Update with Wapt Enterprise

Questions about WAPT Packaging / Requests and help regarding Wapt packages.
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
mouka
Messages: 33
Registration: May 14, 2019 - 3:13 p.m.

October 26, 2020 - 3:50 PM

wapt-26-10-2020.png
wapt-26-10-2020.png (46.32 KB) Viewed 4659 times
Good morning,
We have the enterprise version.
1) Knowing that we only want to install critical and security updates on our client PCs, and that we have configured the filters "Critical only", "All products", and "Security Updates" below in WAPT, are these the only filters necessary and sufficient for what we want to do?
I'm asking because the labels on Wapt are different from those on WSUS. See attached screenshot.

2) The "Pilots" and "Pilot games" classifications do not exist on Wapt. Why?

3) To generate an agent in Wapt, what exactly does the "Allow all updates by default" checkbox do?

Thank you all,
Mr.
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

October 28, 2020 - 3:44 PM

Good morning
mouka wrote: Oct 26, 2020 - 3:50 PM 2) The "Pilots" and "Pilot Games" classifications do not exist on Wapt. Why?
Unfortunately, Microsoft's wsusscn2.cab file does not include these categories
mouka wrote: Oct 26, 2020 - 3:50 PM 3) To generate an agent in Wapt, what exactly does the "Allow all updates by default" checkbox do?
This indicates wapt's default behavior towards cabs. It either accepts them by default, or rejects them by default (box unchecked).

Generally, updates are refused by default, then a WUA rule package is created to allow cabs.

You can also allow default severities by adding allowed_severities=critical to the waptwua section of wapt-get.ini:

https://www.wapt.fr/fr/doc/wapt-usage/w ... wapt-agent
mouka
Messages: 33
Registration: May 14, 2019 - 3:13 p.m.

October 29, 2020 - 3:25 PM

Hello,

"We can also allow default severities by adding allowed_severities=critical in the waptwua section of wapt-get.ini."

Is this not possible when generating a new agent?
Is it mandatory to build a Wapt package?

Have a good day,
m.
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

October 29, 2020 - 5:06 PM

Yes, indeed

example package:

Code: Select all

def install():
    inifile_writestring(makepath(install_location('WAPT_is1'),"wapt-get.ini"),'waptwua','allowed_severities','critical')
mouka
Messages: 33
Registration: May 14, 2019 - 3:13 p.m.

October 29, 2020 - 5:13 PM

Thank you.
Could you answer the first question:

1) We want to install only critical and security updates on our client PCs. Below, in WAPT, we have configured the filters "Critical only," "All products," and "Security Updates." Are these the only filters necessary and sufficient for our purpose?
I ask because the labels in WAPT are different from those in WSUS. See the attached screenshot.
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

October 30, 2020 - 9:40 AM

Actually, with "allowed_severities" you allow KBs with the severity level specified in the parameter.

In WaptConsole, this is the criticality column.

There's also the allowed_classifications parameter, which corresponds to the "classification" column, but this parameter is neither documented nor tested ;) ...
Attachments
Annotation 2020-10-30 094019.png
Annotation 2020-10-30 094019.png (79.17 KB) Viewed 4586 times
mouka
Messages: 33
Registration: May 14, 2019 - 3:13 p.m.

November 6, 2020 - 10:25 AM

Good morning,
So with the configuration currently available on Wapt, I don't have all the critical and security updates?
See the attached file, it's a screenshot of the configuration in question.
Thank you very much and have a good day
Mr.
wapt-MAJ-crit-Secur-06-11-2020.png
wapt-MAJ-crit-Secur-06-11-2020.png (14.18 KB) Viewed 4556 times
Locked