

Missing Exchange patches on an Exchange server machineĪfter the scan is complete, you can click on the machine to find out what patches it has missing. The scan wizard, allows you to scan a machine, an entire domain, a set of machines or an IP range.

I found that enumerating the network took a while. Once you click finish, HfnetchkPro will go out there and scan your network. After this you can choose to run the scan immediately, or schedule it at a later stage. You can scan for patches that need to be installed, and you can also scan what patches need to be installed and what patches have been installed. When you startup the main interface, launch a new scan, a wizard comes up asking what you want to scan, what you want to scan for and when to run the scan. Scanning a few machines with HfnetchkPro was pretty straightforward. It supports not only operating system level patches, but also application patches for applications such as Microsoft Office, Microsoft Exchange and Microsoft SQL server. It checks for missing patches and can install those patches remotely and to multiple computers at a time. Shavlik HfnetchkPro is a patch management tool.


Patch management and security scanning are closely related, simply because a missing patch is essentially a vulnerability. Scan your DMZ and web servers! Patch management Scan your network from several viewpoints - scan it from outside your network (as in outside your firewall), from inside your network with admin rights, and from inside your network without admin rights. You obviously need to know what security holes are present on your network and using a security scanner is the easiest/only way to find out. Scanning your network for security holes is probably one of the most important tasks you need to perform to keep your network secure.
