Patch Management Solution

 View Only
  • 1.  Patch problems in hierarchy

    Posted Jan 10, 2023 04:03 PM
    I have a parent and a child NS in hierarchy. The child NS doesn't have access to the internet.
    Everything works except download of patch packages. Filters, Policy and software packages are downloaded from the parent.

    The replication of import patch data works and the Windows System Assessment scan are running on the clients on the child NS.
    The compliance report show missing patches on the child NS, but there are no packages downloaded from the parent NS - even that there are policy enabled to install.
    On the child NS its trying to download the patches from the internet - instead of downloading it from the parent. 

    On the child agents. Software Updates show all patches downloaded on the parent NS are listed as pending.

    What is the problem? 

  • 2.  RE: Patch problems in hierarchy

    Broadcom Employee
    Posted Jan 10, 2023 06:13 PM
    Hi Steen,
    this is by design - Patch Management solution doesn't replicate software update binaries from parent to child, they are downloaded from the software vendor directly by the child Notification Server.
    From Patch Management documentation: "Replicating software update policies does not replicate the actual software update files. Child Notification Server computers download the needed software update files from the vendor." --

  • 3.  RE: Patch problems in hierarchy

    Posted Jan 12, 2023 03:04 AM
    Hi Dmitri

    Thanks for the info. I couldn't read it from the KB's, so I thought the download would works as software packages.

  • 4.  RE: Patch problems in hierarchy

    Broadcom Employee
    Posted Jan 10, 2023 06:19 PM
    You may check the following workaround for Patch Management solution on Notification servers that don't have the Internet access (you would need only steps related to software update binaries):