Patch policy

Note This feature is not included with all licenses. If you want to use it, you might need to change your license. For more information, see

Sophos Enterprise Console enables you to check that your computers have the most up-to-date security patches installed.

Before using patch, you must install the patch agent on your networked computers so that they can perform patch assessments and communicate status to Sophos Enterprise Console. You can install this using the Protect Computers Wizard. See Protect computers automatically.

This section assumes that you have installed the patch agent.

If you use role-based administration:

  • You must have the Policy setting - patch right to configure a patch policy.
  • You cannot edit a policy if it is applied outside your active sub-estate.

For more information about role-based administration, see Managing roles and sub-estates.