SAS 018 – Patch Management

SysAdmin Show

Business Dustin Reybrouck: IT System Administrator Careers I Talk Sysadmin Tech Software Development Podcasting Education

Content provided by Dustin Reybrouck: IT System Administrator. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Dustin Reybrouck: IT System Administrator or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

6+ y ago 36:43

MP3•Episode home

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on November 25, 2024 00:29 (8M ago)

What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.

In today’s episode I talk about patching various types of systems and my recommendations for each.

Workstations

BIOS/Firmware
- Update at deployment then as needed
Drivers
- Update at deployment then as needed
OS
- Update monthly
- Delay one month from release date unless critical
Applications
- Enable auto-update if available
- Update monthly if reasonable, otherwise as needed
  - Level of effort
  - Cost

Servers

BIOS/Firmware
- Update at deployment then as needed

Drivers
- Update at deployment then as needed
OS
- Update monthly
- Delay one month from release date unless critical
Applications
- Deploy stable version and update annually or as needed

Networking

Firmware
- Deploy stable version and update annually or as needed

Printers

Firmware
- Deploy stable version and update annually or as needed
Drivers
- Deploy stable version and update as needed

Mobile

Smartphones
- Update major version as stable
- Enable auto-update for minor version if historically stable
- Apps should auto-update, delayed if necessary for testing
Tablets
- Update major version as stable
- Enable auto-update for minor version if historically stable
- Apps should auto-update, delayed if necessary for testing

Misc

IOT
- Try to deploy only if reputable manufacturer
- Enable auto-updates
Intrusion Prevention
- Deploy stable version and update annually or as needed
Access Control
- Deploy stable version and update annually or as needed
Fire Alarm
- Deploy stable version and update annually or as needed

Final Thoughts

Keeping systems updated is typically around 25% of your time as a SysAdmin
Depending on the system much of this work will need to be completed after hours
Choosing how often a system is updated is an important balance between required up time, stability and security

58 episodes

#Business #Dustin Reybrouck: IT System Administrator #Careers #I Talk #Sysadmin #Tech #Software Development #Podcasting Education