Note: Creating a custom Advanced Patching Strategies is an advanced task. We strongly recommend using our v2 Strategy template or reaching out to our Tenable Customer Support team for assistance.

A Patching Strategy template contains specific fields that you can configure to make a unique Patching Strategy for your environment. Tenable recommends opening an existing strategy that contains most of the configuration items you want, and then saving it with a new name and description. The configuration options are the same whether you create a new strategy or modify an existing strategy.

For more information regarding templates and and a full list of settings:

• Advanced Patching Strategies templates

• Advanced Patching Strategy settings

Create Advanced Patching Strategy From a Template

1. Select Strategies in the left navigation menu.

2. Select Initial Patch Manager Approval folder.

3. Select Initial Approval - Immediate Mandatory Deployment in the name column.

4. Select More in the upper left corner of the template, and then select Save As:

   1. Enter a unique name that reflects what the strategy does conceptually. For example, Initial Approval - Immediate Mandatory Deployment - Windows.

   2. Select Save as.

General settings

1. Enter a detailed Description of your new template or keep the existing detail.

2. Toggle ON Strategy Enabled.

   

Products settings

1. Toggle ON Include All Products.

2. Toggle OFF Included Platforms.

3. Check Windows.

   

Deployment Settings

1. Click Browse next to Deployment Wave.

   1. Select Single Wave - All Clients from the table.

   2. Click OK.

2. Use the default Deployment Bot Runtimes and Patching Process Settings.

   

3. Click Save.

Run Strategy

Once you have completed the step above and successfully created a new Patching Strategy, you can then run your Strategy to test if any applicable patches can be deployed.

1. Select Run Strategy from the More dropdown.

2. This runs your strategy without waiting for the specified schedule.

Note: You may get receive a prompt that saying No applicable patches for <patchingstrategy>. If this is the case you may not see this patching strategy appear in Approval Requests until there are applicable patches available.

Flex Controls and Approval Requests

1. Select Advanced Settings > Flex Controls > Cycle Operations > Patching Cycles from the side navigation.

2. In the Running Patch Processes table your Patching Strategy will have the In-progress status.

3. Select the Approval Requests in the left navigation menu.

4. Select your strategy from the table.

5. Select Approve.

   

You can wait until the patch scheduled time for deployment, or you can start the deployment manually.

Deploy your patching strategy manually

1. Select Flex Controls > Patching Cycles, and then select the name of the Patching Strategy to open the Cycle Information.

2. Select Play under Cycle Information, and then select Close.

3. Select your patching strategy from the table to view details about the patching process.