Patch policy

Note: This feature is not included with all licenses. If you want to use it, you might need to change your license. For more information, see http://www.sophos.com/en-us/products/complete/comparison.aspx.

Enterprise Console enables you to check that your computers have the most up-to-date security patches installed.

SophosLabs provides ratings that help you determine the most critical security patch issues so that you can resolve them quickly. SophosLabs ratings take the latest exploits into account and therefore may differ from a vendor's severity level.

Before using patch, you must install the patch agent on your networked computers so that they can perform patch assessments and communicate status to Enterprise Console. You can install this using the Protect Computers Wizard. See Protect computers automatically.

This section assumes that you have installed the patch agent.

Note: If you use role-based administration:

You must have the Policy setting - patch right to configure a patch policy.
You cannot edit a policy if it is applied outside your active sub-estate.

For more information about role-based administration, see Managing roles and sub-estates.