Flex Controls

Flex Control settings include the functions listed in the table below. These options provide added flexibility when managing your patching environment.

Blocklisting

Provides an extra level of protection for customer devices and patching processes. Prevents the download and installation of potentially damaging content to customer devices. See Blocklisting.

Cycle Operations

Includes access to Patching, Deployment, and Rollout Cycle details. Details include a graphical representation of any cycles in progress and a table that lists details for each cycle in progress. Also includes a graphical representation of previously completed cycles and a table that lists a each completed cycle. Select each completed cycle to review details. See Cycle Operations.

Exceptions

Allows administrators to exclude Business Units from specific updates on certain products or to use settings to maintain all endpoints at a specific version of a product. See Patching Exceptions.Patching Exceptions

Global Pause

Use Global Pause to pause or resume all patching activities for specified software products and patches. Affects all clients contained in one or more specified Business Units. See Global Pause.

Rollbacks

Create a Rollback object to rollback a patch to a previous version. See Rollbacks.

Blocklisting

Tenable Patch Management includes an extra level of protection for customer devices and patching processes called Blocklisting. The Tenable Patch Management metadata team, as always, reviews all metadata that vendors provide for their new products and patches to verify relevance and integrity.

When a vendor releases products and patches, the Tenable Patch Management metadata team reviews the content and determines whether the patch has any issues that might cause unexpected behavior. The metadata team block lists patches and products that have issues and automatically creates an exclusion for the patch on all clients. Blocklisting prevents the download and installation of potentially damaging content to customer devices.

Blocklist Settings

The Blocklist Settings workspace provides configuration options for Notifications and Communication Providers. The Notification Chains and Communication Providers configured from this workspace identify the process and delivery of communications related to blocklisted patches. See Managing Blocklist Notification Settings.

UUID-bfb4e477-5417-41ae-6b49-206bfce5bd40.png

Managing Blocklist Notification Settings

Set categories of notification by selecting a Notification Chain to use when Tenable Patch Management blocklists a patch/release. Select the same or different Notification Chain to notify administrators when you blocklist a patch or a release. You can also select specific communication providers for either category of notification.

View Blocklist Settings

Blocklist Settings include notification details for blocklisted patches including Notification Chains and Communication Providers. You can use the Tenable Patch Management provided details (Tenable Patch Management Curated) or create your own (Customer). Update these settings as needed for your notification preferences.

  1. Mouse over or select Flex Controls on the Home menu, and then select Blocklisting > Blocklisted Patches.

    UUID-8904b9ad-8198-8f34-624d-e90fce9698a8.png
  2. Select Settings to view the Blocklist Settings workspace.

    UUID-bfb4e477-5417-41ae-6b49-206bfce5bd40.png
Select a Notification Chain for Blocklisted Patches
  1. Navigate to Blocklist Settings .

  2. Select Browse next to either Tenable Patch Management Curated Chain or the Customer Chain to list the available Notification Chains.If you need to create a new Notification Chain for these purposes, see Create a Notification Chain .

  3. Select the Name of the Notification Chain you want to use for whichever field you are editing – the Tenable Patch Management Curated Chain or the Customer Chain.

  4. Select Add Notification Chain on the bottom left of the dialog.

Choose Communication Providers for Notification Chains
  1. Navigate to Blocklist SettingsConfigure Blocklist Settings.

  2. Select + Add Communication Providers for either Tenable Patch Management Curated Communication Providers or Customer Communication Providers from the Blocklist Settings.

  3. Select one or more Names from the Communications Provider table, and then click Add Communication Providers at the bottom left of the dialog.

    If you need to add providers to the table, see Create a New Communication Provider .

Cycle Operations

Includes access to Patching, Deployment, and Rollout Cycle details. Details include a graphical representation of any cycles in progress and a table that lists details for each cycle in progress. Also includes a graphical representation of previously completed cycles and a table that lists a each completed cycle. Select each completed cycle to review details.

Details available for each cycle type include the following:

  • Cycle Information: Provides general information about the Patch Process such as the Current State, the creation date and time, and the Patch Process schedule. This section also contains controls to manually start, stop, or delay a Patch Process.

  • Overall Metrics: This section contains information about the scope of the running process. This screen shows the number of business units and devices affected by this Patch Process, along with Urgency information.

  • Cycle History: This section gives a historical perspective of the results of past runs. This view will show the number of devices that previously were successful, failed, aborted, timed out, or errored.

  • Patch Approvals: One of the key functions of a Patch Process is to execute Approval Chains as defined in the Patching Strategy or Business Unit. This section displays pending Approvals. You cannot grant approvals from this view.

  • Cycle Logs: Display events relating to the Patch Process. For instance, the Cycle Operation Logs can show the administrator who manually started a Patch Cycle and at what time.

Patching Cycles

This dashboard shows information about the active Patch Processes in the environment. Patch Processes represent the workflow that models and performs the defined patching routine. As part of the overall Patching Strategy, Patch Deployment Bots use configured criteria to identify patches that apply to endpoints. Once approved, the Bot submits those patches to the Patch Process, which creates a Patch Cycle. The Patch Cycle executes at either a scheduled time or you can start it manually.

View the Running Patch Cycles
  1. Mouse over or click Flex Controls on the Home menu, and then select Cycle Operations > Patching Cycles.

    UUID-c2a581ec-18d3-4406-b731-5a9e567d4005.png

    This opens to the Running tab of the Patching Cycles workspace:

    UUID-3ca9349c-e0d6-3f2e-d2f3-39ca9d134d60.png
    • The Total Running Patch Processes widget shows an aggregate summary of all patch processes and their corresponding states (Waiting, In Progress, or Paused).

    • The Running Patch Processes table lists the running Patching Strategies by name.

  2. Enter a Patching Strategy name on the search bar above the Running Patch Processes table, and then click Search.

    UUID-9299ecd2-14e3-7d29-f421-de7e5be8cb29.png
  3. Select the Patching Strategy name in the Running Patch Processes table to see specific details about that process.

View Patching Cycle History
  1. Mouse over or click Flex Controls in the Home menu, and then select Cycle Operations > Patching Cycles.

    UUID-19133f6c-4f37-20bf-92c7-6f1d0efc1be6.png
  2. Select History on the upper left to change to the History tab:

    • The Total Finished Patch Processes widget on top shows an aggregate summary of all completed patch processes and their corresponding states (In Progress, Succeeded, Failed, Aborted, Timed Out, Error Occurred).

    • The Running Patch Processes table lists the completed patch processes by Patching Strategy name.

  3. Enter a Patching Strategy name on the search bar above the Running Patch Processes table, and then click Search.

    UUID-2fd6c612-c0f0-c00d-1d74-9d61326d29d9.png
  4. Select the Patching Strategy name in the Running Patch Processes table to see specific details about that process.

Deployment Cycles

This dashboard shows information about currently running Patch Deployment Channel Processes and the history of completed patch processes. These details show the status of all active Deployment Processes.

View the Running Deployment Cycles
  1. Mouse over or click Flex Controls in the Home menu, and then select Cycle Operations > Deployment Cycles.

    UUID-3535ef3e-b415-f438-3edc-87b4ac69246d.png

    This opens to the Running tab of the Deployment Cycles workspace:

    • The Total Running Deployments widget shows an aggregate summary of all patch processes and their corresponding states (Waiting, In Progress, or Paused).

    • The Running Deployments widget table lists the running Deployment Strategies by name.

  2. Enter a Deployment Strategy name on the search bar above the Running Patch Processes table, and then click Search.

    UUID-9299ecd2-14e3-7d29-f421-de7e5be8cb29.png
  3. Select the Deployment Strategy name in the Running Patch Processes table to see specific details about that process.

View Deployment Cycle History
  1. Mouse over or click Flex Controls in the Home menu, and then select Cycle Operations > Deployment Cycles.

    UUID-3535ef3e-b415-f438-3edc-87b4ac69246d.png
  2. Select History on the upper left to change to the History tab:

    • The Total Running Deployments widget shows an aggregate summary of all deployment processes and their corresponding states (Waiting, In Progress, or Paused).

    • The Running Deployments widget table lists the completed Deployment Strategies by name.

  3. Enter a Deployment Strategy name on the search bar above the Running Patch Processes table, and then click Search.

  4. Select the Deployment Cycle name in the Finished Deployments table to see specific details about that process.

Rollout Cycles

Rollout Processes represent the installation of Patches per Business Unit. Each Business Unit involved in the Patch Deployment includes a Rollout Cycle.

View the Running Rollout Cycles
  1. Mouse over or click Flex Controls on the Home menu, and then select Cycle Operations > Rollout Cycles.

    UUID-3271c277-eeb8-64af-00ba-a53ea04ae6ba.png

    This opens to the Running tab of the Rollout Cycles workspace:

    • The Total Running Rollout Cycles widget on top shows an aggregate summary of all running Rollout processes and their corresponding states (Waiting, In Progress, Paused).

    • The Running Rollout Cycles table lists the completed patch processes by Rollout name.

  2. Enter a Rollout Cycle name on the search bar above the Running Rollout Processes table, and then click Search.

  3. Select the Rollout Cycle name in the Running Rollout Processes table to see specific details about that process.

View Rollout Cycle History
  1. Mouse over or click Flex Controls on the Home menu, and then select Cycle Operations > Rollout Cycles.

  2. Select History on the upper left to change to the History tab:

    • The Total Running Deployments widget shows an aggregate summary of all deployment processes and their corresponding states (Waiting, In Progress, or Paused).

    • The Running Deployments widget table lists the completed Deployment Strategies by name.

  3. Enter a Rollout Cycle name on the search bar above the Running Rollout Cycles table, and then click Search.

  4. Select the Rollout Cycle name in the Finished Cycles table to see specific details about that process.

Patching Exceptions

When Business Units require exemption from specific updates on certain products, or the entire enterprise must remain at a specific version of a product, Patching Exceptions provide a mechanism for creating and implementing the rules. Patching Exceptions provide version level patch support to give administrators granular control over patch deployment. For example, use Patching Exceptions to target and completely remove a product from an environment when the product is no longer required.

Patching Exceptions allow teams to define exceptions for specific business units or environments, create multiple exceptions under a single policy and more. This means you can manage exceptions for several patches or products simultaneously.

Using Patching Exceptions

Tenable Patch Management includes two Patching Exception options: Desired State Override and Last Allowed Version. You may choose one option only per Patching Exception. For example, create one exception to use one or more Desired State Overrides, then create another to specify Last Allowed Versions. In either case, you may choose specific Business Units as the targets of the exception.

Desired State Override Options

Last Allowed Version

Specifies a product level to consider current and ignores all later releases. When specified, the Last Allowed Version sets the state for all products so that a later version than the one specified does not install.

Create a Patching Exception

  1. Select Flex Controls from the Home menu, and then select Exceptions > Patches.

  2. Select + New on the upper-right corner to open a Patching Exception template.

  3. Name and describe the exception:

    1. Enter a descriptive Name for this exception in the Name field.

    2. Enter a detailed Description of the purpose for this exception.

  4. Select Save on the upper left to save your new template:

  5. Choose an Override Strategy:

    • If you choose Override Desired States, see Set Override Details for Patch Exception.

    • If you choose Select Last Allowed Versions, see Set Last Allowed Patch Versions.

Set Override Details for Patch Exceptions

Note: Choose only one software version per override exception.

  1. Select Override Desired States (default) as your Override Strategy in an open workspace or dialog.

    UUID-8fea4685-8e80-8963-de94-f1a3c9731e68.png
  2. Select the + next to your choice for Desired State Overrides. The example uses Mandatory Install.

  3. Select +Browse to open the table of available software:

    1. Enter a product name on the search line, and then click Search. This example uses Google Chrome.

    2. Select the product from the list, and then click OK.

      UUID-92e003b2-4771-2255-d721-96b04a571fec.png
  4. Select Save on the upper-left corner of the dialog to save your changes:

  5. Continue to Add Target Business Units.

Set Last Allowed Patch Versions

  1. Choose Select Last Allowed Versions as your Override Strategy in an open Patching Exception template. Defaults to disabled.

    UUID-3675c77b-389e-1e4c-b9fb-9a2f5279e910.png
  2. Select +Browse to select the Last Allowed Version Patches.

  3. Select Save on the upper-left corner of the dialog to save your changes:

  4. Continue to Target Business Units.

Add Target Business Units for Patch Exceptions

With Select Last Allowed Versions as your Override Strategy in under Patching Exceptions you may select one or more Business Units to which the patching exception applies. With no Business Units specified, the Patching Exception applies to all endpoints where the specified Patches apply.

  1. Select + Browse next to Target Business Units in an open Patching Exception template.

  2. Select one or more Business Units to include in the Patching Exception.

    UUID-adffe6f3-2f97-b26e-7f1c-8c8ad6ee21c9.png
  3. Select OK on the lower left corner of the dialog.

  4. Select Save on the upper left corner of the Patching Exceptions dialog to save your progress:

Global Pause

Global Pause settings take effect immediately on the clients you identify either globally or within the selected Business Units. Patch cycles continue to run as configured on the Tenable Patch Management side, and the Tenable Patch Management pauses the deployment of patches identified in the pause settings.

The Global Pause menu item provides access to both a Pause All Patching button and access to configuration details for pausing patch activity for specific products, patches, cycles, or Business Units.

When activated, Pause All Patching immediately stops all patch deployments across all licensed clients. When deactivated (Resume Patching) Tenable Patch Management revokes the Global Pause request and restores normal patching activity to all licensed clients.

In addition, you may create pause configurations for each of the following:

Paused Products : Pause patch deployments for specified products either globally or for specific Business Units.

Paused Patches : Pause patch deployments for specified patches either globally or for specific Business Units.

Paused Cycles : Pause Patching, Deployment, or Rollout Cycles either for specified Business Units or for the Business Units already targeted by the Cycle.

Paused Business Units : Pause all patches for specified Business Units.

Stop All Patching Activity Immediately

To stop all patching activity on all licensed clients in the estate, use the following steps to activate Global Pause.

  1. Select Flex Controls on the Home menu, and then select Global Pause.

    UUID-ec05cce6-49b8-3b27-76f3-a57daa108bc1.png

    This opens the Global Pause dialog:

    UUID-5fbbd55d-efbe-b3e2-3614-5a0d47ffb47c.png
  2. Select Pause All Patching.

    UUID-a3a3285d-0305-d71b-de9a-0b54ec002503.png
  3. Select Save to activate Global Pause. This immediately stops all patch deployments across all licensed clients:

    • All patch deployments in progress that have not reached an irreversible state are paused immediately.

    • All newly initiated patch deployments are paused automatically.

Resume All Paused Patching Activity Immediately

To resume all paused patching activity on all licensed clients, use the following steps to revoke a Global Pause.

  1. Select Flex Controls on the Home menu, and then select Global Pause.

    UUID-ec05cce6-49b8-3b27-76f3-a57daa108bc1.png

    This opens the Global Pause dialog:

    UUID-d7646e0d-59af-d8aa-c82d-a89ba58597d2.png
  2. Select Resume Patching.

    UUID-a3a3285d-0305-d71b-de9a-0b54ec002503.png
  3. Select Save to revoke the Global Pause. This immediately revokes the Global Pause and allows patching activity to occur as configured.

Pause Patching for Specific Objects

To stop patching activity for specific objects, such as Products, Patches, Cycles, and Business units, use the following steps to access the Pause menu items:

  1. Select Flex Controls on the Home menu, and then select Global Pause.

    UUID-ec05cce6-49b8-3b27-76f3-a57daa108bc1.png

    This opens the Pauses menu:

    UUID-5fede62d-93c5-a88d-0f9e-8a413e4e43ce.png
  2. Select the pause you want to configure. You can configure multiple types of pauses, but you must configure them separately.

    • Global Pause: Pause all patching activity immediately (Stop All Patching Activity Immediately).

    • Paused Products: Pause patch deployments for one or more products (Pause Deployment of a Specific Software Product).

    • Pause Patches: Pause deployment of a software patch or release for one or more products (Paused Patches).

    • Paused Cycles: Specify a Patching, Deployment, or Rollout cycle to pause for one or more products.

    • Pause Business Units: Pause patch deployments for one or more Business Units.

Pause Deployment of a Specific Software Product

To stop patching activity for specific software products or patches, complete the following steps:

  1. Navigate to the Pauses menu (see Pause Patching for Specific Objects), and then select Paused Products.

    This opens the Paused Products dialog:

    UUID-f17a5224-51a2-63f5-a168-3ee20b6065e8.png
    1. Select +Create Product Pause to open the Create Product Pause dialog:

      UUID-0926f8ed-2fe8-eb7b-afbc-943d85b3343a.png
    2. Select Browse to find the software product to pause.

      UUID-799ef960-171a-6f0e-7b95-d5e44e5a6c9d.png
    3. Select the software product you want to pause using either of the following methods:

      UUID-23a9c4dc-f578-0227-4e0a-43a3e8e1c181.png
      • Use the navigation tools on the bottom right to scroll through the pages and select one or more Software Products from the table.

      • Enter a product name on the search line, and then click Search to find a specific product

  2. Select Add Software Product to return to the Create Product Pause dialog, and then choose one of the following methods to proceed:

    • To create a Global Pause for the selected products, click Create Product Pause. This pauses the deployment of the selected software product on all devices in the estate.

    • To specify a pause for specific devices, continue with the next step to Add Business Units.

  3. Add or remove Business Units:

    • To remove existing Business Units, select the ellipsis (...) under Actions, and then select Remove Row.

    • To add Business Units, complete the following steps:

  4. Select Create Product Pause and then click Save to create a global pause for the selected products.

Pause Deployment of a Specific Patch

To stop patching activity for a specific patch, complete the following steps:

  1. Navigate to the Pause menu (see Pause Patching for Specific Objects), and then select Paused Patches.

    This opens the Paused Patches dialog:

    UUID-56e49829-293f-f9a4-a6f9-e4738c47c599.png
    1. Select +Create Patch Pause to open the Create Product Pause dialog, and then select Browse to find the Software patch you want to pause:

      UUID-5b35d03d-5b35-2d4f-89df-c108881bd532.png
    2. Select Browse to find the Software Patch to pause:

      UUID-ac01334f-538e-f326-4b6b-b899d796dba0.png
    3. Select the patch you want to pause:

      UUID-1097f36f-7c7b-b35f-a6fd-7bb11671f475.png
  2. Select Add Installable Software Product to return to the Create Patch Pause dialog, and then choose one of the following methods to proceed:

    • To create a Global Pause for the selected products, click Create Patch Pause. This pauses the deployment of the selected software patch on all devices in the estate.

    • To specify a pause for specific devices, continue with the next step to Add Business Units.

  3. Add or remove Business Units:

    • To remove existing Business Units, select the ellipsis (...) under Actions, and then select Remove Row.

    • To add Business Units, complete the following steps:

  4. Select Create Patch Pause and then click Save to create a global pause for the selected patch.

Pause Specific Cycles

Tenable Patch Management allows you to create Patching Cycles, Deployment Cycles, and Rollout Cycles to customize patching in your estate. Global Pause provides a way to pause these cycles when necessary. You may create a pause for one cycle at a time.

  • Paused Cycles - Patching

  • Paused Cycles - Deployment

  • Paused Cycles - Rollout

Note: Pausing a cycle that is currently in a WAITING state (has not run yet), prevents that cycle from running until you remove the pause. This is the only server-side behavior related to pausing.

Pause a Patching Cycle

To stop patching activity for a specific patching cycle, complete the following steps:

  1. Navigate to the Pauses menu (see Pause Patching for Specific Objects), and then select Paused Cycles.

    This opens the Paused Cycles dialog to the Patching tab:

    UUID-5c063a43-8c02-61ad-5d0d-a814364525b0.png
  2. Select +Create Cycle Pause to open the Create Cycle Pause dialog, and then click Browse.

    UUID-83852241-7d76-e6c9-8c5c-fc90bd2ebbed.png
  3. Search for and select the patching cycle you want to pause using one of the methods described below:

    Note: Cycles do not appear unless you have created them previously. If you do not have a cycle to stop, do not complete this section.

    UUID-b370524b-69e9-a0fe-1185-34546d8be6e7.png
    • Use the navigation tools on the bottom right to scroll through the pages to find and select a Patching Cycle from the table.

    • Enter a cycle name on the search line, and then click Search to find and select a specific cycle.

  4. Select OK, and then choose one of the following options to proceed:

    • To create a Global Pause for the selected cycle, skip to Step 6. This pauses the deployment of the selected cycle on all devices in the estate.

    • To specify a pause for specific devices, continue with the next step to Add Business Units.

  5. Add or remove Business Units:

    • To remove existing Business Units, select the ellipsis (...) under Actions, and then select Remove Row.

    • To add Business Units, complete the following steps:

  6. Select Create Cycle Pause and then click Save to create a pause for the selected cycle.

Pause a Deployment Cycle

To stop all patching activity for a specific deployment cycle, complete the following steps:

  1. Navigate to the Pauses menu (see Pause Patching for Specific Objects), and then select Paused Cycles.

    This opens the Paused Cycles dialog to the Deployment tab:

    UUID-d04a9021-09a7-aaf0-7f86-2fe739a93ce2.png
  2. Select +Create Cycle Pause. This opens the Create Cycle Pause dialog:

    UUID-83852241-7d76-e6c9-8c5c-fc90bd2ebbed.png
  3. Select Browse to open the Select a Deployment Cycle dialog, and then use one of the methods below to find and select a cycle.

    Note: Cycles do not appear unless you have created them previously. If you do not have a cycle to pause, choose a different pause method.

    UUID-e3eafe5e-d869-95f2-0770-e8cd5ade8c7e.png
    • Use the navigation tools on the bottom right to scroll through the pages to find and select a cycle from the table.

    • Enter a cycle name on the search line, and then click Search to find and select a specific cycle

  4. Select OK to save your entry, and then choose one of the following options to proceed:

    • To create a Global Pause for the selected cycle, skip to Step 6. This pauses the deployment of the selected software product on all devices in the estate.

    • To specify a pause for specific devices, continue with the next step to Add Business Units.

  5. Add or remove Business Units:

    • To remove existing Business Units, select the ellipsis (...) under Actions, and then select Remove Row.

    • To add Business Units, complete the following steps:

  6. Select Create Cycle Pause and then click Save to create a pause for the selected cycle.

Pause a Rollout Cycle

To stop all patching activity for a specific rollout cycle, complete the following steps:

  1. Navigate to the Pauses menu (see Pause Patching for Specific Objects), and then select Paused Cycles.

    This opens the Paused Cycles dialog to the Rollout tab:

    UUID-bbe13e6b-c756-2352-9975-7318abde284f.png
  2. Select +Create Cycle Pause. This opens the Create Cycle Pause dialog:

    UUID-83852241-7d76-e6c9-8c5c-fc90bd2ebbed.png
  3. Select Browse to select the rollout cycle you want to pause. This opens the Select a Rollout Cycle dialog.

    Note: Cycles do not appear unless you have created them previously. If you do not have a cycle to stop, do not complete this section.

    UUID-b370524b-69e9-a0fe-1185-34546d8be6e7.png
    • Use the navigation tools on the bottom right to scroll through the pages to find and select a Rollout Cycle from the table.

    • Enter a cycle name on the search line, and then click Search to find and select a specific cycle.

  4. Select OK , and then choose one of the following options to proceed:

    • To create a Global Pause for the selected cycle, skip to Step 6. This pauses the deployment of the selected software product on all devices in the estate.

    • To specify a pause for specific devices, continue with the next step to Add Business Units.

  5. Add or remove Business Units:

    • To remove existing Business Units, select the ellipsis (...) under Actions, and then select Remove Row.

    • To add Business Units, complete the following steps:

  6. Select Create Cycle Pause and then click Save to create a pause for the selected rollout cycle.

Pause Deployment to a Business Unit

To stop patching deployment for specific business units, complete the following steps:

  1. Navigate to the Pauses menu (see Pause Patching for Specific Objects), and then select Paused Business Units.

    This opens the Paused Business Units dialog:

    UUID-a43239ce-3a4b-f071-b1ad-6938ce0e6be5.png
  2. Add or remove Business Units:

    • To remove existing Business Units, select the ellipsis (...) under Actions, and then select Remove Row.

    • To add Business Units, complete the following steps:

  3. Select Save to create a global pause for the selected business unit or business units.

Rollbacks Overview

The Rollbacks feature of Tenable Patch Management allows you to rollback one or more patches or releases to a previous version (Rollback), or you may rollback one or more patches or releases to an earlier, non-sequential version (Rollback to Version).

In either case, you may configure Rollback activities across your entire estate or limit a rollback to one or more Business Units.

Rollback

Use the Rollback template to rollback a patch or release to the previous version. To rollback to a specific, earlier version, see Rollback to Version.

Create a Rollback

Use the Rollback template to configure a patch or release rollback to the previous version:

  1. Select Flex Controls on the left navigation menu of the Patch Dashboard, and then select Rollbacks > Rollback.

    UUID-d6fe6d39-1c32-b48c-125f-9df96904dbb8.png

    This opens the Patching Rollbacks table. Until you create a rollback, the table is empty.

    UUID-cf332d68-3437-274d-98dd-51557a2426ab.png
  2. Select +New to open the Rollback template, and then enter a Name and a detailed Description of the rollback.

    Note: A red asterisk next to a field name indicates a required field.

    UUID-2447de6a-7f64-b8ac-6e7e-e72cc1c0f8fc.png
  3. Locate the patch or release you want to roll back:

    UUID-450fe3ab-c4be-417e-00f9-31cb8b8a81b2.png
  4. Select a Software patch or release :

  5. Add one or more Business Units to specify the devices to rollback.

  6. Select Save to save the Rollback configuration. This returns you to the Patching Rollbacks table, which lists your new rollback.

Edit a Rollback Template
  1. Select a Rollback template from the Patching Rollbacks table of an open Patching Rollbacks template.

    UUID-d1c66d17-607c-be17-1ecf-dada139980bd.png

    This opens the template.

    Note: A red asterisk next to a field name indicates a required field.

    UUID-e8d05ee5-366e-116a-07b3-8c55eeeb433a.png
  2. Modify the Rollback settings:

    1. Select Browse to choose a different patch or release to roll back.

    2. Select +Add Business Units to add or remove target devices.

  3. Select Save on the upper-left corner of the template to save the new settings.

Copy a Rollback
  1. Select a Rollback template from the Patching Rollbacks table of an open Patching Rollbacks template.

    UUID-d1c66d17-607c-be17-1ecf-dada139980bd.png

    This opens the template.

    Note: A red asterisk next to a field name indicates a required field.

    UUID-e8d05ee5-366e-116a-07b3-8c55eeeb433a.png
  2. Select More, and then select Save Rollback As.

    UUID-ac9c5361-bcae-7a30-0d0f-e0d697a77afb.png
  3. Enter a new Name for the template, and then click Save as.

    UUID-a5587f6d-d04d-e5ee-16b2-b8a2e39e64db.png
  4. Revise the Description to reflect any changes needed for the copy, and then click Save.

  5. Select Back to Rollbacks on the upper-left corner of the template to return to the Rollbacks table and view your changes.

Customize Patching Rollback Table Settings
  1. Open the Patching Rollbacks table (Flex Controls > Rollbacks > Rollback).

  2. Select the ellipsis (...) next to Name in the Patching Rollbacks table, and then click Set Display Columns.

    UUID-4a7d893e-4916-386a-9bc6-1fb52675b4f5.png

    This opens the Set Table Columns dialog.

    UUID-bdccc395-44ff-5a57-1168-d344a78a1487.png
  3. Select the column names you want the Patching Rollbacks table to display, and then click OK.

Delete a Rollback
  1. Select a Rollback template from the Patching Rollbacks table of an open Patching Rollbacks template.

    UUID-d1c66d17-607c-be17-1ecf-dada139980bd.png
  2. Select the Ellipsis (...) next to Name, and then select Delete Selected.

    UUID-62e9d95d-fa5b-123c-ac6a-92a56bbe78e5.png
  3. Review the Are you sure? dialog:

    UUID-ecc39e62-45cd-90c7-b830-dfbe99fda1e9.png
    1. Select Export Logs on the top-right corner of the Are you sure? dialog to export trace logs. The trace logs download to your device as a file with a .log extension.

    2. Select OK to delete the Rollback.

  4. Select Back to Rollbacks on the upper-left corner of the template to return to the Rollbacks table and view your changes.

Select All Rollbacks
  1. Open the Patching Rollbacks table (Flex Controls > Rollbacks > Rollback).

  2. Select the ellipsis (...) next to Name, and then click Select All.

    UUID-a432599f-0f99-e74a-6c9e-a7fac767be51.png
  3. Select the ellipsis (...) again, and then choose what you want to do with the selected Rollbacks:

    • To export the selected Rollbacks, see Select All Rollback to Version Objects.

    • To delete the Selected templates, see Bulk Delete Rollbacks.

    • To customize the display columns of the Patching Rollbacks table, see Customize Patching Rollback Table Settings.

Bulk Delete Rollbacks
  1. Open the Patching Rollbacks table (Flex Controls > Rollbacks > Rollback).

  2. Select the ellipsis (...) next to Name, and then click Select All.

    UUID-a432599f-0f99-e74a-6c9e-a7fac767be51.png
  3. Select the ellipsis (...) next to Name, and then select Delete Selected.

    UUID-cf68c5a0-f021-9462-825b-a925dba83fad.png

    This opens the Delete Selected Objects dialog:

    UUID-d24b5e81-8d5a-cd83-2b83-8fee285a37df.png
  4. (Optional) Select Export Logs on the top-right corner of the Delete Selected Objects dialog to export trace logs. The trace logs download to your device as a file with a .log extension.

  5. Select OK to delete the Rollbacks. This returns you to the Patching Rollbacks to table where the deleted Rollbacks no longer appear.

Export Rollbacks
  1. Open the Patching Rollbacks table (Flex Controls > Rollbacks > Rollback).

  2. Select a single Patching Rollback from the table, or click the ellipsis (...) next to Name, and then click Select All to export all Rollbacks

    UUID-a432599f-0f99-e74a-6c9e-a7fac767be51.png
  3. Select the ellipsis (...) next to Name again, and then click Export Selected.

    UUID-456c393c-ee4b-f4ef-5969-1bad2690476f.png

    This opens the Object Export Settings:

    UUID-45a176de-4454-7d54-3064-b906c109ab65.png

    If Object Export Settings command returns an error similar to the following, see Resolve Export Errors errors:Resolve Export Errors

    UUID-d8064f39-4fa2-47e0-53fe-5f1c771eb5b2.png
  4. Continue to Configure the Object Export Settings.

Configure Object Export Settings
  1. Complete the steps in Export Rollback to open the Object Export Settings template.

    UUID-45a176de-4454-7d54-3064-b906c109ab65.png
  2. Enter an Exporting Organization Name and a Description of the settings you intend to create.

  3. Toggle the Export as JSON switch to enable or disable (default) whether to export the settings as a JSON file.

  4. Toggle the Automatically Import ... switch to enable or disable whether to select a specific folder to save the import.

  5. Select Export on the bottom left corner of the Object Export Settings to export the selected objects.

Note: Tenable Patch Management no longer supports the Export to Linked Servers functionality. Do not make any changes to the default settings.

Show Rollback References

To view the folder location of a Rollback to Version template, complete the following steps:

  1. Open the Patching Rollbacks table (Flex Controls > Rollbacks > Rollback).

  2. Select the ellipses (...) in the Actions column of the Patching Rollbacks table, and then select Show References.

    UUID-fb585867-ae5c-cfe2-6484-c9d7f1a3c372.png

    This opens the [Rollback Name] Object References dialog.

    UUID-b7543927-88a1-7376-33ff-cc351bc45e37.png
  3. Select the caret next to a Folder icon to expand the folder and view the contents, if needed.

  4. Select OK to return to the Patching Rollbacks table.

Rollback to Version

Use the Rollback to Version template to rollback a patch or release to a specific release or version. To rollback to the previous version, see Rollback.

Create a Rollback to Version

To rollback a patch to a previous patch or release version, complete the following steps:

  1. Select Flex Controls on the left navigation menu of the Patch Dashboard, and then select Rollbacks > Rollback to Version.

    UUID-61e2fd5d-efb5-309a-8c61-956f4283a167.png

    This opens the Patching Rollbacks to Version table. Until you create a rollback, the table is empty..

    UUID-249328f2-5e11-3554-02cd-b68160b4b53f.png
  2. Select +New to open the Rollback template, and then enter a Name and a detailed Description of the rollback.

    Note: A red asterisk next to a field name indicates a required field.

    UUID-95fa9ffa-1412-bcb1-cc4e-f7659b846d1d.png
  3. Enter a Name and a detailed Description of your Rollback to Version.

  4. Add the patch or release to roll back from.

Choose the Software Patch or Release Version to Roll Back From
  1. Select Browse next to Add Installable Software in an open Rollback to Version template.

    UUID-58e5db26-1a64-725e-9fbe-138fba9e6a39.png
  2. Choose the Software Patch or Software Release from the Add Installable Software table to roll back from. You can select only one Patch or Release to roll back from.

    UUID-d31259f8-e3be-876a-99b0-a4da65bba851.png
  3. Select Add Installable Software to return to the Rollback to Version template.

  4. Choose the software patch or release version to roll back to.

Choose the Software Patch or Release Version to Roll Back To
  1. Select Browse next to Rollback in an open Rollback to Version template.

    UUID-f75a2a33-54eb-af97-4175-5e3050acf875.png
  2. Select a Patch or Release version from the Add Installable Software table to roll back to. The only visible versions are those that match the item you selected for Patch. You can select only one Patch or Release to roll back to.

    UUID-2d7d30da-bcd1-8c5b-8265-ce88a2dab7ce.png
  3. Select Add Installable Software.

  4. Add target Business Units for the Rollback to Version.

Add Business Units for a Rollback to Version
  1. Add one or more Business Units using the following steps:

  2. Select Save to rollback a patch to a prior version.

Edit a Rollback to Version Template
  1. Select a Rollback to Version template from the Patching Rollbacks to Version table of an open Patching Rollbacks template.

    UUID-069b0ae4-1333-a63d-3d71-e5950be92a4f.png

    This opens the template.

    UUID-95fa9ffa-1412-bcb1-cc4e-f7659b846d1d.png
  2. Modify the Rollback settings:

    1. Select Browse for Patch to choose a patch or release to roll back from.

    2. Select Browse for Rollback to choose the version of the patch or release to roll back to.

    3. Select +Add Business Units to add or remove target devices.

  3. Select Save top-left corner of template to save the changes.

Copy a Rollback to Version Template
  1. Select a Rollback template from the Patching Rollbacks to Version table of an open Patching Rollbacks template.

    UUID-c6deb1b2-b11b-c9d1-f4d7-e28783a88835.png

    This opens the template.

    UUID-aee8856f-1505-4f00-d44c-432a951f212f.png
  2. Select More, and then select Save Rollback As.

    UUID-ac9c5361-bcae-7a30-0d0f-e0d697a77afb.png
  3. Enter a new Name for the template, and then click Save as.

    UUID-a5587f6d-d04d-e5ee-16b2-b8a2e39e64db.png
  4. Revise the Description to reflect any changes needed for the copy, and then click Save.

  5. Select Back to Rollbacks on the upper-left corner of the template to return to the Rollbacks table and view your changes.

Customize Patching Rollback Table Settings
  1. Open the Patching Rollbacks table (Flex Controls > Rollbacks > Rollback).

  2. Select the ellipsis (...) next to Name in the Patching Rollbacks table, and then click Set Display Columns.

    UUID-4a7d893e-4916-386a-9bc6-1fb52675b4f5.png

    This opens the Set Table Columns dialog.

    UUID-bdccc395-44ff-5a57-1168-d344a78a1487.png
  3. Select the column names you want the Patching Rollbacks table to display, and then click OK.

Delete a Rollback to Version
  1. Select a Rollback to Version template from the Patching Rollbacks to Version table of an open Patching Rollbacks template.

    UUID-069b0ae4-1333-a63d-3d71-e5950be92a4f.png
  2. Select the Ellipsis (...) next to Name, and then select Delete Selected.

    UUID-62e9d95d-fa5b-123c-ac6a-92a56bbe78e5.png
  3. Review the Are you sure? dialog:

    UUID-ecc39e62-45cd-90c7-b830-dfbe99fda1e9.png
    1. Select Export Logs on the top-right corner of the Are you sure? dialog to export trace logs. The trace logs download to your device as a file with a .log extension.

    2. Select OK to delete the Rollback.

  4. Select Back to Rollbacks on the upper-left corner of the template to return to the Rollbacks table and view your changes.

Select All Rollback to Version Objects
  1. Open the Patching Rollbacks table (Flex Controls > Rollbacks > Rollback to Version).

  2. Select the ellipsis (...) next to Name, and then click Select All.

    UUID-725896ef-8bd9-4987-4ae9-0814374f71f1.png
  3. Select the ellipsis (...) again, and then choose what you want to do with the selected Rollbacks:

    • To export the selected Rollbacks, see Select All Rollback to Version Objects.

    • To delete the Selected templates, see Bulk Delete Rollbacks.

    • To customize the display columns of the Patching Rollbacks table, see Customize Patching Rollback Table Settings.

Bulk Delete Rollback to Version

Use the following task to delete all Rollback to Version templates.

  1. Open the Patching Rollbacks table (Flex Controls > Rollbacks > Rollback to Version).

  2. Select the ellipsis (...) next to Name, and then click Select All.

    UUID-a432599f-0f99-e74a-6c9e-a7fac767be51.png
  3. Select the ellipsis (...) next to Name, and then select Delete Selected.

    UUID-cf68c5a0-f021-9462-825b-a925dba83fad.png

    This opens the Delete Selected Objects dialog:

    UUID-d24b5e81-8d5a-cd83-2b83-8fee285a37df.png
  4. (Optional) Select Export Logs on the top-right corner of the Delete Selected Objects dialog to export trace logs. The trace logs download to your device as a file with a .log extension.

  5. Select OK to delete the Rollbacks. This returns you to the Patching Rollbacks to Version table where the deleted Rollbacks no longer appear.

Export Rollback to Version
  1. Open the Patching Rollbacks table (Flex Controls > Rollbacks > Rollback to Version).

  2. Select a single Patching Rollback from the table, or click the ellipsis (...) next to Name, and then click Select All to export all Rollbacks

    UUID-a432599f-0f99-e74a-6c9e-a7fac767be51.png
  3. Select the ellipsis (...) next to Name again, and then click Export Selected.

    UUID-456c393c-ee4b-f4ef-5969-1bad2690476f.png

    This opens the Object Export Settings:

    UUID-45a176de-4454-7d54-3064-b906c109ab65.png

    If Object Export Settings command returns an error similar to the following, see Resolve Export Errors errors:Resolve Export Errors

    UUID-d8064f39-4fa2-47e0-53fe-5f1c771eb5b2.png
  4. Continue to Configure the Object Export Settings.

Configure Object Export Settings
  1. Complete the steps in Export Rollback to Version to open the Object Export Settings template.

    UUID-45a176de-4454-7d54-3064-b906c109ab65.png
  2. Enter an Exporting Organization Name and a Description of the settings you intend to create.

  3. Toggle the Export as JSON switch to enable or disable (default) whether to export the settings as a JSON file.

  4. Toggle the Automatically Import ... switch to enable or disable whether to select a specific folder to save the import.

  5. Select Export on the bottom left corner of the Object Export Settings to export the selected objects.

Note: Tenable Patch Management no longer supports the Export to Linked Servers functionality. Do not make any changes to the default settings.

Show Rollback to Version References

To view the folder location of a Rollback to Version template, complete the following steps:

  1. Open the Patching Rollbacks table (Flex Controls > Rollbacks > Rollback to Version).

  2. Select the ellipses (...) in the Actions column in the Patching Rollbacks to Version table, and then select Show References.

    UUID-6039b75b-3b5c-bda1-aabc-d3378e4b2bed.png

    This opens the [Rollback Name] Object References dialog.

    UUID-b7543927-88a1-7376-33ff-cc351bc45e37.png
  3. Select the caret next to the Folder icon to expand the folder and view the contents, if needed.

  4. Select OK to return to the Patching Rollbacks to Version table.