Announcement: New Knowledge Base

4 June 2020: We are pleased to announce the launch of a new Knowledge Base, Changelogs for Business Security Products, where you can find more details, such as bugfixes or new features, about the most recent releases of our business-related products.

How does SWUP actually works when using WSUS ?

Hello.

 

I haven't found anything in the documentations so i thought i ask here.

 

I have som trouble to grep how SWUP actually works when WSUS are in use, MS patches that are not approved or declined in WSUS still shows up in SWUP and are not exluded even if i make an exlution.

 

This is now it looks like in SWUP 

PM-1.PNG

 

This is how the policy is configured

pm-2.PNG

 

WSUS 

PM-3.PNG

 

Any ideas why patches falls through the crack ?

 

Br

Mattias

 

Best Answer

  • VadVad Posts: 1,048
    Accepted Answer

    Hello Mattias,

     

    Seems that you had configured exclusions incorrectly.

    All parts of one row separated by ";" are joined by logical AND.

    So,  for example, if you wish to exclude patches for Windows 8.1, IE, Office and .Net framework, put each of this exclusions in a separate row of the table.

     

    Best regards,

    Vad

Comments

  • MattiasNMattiasN Posts: 10

    Thanks for you answer.

     

    Now it works better, for critical and important patches anyway.

    non-security patches are still not exluded Smiley Sad

     

    Br

    Mattias 

     

     

  • VadVad Posts: 1,048

    Did you try to exclude non-security updates from scanning? On your screenshot they are included.

     

    Best regards,

    Vad

  • MattiasNMattiasN Posts: 10

    I tried that, but that also exludes 3rd party patches, and i only want it to exlude patches handled by WSUS

     

    Br

    Mattias

  • VadVad Posts: 1,048

    I see. Please, contact support. Looks like Software Updater can't identify, that your machine is configured to use WSUS, for some reason. We will need detailed information from one of affected machines for investigation.

     

    Best regards,

    Vad

    MattiasN
  • MattiasNMattiasN Posts: 10

    Thanks for your answers.

     

    I have created a support request now.

     

    Br

    Mattias

  • Mathias, can you please give us feedback when you will have your problem solved by support in order we all get the information here ?


    Thanks a lot

  • Sorry for the late post :/

     

    i got some clarification from support and it works at it should.

    MS patches still shows up i portal but they never gets installed when a WSUS is in use.

     

    I wish they werent visable in PSB portal as they generate "red alerts" unless you approve everything security related on the WSUS wich is not always the best option.

This discussion has been closed.