DATASHEET

Secure Patch Managementand Compliance
Tripwire Integrated with FoxGuard Solutions
When it comes to compliance and security, efficient patch management isa critical capability. In order to be effective, patch management requires
a closed-loop process for approval and reconciliation, especially in highly
sensitive operational environments. Whether you are evaluating patches forsecurity or operational purposes, Tripwire and FoxGuard integrate seamlessly
for an innovative approach to patching within both IT and OT environments.

FoxGuard’s Patch Analysis

The Value of Partnership

FoxGuard Solutions provides an exceptional patch management capability,enabling evaluation and prioritizationof available patches. Through thoroughanalysis of existing patches for softwarelists, FoxGuard validates and recommends critical patches necessary for
their specific environment. With discussion of emerging trends, inadvisable
updates and more, FoxGuard is a leader
in secure patch management.

By integrating Tripwire State Analyzer
and FoxGuard, organizations canimprove patching for both security
and compliance. Tripwire begins theintegration process by exporting dataon existing software and sharing thisinformation with FoxGuard. FoxGuard
then analyzes the list of patches existing
and available for installed software,
providing insight into which patches arerecommended and should be prioritized.
Tripwire State Analyzer then provides aneasy workflow enabling organizations
to update their Allowlists to reflect thepatches they wish to install. This updateallows the next scan to validate compliance with patching requirements, andalso easily identify unpatched machines.

Achieving Compliancewith Tripwire
Tripwire® Enterprise and Tripwire State
Analyzer give users a full picture of thesoftware installed on their devices, inaddition to identifying and maintaining
an ideal baseline configuration for eachasset. This visibility enables you tocapture the operational state of theirdevices while demonstrating complianceagainst required standards (PCI, NIST,NERC, or self-defined). By combining
Tripwire Enterprise’s visibility with theallowlisting capability of Tripwire State
Analyzer, users can easily audit theirenvironment for non-compliant objects
such as open ports, routes, installedsoftware, and users.

By utilizing this integration,organizations can achieve:» Simplified patching and allowlisting» Proof of compliance and configuration
to approved baselines» Save time and effort for security andGRC teams
Selecting and deploying patches is only
part of the overall process for patchmanagement. In regulated environments, patching is an auditable control
that requires validation. The integrationof FoxGuard and Tripwire equips organizations with a full process—from patch
selection and deployment through tovalidation and auditing.

FOUNDATIONAL CONTROLS FORSECURITY, COMPLIANCE & IT OPERATIONSFoxGuard has over 15 years of experience creating secure comprehensive patching solutions. We know
the industry’s assets because we have analyzed, documented, and verified patch details for these assets
for years. Founded in 1981, we have the experience and in-depth knowledge to support patch management programs in critical infrastructure. In 2014 we partnered with the US Department of Energy (DOE)
to develop patch mangement for the energy utility industry. FoxGuard works with several leading energy
equipment OEMs and directly with electric utilities, supplying patch management and cybersecurity
solutions globally. Learn more at foxguardsolutions.comTripwire is the trusted leader for establishing a strong cybersecurity foundation. We protect the world’s
leading organizations against the most damaging cyberattacks, keeping pace with rapidly changing techcomplexities to defend against ever-evolving threats for more than 20 years. On-site and in the cloud,our diverse portfolio of solutions find, monitor and mitigate risks to organizations’ digital infrastructure—all without disrupting day-to-day operations or productivity. Think of us as the invisible line thatkeeps systems safe. Learn more at tripwire.com
The State of Security: News, trends and insights at tripwire.com/blog
Connect with us on LinkedIn, Twitter and Facebook©2022 Tripwire, Inc. Tripwire, LogCenter, IP360, Tripwire Axon and others are trademarks or registered trademarks of Tripwire, Inc. All other product and company names areproperty of their respective owners. All rights reserved.
TAPTEFGS1a2204