none
How to search WSUS by Microsoft Security Advisories?

    Frage

  • I am trying to use WSUS to search for all systems affected for Microsoft Security Advisory 2846338.

    http://technet.microsoft.com/en-us/security/advisory/2846338

    However, the WSUS search tool only understands searching by title, description, KB article #, or the MS Security Response Center.

    When I try using the Microsoft Security Advisory number, it returns no findings.

    When I try the closest KB article, it's not relevant, and returns no findings.

    Affected software are using an older version of the following software:

    • Microsoft Forefront Client Security (x64)
    • Microsoft Forefront Endpoint Protection 2010 (x64)
    • Microsoft Forefront Security for SharePoint Service Pack 3 (x64)
    • Microsoft System Center 2012 Endpoint Protection (x64)
    • Microsoft System Center 2012 Endpoint Protection Service Pack 1 (x64)
    • Microsoft Malicious Software Removal Tool (x64)[1]
    • Microsoft Security Essentials (x64)
    • Microsoft Security Essentials Prerelease (x64)
    • Windows Defender for Windows 8 (x64)
    • Windows Defender for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 (x64)
    • Windows Defender Offline (x64) 
    • Windows Intune Endpoint Protection (x64)

    Suggestions anyone?

    Dienstag, 9. Juli 2013 14:21

Antworten

  • The update is not available via WSUS; there is no specifically packaged update for this issue.

    As explicitly described in the Security Advisory...

    Updates to the Microsoft Malware Protection Engine are installed along with the updated malware definitions for the affected products. Administrators of enterprise installations should follow their established internal processes to ensure that the definition and engine updates are approved in their update management software, and that clients consume the updates accordingly.

    Typically, no action is required of enterprise administrators or end users to install updates for the Microsoft Malware Protection Engine, because the built-in mechanism for the automatic detection and deployment of updates will apply the update within the next 48 hours. The exact time frame depends on the software used, Internet connection, and infrastructure configuration.

    Ergo, whatever methodology you currently use to get Definition Updates to those products (either self-updating, or in the case of FEP/FCS/SCEP, MSRT, MSE, and Defender perhaps the WSUS server) is the same methodology that will get them the updated engine.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Als Antwort markiert Steve KJ Mittwoch, 10. Juli 2013 14:01
    Dienstag, 9. Juli 2013 20:59

Alle Antworten

  • The update is not available via WSUS; there is no specifically packaged update for this issue.

    As explicitly described in the Security Advisory...

    Updates to the Microsoft Malware Protection Engine are installed along with the updated malware definitions for the affected products. Administrators of enterprise installations should follow their established internal processes to ensure that the definition and engine updates are approved in their update management software, and that clients consume the updates accordingly.

    Typically, no action is required of enterprise administrators or end users to install updates for the Microsoft Malware Protection Engine, because the built-in mechanism for the automatic detection and deployment of updates will apply the update within the next 48 hours. The exact time frame depends on the software used, Internet connection, and infrastructure configuration.

    Ergo, whatever methodology you currently use to get Definition Updates to those products (either self-updating, or in the case of FEP/FCS/SCEP, MSRT, MSE, and Defender perhaps the WSUS server) is the same methodology that will get them the updated engine.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Als Antwort markiert Steve KJ Mittwoch, 10. Juli 2013 14:01
    Dienstag, 9. Juli 2013 20:59
  • Thanks.
    Mittwoch, 10. Juli 2013 14:02