Configure Vulnerability and Patch Management in OneView

Once you subscribe to Vulnerability and Patch Management, you must configure the module to scan for threat weaknesses and secure your endpoints. 

Below is a table of supported operating systems for each module: 

Configure Vulnerability and Patch Management

1. On the left navigation menu, click Settings.
2. Click Policies. Create a new policy or select an existing policy.
3. Click the Software management tab.
4. Check mark Allow scanning for known vulnerabilities in installed software for Windows or Mac endpoints. 
5. Check mark Allow updating software inventory and applying available OS patches for endpoints for Windows endpoints.
6. Check mark Show deployment progress for the ability to check deployment progress on a Windows endpoint. Hover over the Malwarebytes Endpoint Agent in the system tray to view the current deployment progress.
7. Click Save. 

Note: The Installed software on the endpoints setting under Events to report on is required to scan for vulnerabilities and available patches.

Scan for vulnerabilities or patches

Scanning your endpoints is how the endpoint agent identifies threat exposures or available updates across your environment. Once you purchase the module, all previous Inventory scans are automatically updated to the Inventory & Vulnerability scan options. This is available to run on-demand from the endpoints page and configurable for scheduled scans in your OneView console. For more scan information, see Scheduled scans in Malwarebytes OneView.

Return to Vulnerability and Patch Management guide for OneView.