Security patching for HP Agents

[Pagnotta]

Dear All,

I've a question regarding the patching "in terms of security" of HP agents used by HP SIM or thers HP tools.
Is there a way to be informed about critical patches released that must be applied ? And furthermore, is it possible to deploy such patches through "HP SIM" ?

Regards
Angelo

[David Claypool]

HP's Software Security Response Team maintains a close relationship with CERT and other agencies regarding this matter. Additionally, ProLiant management software undergoes security audits by outside agencies. However, since we rely on many open source libraries, our products may be affected from time to time.

You may sign up for automatic notification of drivers and alerts at http://h30046.www3.hp.com/subhub.php (select â driver & support alerts/notificationsâ then Servers/HP Server Management Software/HP Management Applications).

Additionally, you can review notices for ProLiant management software at http://www.hp.com/servers/manage --> Software Security Customer Advisories.

You may also be interested in knowing about the new ProLiant Essentials Vulnerability and Patch Management Pack which incorporates a security vulnerability scanner that can be customized for your needs and also distribute patches for Windows and RedHat Linux. More info at http://www.hp.com/servers/manage --> Vulnerability and Patch Management

[Pagnotta]

Is the plug-in "Vulnérability & Patch Management" for "HP SIM" free ? Does it come with the new release of "HP SIM" or do I have to pay an extra licence ?

Moreover, does this product allow the patching of both HP agents and Windows software ?

Regar

[David Claypool]

Version Control provides updates for software and firmware provided by HP. It is free.

The Vulnerability and Patch Management Pack provides patching for software that originates with Microsoft or RedHat. HP SIM 4.2 comes with 2 evaluation licenses. Additional licenses are US$249, and until 28 Feb there is a buy 1 get 1 free offer.

These 2 processes are separate to match with most customers' procedures. When HP publishes something new, most customers don't immediately install it unless tehre is a patch for a problem they have experienced. Many skip 1 or more versions between updates. In the case of security patching, that is almost always immediately applied.

[Pagnotta]

Hello,

What do you mean by additional licence ? Is it a licence per server ? Or does this additional licence covers a number of systems ?

Regards
Angelo

[David Claypool]

License information is available from http://www.hp.com/servers/manage --> Vulnerability and Patch Management Pack