4.7.1 Approvals - VulnDetect Technical Guide

4.7.1 Approvals - VulnDetect Technical Guide

Approvals Overview

On the Approvals page, users manage how updates are approved and deployed for Applications and Windows Updates.
The page is divided into two Tabs:
  1. Applications
  2. Windows Update

Applications Tab

The Applications tab shows a top-level list of Applications, Approval status and the recommended version.

You can manage the approvals of selected applications with the follwing buttons:
  1.  to automatically deploy all future updates.
  2.  to manually approve updates.
  3.  to disable updates from being made available.
  4.  to inherit the system default or site default action if no system default* is defined the Application will receive the approval status:
Info
*To know more about system approvals and site configuration please head to the section
  1.  to make a comment on a given approval, or if done on a Tag it allows customization of the approval
  2. An application can also have these "Tags" in front of their name:
    1.  Work-In-Progress means that the package is technically functional, but not yet broadly validated across different customer environments. We flag it as WIP when we want real-world feedback before recommending large-scale rollout.
    2.  This Application has an information page in the SecTeer VulnDetect Community Forum. Click the "" will link you to the forum page.


Filter Application Approvals

On the Approvals Page, you can filter the application list based on:
  1. Applications Name
  2. Approval Status
    1. Using the  and a drop menu will show all the options to select
    2. Select the approval Status to filter



Windows Update Tab

On the Approvals page, you can use the Windows Updates tab to view a list of available updates, their approval status and the associated KB article reference number.


Windows Update approvals function similarly to Application approvals; however, there are key differences.

Windows updates in SecTeer VulnDetect are applied according to the Windows Update Configuration.
You can manage the approvals of selected applications with the following buttons:
  1.  to manually approve update.
  2.  to disable updates from being made available, however depending on the Windows Update configuration on each host, the native Microsoft Windows Update service(WSUS) may still install updates independently of SecTeer VulnDetect.
  3. to inherit the system default or site default action* if no system default is defined the Windows Update will receive the approval status: 
Info
*To know more about system approvals and site configuration please head to the section
  1.  to make a comment on the given approval.
Windows Update approvals cannot be automated.
Unlike third-party applications, Windows update are not versioned within the approval system, as a result:
  1. A windows Update approval does not become Out-of-Date.
  2. Setting an approval to Approved is sufficient for the update to be applied to all applicable hosts.


Filter Windows Update Approvals

On the Approvals page, you can filter the Windows Updates list based on:

  1. Windows Update Name
  2. Approval Status
    1. Using the   and a drop menu will show all the options to select
    2. Select the Approval Status to filter.