[SOLVED] Windows Update Function

Floflobel · October 9, 2018 - 2:37 PM

Hello,

I'm looking for information on the Windows Update feature that was recently integrated.
Can you tell me how it's managed? Is it possible to customize the updates I want, etc.?
A short demo video would be perfect, or the possibility of testing this version.

Sincerely,

cfargues · October 9, 2018 - 3:20 PM

Hello Floflobel,

The Windows Update feature is only available in the Enterprise version, which is available as a 30-day trial. I invite you to request a trial on our website.

A video is planned on this topic to demonstrate the capabilities of Windows Update with WAPT. This month is a bit busy for us with European Cybersecurity Month, which we are covering with infographics and blog articles that are taking up a lot of our time.
We will publish a video on YouTube before the end of the year, I think, so subscribe to our channel so you don't miss anything!

Our blog to follow CyberSecMonth: https://tranquil.it/blog/
Our YouTube channel: https://www.youtube.com/c/tranquil-it-systems

I'll let the experts answer your technical questions.

Have a good day,

October 9, 2018 - 3:24 PM

Hello,

Wapt's Windows Updates function aims to:
- centrally download Microsoft updates to save the website's internet bandwidth (using a "proxy" function)
- filter accepted updates by filtering based on the list of accepted Products, Categories, and "Severity" ratings, as well as individual IDs (to accept or reject)
- provide feedback on the individual status of updates for each workstation
- explicitly trigger a scan (search for updates to apply), download, and installation.

This relies on the wuauserv.exe engine (a Microsoft service), to which we provide, via the Wapt repository, the global CAB file wsuscn2.cab, which Microsoft regularly updates and which lists all available updates for offline scanning.

All Wapt clients that have performed a scan receive, along with their Wapt inventory, a list of updates already installed, to be installed, or rejected. This allows both the deployment status of KBs and the proactive triggering of downloads of update files on the WAPT server (via a scheduled task). These files must then be installed by the workstations.

Therefore, only applicable (and not yet installed) updates are downloaded from the Microsoft website to the WAPT server.

Currently, the scheduling of scans/downloads and installations is basic (scan/download at a given time, install at a given time), or can be triggered by a scheduled Windows task at a specific time, for example.
These tasks are processed within the local WAPT service's task flow and are therefore not performed concurrently with the software package installation (which is preferable).

Activating the WaptWUA agent disables the Windows wuauserv service. It is reactivated and launched only when scans/installations are triggered.

Mathieu · October 10, 2018 - 2:25 PM

Hello,

I have a question about how to disable this service because we are going to stay on WSUS, as I have not found the function in the configuration files or on the console.

October 11, 2018 - 09:13

Mathieu wrote: ↑Oct 10, 2018 - 2:25 PM Hello,

I have a question about how to disable this service because we are going to stay on WSUS, because I haven't found the function in the configuration files or on the console.

Good morning

By default the feature is disabled in the enterprise version so there is no risk.

February 14, 2019 - 12:54 AM

Floflobel wrote: ↑Oct 9, 2018 - 2:37 PM Hello,

I'm looking for information on the Windows Update feature that was recently integrated.
Can you tell me how it's managed? Is it possible to customize the desired updates, etc.?
A short demo video would be perfect, or the possibility of testing this version.

Sincerely,

The video is available here: https://www.youtube.com/watch?v=x36gAaT31Ko