgeting big-company prices, contact Progent.
Malware Forensics Online Technical Support
ProSight Phishing Defense Specialist
Progent's ProSight Active Security Monitoring (ASM) is an endpoint protection service that incorporates cutting edge behavior-based analysis tools from SentinelOne to defend endpoints and servers and VMs against new malware assaults like ransomware and file-less exploits, which easily evade legacy signature-based AV products. ProSight ASM protects on-premises and cloud resources and offers a unified platform to manage the complete threat lifecycle including filtering, identification, mitigation, cleanup, and post-attack forensics. Top capabilities include one-click rollback with Windows VSS and real-time network-wide immunization against new attacks.
Two-factor Authentication Online Troubleshooting
24-Hour Duo MFA and Single Sign-on Online Support Services
Progent's Duo services utilize Cisco's Duo cloud technology to protect against password theft through the use of two-factor authentication (2FA). Duo enables one-tap identity verification with iOS, Google Android, and other personal devices.
IT Services for Service Firms Network Consultant
Open Now Consulting for IT Service Firms Information Technology Consulting
Progent's Support for IT Service Organizations lets you take advantage of Progent's consulting engineers while retaining your own brand as a seamless arm of your IT consulting team.
Remote Engineers Microsoft Teams work from home
Services Microsoft Teams AAD Connect
Progent can assist you to design a migration to Microsoft Teams from Skype for Business and install, manage, and troubleshoot a cloud-based or mixed implementation of Teams. Progent can help you to connect Teams with Office and Microsoft 365 apps, Exchange, SharePoint, and your PSTN gateway.
Microsoft Dynamics GP 2015 Reporting Professionals
Dynamics GP 2015 R2 Consultant
Microsoft Dynamics GP 2015 R2 (formerly Great Plains) features a new design that improves cloud integration, supports popular smart phones and tablets, permits single sign-on with Microsoft Azure AD, and tightens security. Dynamics 2015 R2 also simplifies management reporting, includes new Workflows, expands the Web Client, and delivers over 100 enhancements to its library of applications. Progent's team of Microsoft-certified consultants offer the broad technical skills and experience to resolve the many technical and business challenges associated with upgrading to Dynamics GP 2015 R2 and can help you to perform an efficient migration that will optimize the business value of your investment in this powerful platform.
Monitoring and Reporting Online Help
Monitoring and Reporting Consultants
Progent's Microsoft-certified consulting experts have over a decade of experience designing, deploying, optimizing and troubleshooting SCOM environments and can provide organizations of all sizes expert remote or on-premises consulting services for System Center 2012 Operations Manager. Progent can help your company to design an architecture for Microsoft SCOM 2012 servers that provides the performance and resilience required to monitor your datacenter effectively, whether your datacenters are on-premises, in the cloud, or a mixed solution. Progent can also help you to import and customize SCOM 2012 management packs based on best practices for tracking network fabric as well as both Microsoft and 3rd-party applications and services. In addition, Progent can provide responsive remote or onsite troubleshooting to help you to fix serious issues uncovered by Microsoft SCOM 2012.
Top Quality Meraki MR30H Access Point Technical Support
24 Hour Meraki Wi-Fi AP Integration Services
Progent's Cisco-certified Wi-Fi networking experts offer remote and on-premises consulting and troubleshooting services to assist your organization to design, configure, administer, optimize, and repair wireless deployments that incorporate Cisco's Meraki access points. Progent can also assist you to plan and implement hybrid environments that combine local and cloud-hosted resources and that provide easy access, advanced security, streamlined management, and dependable operation for all your wired and wireless endpoints.
Select Topic: