Novell ZENWORKS PATCH MANAGEMENT 6.4 SP2 - SERVER, User Manual

Page: 46 / 390

U
SING
V
ULNERABILITIES AND
P
ACKAGES
- 30 -
The Patch Management Agent installed on each device checks for known vulnerabilities
using the Discover Applicable Updates (DAU) task. The DAU runs an inventory scan and
sends the results back to Patch Management Server, which compares it with the list of
known vulnerabilities. If the device is found to have vulnerabilities, a deployment can be set
up to remedy the issues.
Figure 3-2: Discover Applicable Updates
Defining Vulnerability Structure
The structure of a Vulnerability allows the ability to create one patch applicable for many
different operating systems and software versions. This allows for different packages and
signatures capable of identifying the presence of patch files within a device.
As depicted in the following diagram, for each vulnerability you can have more than one
signature. For each signature, you can have multiple fingerprints and pre-requisites.
However, you can only have one package assigned per signature.
Figure 3-3: Patch Structure
Vulnerabilities
A vulnerability is the container for the entire object. All properties set for the vulnerability are
viewed in the
Vulnerabilities page in the Patch Management Server. Each vulnerability can
have one or more signatures.