Security

Hi

My client wants to check with OnGuard if windows patches are up-to-date but with some period back for example 2-3 months, so he shouldn't go to quarantine at once when he hasn't installed yet newest patches available. 

In this moment we are using Windows Security Health Validator and we have turned on Security Updates and Important and above. 

The result is such that when host computer have got info about new patches from windows update it automatically goes to quarantine. 

We would like to give client some time to update his computer, not automatically send to quarantine

Any idea how to achive this ?

best regards

Karol

Also am looking for info on how to accomplish this.

Allow the application service windows-updates in the quarantine role as part of a firewall policy. This would allow the clients to still access windows updates from quarantine to get in compliance.

Hi

Thanks for suggestion, I will discuss it with my client

regards

Karol