1. Welcome
Innovative Endpoint Management: Vulnerability Management, Patching, OS-Upgrades and Software Distribution
Jonathan Lange
baramundi software

2. The Endpoint Management Cycle
OS Install
Software Distribution
Vulnerability Assessment
Patching

3. OS Installation

4. Key Challenges Key Challenges
New Windows 10 version released every 6 months
Key
Challenges
Diverse hardware landscapes cause driver issues
Deploying Windows 10 Inplace – Upgrades require local admin rights
Huge time invest necessary to keep images up-to-date

5. Group-Specific Modular Installations
Steps:
1. Backup user-data
2. Wipe
3. Install OS (incl. Drivers) or Inplace-Upgrade
4. Patch
5. Install standard software
6. Install OU-specific software
7. Restore user-data

6. Benefits User-specific restore possible in less then 45min
Full support for Windows 10 in-place upgrades
Less storage capacity required
Enormous hardware configuration flexibility
No dedicated time invest necessary for image-care

7. Software Deployment & The Automation Studio

8. DEPLOYMENT OF DIFFERENT SOFTWARE TYPES
General Invest
Proprietary installation
High time invest
10 %
Additional install engines (Silent Setup)
20-30%
Medium time invest
Microsoft Installer (MSI)
Lower time invest
Software deployment in companies
*** Foreword *** I always explain that no repackaging is necessary with baramundi. The bMS is used to automate and not repackage. A software installer has the necessary intelligence that allows it to install the software today on Windows 7, and tomorrow on Windows 10. During repackaging, this intelligence is destroyed and one has to always install a new package for Windows 7, 32-/64-bit, Server 2012/2016 etc. This increases the effort required by a factor of 1:4.
I always explain Managed Software (MSW) beforehand: we automate every update and get every version change ready for release within hours (including major releases). Unlike all the others (Secunia, Patchlink, Shavlik), we also prepare the initial installation so that it is ready for deployment.
*** slide 1 ***
Looking at the different software installers in companies, we can more or less see the following breakdown:
50-60% are MSI, Microsoft Software Installer (these can be deployed by anyone, even Microsoft ;) )
30-40% are additional common installers such as Nullsoft, SFX…
10% are proprietary installers, which for the most part have been developed by the producers themselves, e.g. SAP or similar.
*** slide 2 ***
If you manually install everything, i.e. PC for PC or Server for Server (sneaker network), then you have your hands full.
Deployment with MSIs is probably the easiest method, proprietary installers much harder.
*** slide 3 ***
If you use a repackaging tool and an SCCM or board tool (repackaging and GPO / Group Policy), then you can first off only deploy MSI‘s (possibly a little more), the rest must still be repackaged or manually deployed.
Repackaging means *see foreword*
*** slide 4 ***
Our competitors can offer you a little more than SCCM, such as supporting the “additional installers”, but it all goes wrong with the proprietary installers. Another difference is that the “3rd party patching” systems of others only ever prepare minor releases. For some of them you even have to manually download the patches and scripts from their forum and integrate them. With MSW, we’re talking a short selection in the catalog with bMS already downloading the original installer and the corresponding bds (baramundi deploy script) and it is ready for deployment. Possible options of a package have mostly already been entered during the first major release (server name, proxies, etc.).
*** slide 5 *** baramundi
The baramundi Application Wizard recognizes the installer in question and offers the best possible automation method available. In addition, not only less effort, but also the timely deployment of patches via MSW can be guaranteed.
Everything that is not recognized as a supported installer can be run once via the Automation Studio as a MS Windows Surface Record and then played on thousands of endpoints (User Account Control / UAC always active // mouse and keyboard for the user locked).
50-60%
Amount of products

9. Software Deployment: Non-MSI/MSI Packages
Wizard based
No repackaging required
Automate standard .exe installers within seconds for large-scale deployments

10. Software Deployment: Automating Legacy and other Complicated Installs
Deploy complicated non-standard installs with major customization needs
Automate installs by automating the GUI
Perform post-install steps like .reg-key changes, copying files, changing values in .ini-files
Perform all these actions reliably and within minutes

11. Benefits Less know-how required Large time- and resource savings
Drastically improve response times
Higher level of customization possible
Make non-Standard applications available to your users without big efforts

12. Vulnerability and Patch Management

13. Key Challenges Key Challenges Which patch version do I exactly need?
How urgently do I need to deploy a patch?
How do I patch systems outside of my network?
Key
Challenges
How do I patch non-standard applications efficiently?
How can I regulate bandwidth use?

14. Vulnerability Scanning

15. Automated Patching for…
Microsoft Patches
3rd party patches for standard products
Individual patches

16. Timing and Distribution Options
Instant
WakeOnLAN
At Shutdown
User Interaction
Time Exclusions

17. Benefits Quick Patch availability
Large number of patches and versions available
Bandwidth- and time-controlled distribution
Automated thorough assessment of urgency (Compliance)
Pre-tested patches concerning installation and OS-compatibility

18. Endpoints at remote sites
OUR TOPOLOGY
Simple and powerful
baramundi services
Windows PCs
Mobile Devices
One controlling server
Gateway
Database
Depot
SW Depot
Local endpoints
Bei der Folie bitte 3-Stufig animieren.
LAN+baramundi Services
Remote Sites
Gateway+Cloud
Endpoints at remote sites
LAN
Remote sites

19. baramundi – Quick Facts40
18 years experience in Endpoint Management
25 percent growth rate annually over the last 8 years
Over 2,500 customers worldwide through all industries
HQ in Boston, USA and Augsburg, Germany
Ich hätte in der Folie gerne die Karte oder etwas ähnliches, was symbolisiert, dass wir ein global aktives Unternehmen sind. Evtl. mit einer Lupe auf UK und UK Flagge irgendwo? 3

20. Thank you for listening!
Any Questions?

21. We hope to see you again soon.
Jonathan Lange | Executive Sales Manager