Overview – SOE PatchTT November 2015

So component have two parts as below: Overview SOE PatchTT is a policy based tool that allows to proactively monitoring patches and software updates by analysis, and report required patch compliance across enterprise. It works on client server architecture, i.e. client side collects data and send it to the server for computation and representation. So component have two parts as below: PatchTT Server (Installed on TI Presentation Server). PatchTT Client (Installed on all Clients).

Features and Benefits Automated distribution and centralized management of monthly baseline and other (custom, cumulative etc.) policies in complete infrastructure. Automated distribution of baseline patches in complete infrastructure. Intelligence to report vulnerabilities as per patch dependency defined in policy. Compliance computation on the basis of applicable patch count or host count in the registered group. Report remediation requirement by tracking patches against policy activated on servers centrally. Multiple Policies applicable on single server. Feature to define custom patch security baseline policy, to benchmark system’s vulnerability and standards. Facilitate proactive management for complete infrastructure with secure, centralized and optimal method. Implement a single reporting framework for distributed, heterogeneous UNIX server’s i.e. same solution for AIX, Linux, HP-UX and Solaris. Compliance summary on the basis of various categories, i.e. patch severity and host operating system, etc. Pictorial flash graphs for management summary.

PatchTT v.2.0-2 Highlights Client Enhancements: Server Enhancements: Enhancement to detect operating system and os version information of Ubuntu 12.04 LTS and 14.04 LTS servers. Enhancement to collect installed patch list information from Ubuntu 12.04 LTS and 14.04 LTS servers. Enhancement to scan and track patch status from Ubuntu 12.04 LTS and 14.04 LTS servers. Added support to handle patch exclusion for Ubuntu 12.04 LTS and 14.04 LTS patches. Included Last Patch Applied Information Included check to Activate the latest policy on upgrade. Server Enhancements: Added support to process, upload and report installed patch information in presentation server. Enhancement to import Ubuntu patch policy into the database along with the .csv policy creation, to get distributed till the end clients for scanning and reporting. Enhancement to process and upload the Ubuntu patch scanning report in the presentation

PatchTT Architecture SOE Tools Installed on the Various Components PatchTT Client PatchTT Data transfer via POLL /PUSH mode with SW Deploy enable TI PS TI SFS PatchTT Data transfer via POLL /PUSH mode with SW Deploy enable PatchTT Client Data Transfer via POLL/PUSH Mode with SW Deploy enable Data Transfer via POLL/PUSH Mode with SW Deploy enable Via POLL /PUSH mode with SW Deploy enable PatchTT Data transfer PatchTT Client SOE Tools Installed on the Various Components PatchTT Client : PatchTT Client and csc_ti client with SW Deploy Enable. TI SFS : csc_ti server. TI PS : csc_ti server, Perl PS, Auto_config server12.0-1 or higher and PatchTT Server.

PatchTT Architecture for Patch Distribution

Policy Creation and Publish Below is the sequence for creation and publish of SOE Baseline and All patch policy : Every month release security patches and bug fixes has been collected from Vendor Sites, i.e. Oracle, Red Hat , etc. Policy has been created by UnixSOE team in required format and published at https://unixsoe.csc.com/ and Distribution servers. Sample Policy file:

Policy Import SOE Baseline and All Patch Policy could be imported via PatchTT server script named “import_patch.pl”. Usage of script have been shown below:

Available Reports Main categories of reports available on PatchTT server as below: Account Based: Summary Report Baseline Patch Compliance Compliance Progress 2D Report Custom Patch Compliance Monthly All Patch Compliance Patch Compliance Trend Baseline Patch Compliance Details Cumulative Patch Compliance Details Custom Patch Compliance Details Monthly All Patch Compliance Details Install Patch List Patch Scan Raw Report Missing Patch Status Summary Patch Compliance Detailed Report Host Based: Patch Status (Last Month) Report Network Services Report Packages Installed Report Patches Applied Report Active Policies Configuration Based: Exclude Servers from PatchTT Exclude Rules for Servers Manage PatchTT Policies NOTE: Few major reports shown below, please refer PatchTT User Guide for detailed information.

Summary Report This report provides applied and missing patch count summary as per SOE baseline patching policy for last month for the given servers.

Baseline Patch Compliance This report provides applied and missing patch count summary along with patch compliance for a particular month.

Compliance Progress 2D Report This report provides last six month compliance for all the registered accounts. It could be used for tracking the compliance progress for last six months in a particular account, to take corrective actions for making environment secure and robust.

Custom Patch Compliance This report provides missing and applied patch count summary along with percentage compliance for the registered accounts, as per custom policy.

Monthly All Patch Compliance This report provides missing and applied patch count summary along with percentage compliance for the registered accounts, on the basis of “All patch policy” release.

Patch Compliance Trend This report provides account based patch scan historical view for available policies. It also shows, selected policy compliance line chart for an account.

Baseline Patch Compliance Details This report used to generate host level percentage compliance on the basis of selected ‘Baseline’ policy for an account.

Cumulative Patch Compliance Details This report used to generate host level percentage compliance on the basis of selected ‘Cumulative’ policy for an account.

Custom Patch Compliance Details This report used to generate host level percentage compliance on the basis of selected ‘Custom’ policy for an account.

Monthly All Patch Compliance Details This report used to generate host level percentage compliance on the basis of selected ‘All Patch’ policy for an account.

Installed Patch List This report provides installed patches count. On drill down complete list of Installed patches with some more details for the selected host would be available.

Patch Scan Raw Report This report used to show all the scan results of selected policy for an account in raw format ( without any processing or calculation at server end).

Missing Patch Status Summary This report provides account based missing patch list with host count on which those patches are applicable and missing.

Patch Compliance Detailed Report This report provides account based patch compliance detailed report, which consists total applicable patch list and missing patch list per host in a summarized format.

Patch Status Report This is a host-based report which provide last month SOE Baseline patch status in the selected host.

Network Details Report This is a Host Based report Network Details Report This is a Host Based report. It shows list of open ports, protocol and their respective service name in the host.

Packages Installed Report This is a host-based report which provide installed packages list on a particular host.

Applied Patch Report This is a host-based report which provide applied patch list on a particular host.

Active Policies This report shows activated cumulative and custom policy status on the selected host, i.e. Reporting, Not Reported and Not Applicable.

Known Limitation “Patch Compliance Details (One Row Per Server)” report have know limitation of truncation while excel download. The truncation only affects the display - all of the patches are listed in the cell, but are not visible in excel. We could access the data by below ways : 1. “Copy" the cell in Excel then "paste" into MS Word (gives one patch per line - whereas notepad loses line feeds) 2. The online report lists everything

Solution Pack Unix SOE & TI Services Questions & Feedback Product Support Helpline unixsoe@csc.com EMEA Platform Service Centre Unix & Linux Server Solutions Team