Chat now with support
Chat mit Support

KACE Systems Management Appliance 15.0 - KACE Service Desk Administration Guide

About the KACE Service Desk Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Managing user notifications Enable Two-Factor Authentication for all users Verifying port settings, NTP service, and website access Configuring network and security settings Configuring session timeout settings Configuring locale settings Configuring the default theme Configure data sharing preferences About DIACAP compliance requirements Enable API Access for the appliance Disable API Access for the appliance Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings Configuring Content Security Policy
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Deploying the KACE Agent to managed devices Using Replication Shares Managing credentials Configuring assets
About the Asset Management component Using the Asset Management Dashboard About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations Managing contracts Managing licenses Managing purchase records
Setting up License Compliance Managing License Compliance Setting up Service Desk Configure the Cache Lifetime for Service Desk widgets Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using the Inventory Dashboard Work with Inventory Dashboard Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Registering KACE Agent with the appliance Provisioning the KACE Agent Manually deploying the KACE Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates About Remote Control Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Associate Managed Installations with Cataloged Software Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Using Task Chains
Patching devices and maintaining security
Using the Security Dashboard About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Windows Feature Updates Managing Dell devices and updates Managing Linux package upgrades Manage quarantined file attachments
Using reports and scheduling notifications Monitoring devices
Getting started with monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Using the Service Desk Dashboard Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Merging tickets Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the appliance
Appendixes Glossary About us Legal notices

Leveraging CVSS and EPSS for effective Patching

Leveraging CVSS and EPSS for effective Patching

The Patch Catalog includes Common Vulnerability Scoring System (CVSS) and Exploit Prediction Scoring System (EPSS) scores. Utilizing this enhances the ability to prioritize vulnerabilities for effective patch management. The combined use of CVSS and EPSS allows administrators to make informed decisions, prioritize critical updates, and improve overall endpoint security.

What is CVSS, EPSS, and CVE?

CVSS:

•
provides a standardized metric for assessing the severity of vulnerabilities.
•
CVSS v3.1 scores range from 0.0 to 10.0, indicating the potential impact on systems.

EPSS:

•
estimates the probability of vulnerability being exploited within the next 30 days.
•
expressed as a percentage from 0.0% to 100%, indicating the likelihood of exploitation.

CVE:

CVE (Common Vulnerabilities and Exposures) help standardize vulnerability references across platforms and tools, making it easier to assess and track risks.

By integrating CVSS and EPSS scores into patch filtering criteria, an administrator can:

•
Assess the severity and exploitability of each patch.
•
Filter and prioritize patches based on risk indicators. The CVSS Score (Critical, High, Medium, Low) and the EPSS Score for patches included in patch filter determines which patches need urgent attention in the environment.
•
Filter patches based on specific CVSS and EPSS values, ensuring a precise and prioritized approach to vulnerability management.
•
Take focused remediation actions on high-risk devices.

What can you do with the CVE, CVSS, and EPSS?

1.
You can view detailed vulnerability data in a CVE Information section on the Patch Detail page.
* 
NOTE: If a patch is linked with one or more CVEs, the Patch Detail page displays relevant data in the CVE Information section. If no vulnerabilities are associated, this section remains blank.
2.
You can filter Patches on the Patch List page, using the options from the View By drop-down list. The filters are as follows:
◦
CVSS Base Score
◦
Known Exploit
◦
Missing Patches with CVSS Score
3.
You can create widgets on the Dashboard page to display devices missing patches with Critical or High CVSS scores, devices affected by patches and so on.

Related Information:

Click the links for more information on CVSS or EPSS.

Viewing patch statistics and logs

Viewing patch statistics and logs

View patch statistics
View the patch log

Patch statistics and logs provide an overview of appliance patching tasks.

View patch statistics

View patch statistics

You can view patch statistics on the Patch Management panel.

1.
Go to the Patch Management panel.
a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Security, then click Patch Management.
The Patch Management panel appears, showing patch statistics.

View the patch log

View the patch log

You can view the patch log to check for errors in the patch download process.

1.
Go to the appliance Control Panel:
◦
If the Organization component is not enabled on the appliance, log in to the appliance Administrator Console, https://appliance_hostname/admin, then select Settings > Control Panel.
◦
If the Organization component is enabled on the appliance, log in to the appliance System Administration Console, https://appliance_hostname/system, or select System in the drop-down list in the top-right corner of the page, then select Settings > Control Panel.
2.
On the left navigation bar, click Logs to display the Logs page.
3.
In the Log drop-down list, select Patch Download Log.

The patch log appears.

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen