Data SheetPatch for Endpoint Manager
Keeping up with the constant stream ofsecurity threats and patches is an ongoingdrain on IT staff. Organizations must beable to research, evaluate, test, and apply
patches across the enterprise easily andautomatically.
With Ivanti® Patch for Endpoint Manager yourenterprise can consistently discover, assess,and remediate thousands of client systems
based on policies you define and without
saturating your network or disrupting user
productivity.

See, assess, and protect

leverages the largest patch catalog on the market
to remediate vulnerabilities from thousands of thirdparty applications for Windows and Mac. Also detect
and remediate Windows, macOS, and Linux operating
systems and scan and report on others.

Drive more efficient patching
Patch for Endpoint Manager automates patch
control over what gets patched when and howoften. The solution’s Wake-on-WAN feature wakes
machines across the enterprise, without network
configuration, to increase patch success rates andreduce deployment times. Automate complex manualthe patches installed on all of your client systems,

processes. Invoke scheduling, policy, and other patch

whether those patches were installed by softwaredelivery options, individually or in combination, tofrom Ivanti or elsewhere. The solution also performs

maximize the reach and effectiveness of yourvulnerability assessment using industry-standard

patching efforts.

ivanti.com

The more laws and regulations imposed onorganizations, the more critical the need for fully
patched systems. Patch for Endpoint Manager helps
your organization meet compliance requirements andregulatory standards, and reduce the risk of legal andfinancial penalties.

management, enabling granular, policy-driven

Patch for Endpoint Manager quickly displays all ofinformation sources. Patch for Endpoint Manager

Protect your bottom line—with greater compliance

Patch faster with fewer
network impacts
Patch for Endpoint Manager employs multiple
technologies to distribute and deploy patches quickly
across your network, without creating expensive
bandwidth demands. Pre-stage patches locally withineach subnet for faster deployments that optimize
bandwidth utilization and hardware resources. Use
project rollout features to deploy patches in stages orrings to ensure patches don’t affect users or businessprocesses adversely, which helps your team gain
greater trust from your change control board.

Deliver maximum security anywhere
Better patching means stronger security, but if
too intrusive, such benefits can hobble user andbusiness productivity. Patch for Endpoint Manager, incombination with the Ivanti Cloud Services Appliance,lets administrators assess and remediate user devices
anywhere in the world, even those that are remote
or in the hands of traveling users, without requiring avirtual private network (VPN) connection. It also allows
you to set consistent time frames and schedules forpatch deployment to devices anywhere.

Secure with minimum user disruption
Control when patches are installed and whether toIntegrate patch with Unified
Endpoint Management

reboot or snooze selected systems after patching.

Patch for Endpoint Manager can be deployedSpecify key processes—such as sales or executive

independently or as an add-on to Ivanti Unified

presentations in full screen mode—that don’t

Endpoint Manager. When integrated with that

get interrupted by patches or updates. Also use

Ivanti offering, patch and systems management are

maintenance windows to schedule the right time

integrated smoothly and can be controlled from ato patch.

common administrator interface.

Your patch solution should enable you inthese three areas:
1. Assess vulnerabilities and leverage the most upto-date patch content to remediate immediately.
2. Automate, manage, and optimize patch processes.
3. Minimize patch failures and their impact on users
and business processes.

Patch for Endpoint Manager | Data Sheet

2

Features and Capabilities
Patch Assessments and Content
FeatureCapabilities

Optimize Patch Processes
FeatureCapabilities

Minimize Patch Failures
Features

Capabilities
Wake machines across thenetwork or remotely to download
and install patches. Providespatching continuance, so
patching carries on after aconnection is re-established.

Device Discovery■ Active, passive, andPatch Process
Management■ Automated deployment of OS

Wake-on-WAN

Platforms■ Scanning and fullRollout
Projects■ Automate patch processes andReboot
Management■ Control when patches are

MaintenanceWindows

Schedule patches during certain
maintenance times or computer
events. Also prevents patching
during events like full-screenpresentations.

Vulnerability
Scanning

agentless discovery andinventory to know what
devices to patch andsecure.

patching:Windows, macOS, andmultiple Linux platforms.
■ Scanning and reporting:
AIX, CentOS, and HP-UX.

Fast, accurate scanning anddetection of devices for OS
and third-party applications.

Anywhere
Patching

and third-party patches andcustom application patches.
■ Automated patch process
management, from discovery toassessment to update delivery.

rollouts for OS and third-party
application patching. Target pilotgroups and roll back if needed.
■ Manage patches through eachrollout ring and schedule extra
time to “bake in” updates.
■ Track progress through Gantt
charts.

implemented based on logins
and reboots.
■ Brandable reboot menuallows users to defer basedon policy.

Patch devices at remote locations
through Internet connection without
needing a VPN—using the Ivanti
Cloud Services Appliance.

Patch for Endpoint Manager | Data Sheet

3

Features and Capabilities (continued)
Patch Assessments and Content
FeatureContent Library

Capabilities■ Largest patch content

library on the market.
■ Scanning and fullpatching:
Windows, macOS, andmultiple Linux platforms.
■ Scanning and reporting:
AIX, CentOS, and HP-UX.
■ OS patches include
Windows, macOS, andLinux.

Optimize Patch Processes
FeatureFlexible
Infrastructure

Dashboardsand Custom
ReportingCapabilities■ Supports role-based

administration.
■ Support for multiple
configurations, including on- andoff-network patching and mostnetwork configurations.
■ Leverages peer downloading
technologies to pre-cache
patches on each subnet.

■ Ivanti Xtraction dashboards—

insight without a spreadsheet
expert. Patching dashboard
shows status for all devices.
■ Customized report views.

Minimize Patch Failures
Top Unified
IT Solutions

Capabilities

Windows 10Migrationand Windows
as a Service(Updates)■ Automate how you deliver

Isolate andRemediate■ Stop malware in its tracks—

Self-service IT■ Create a service catalog

Windows 10 machines thatare personalized and readyfor users—then maintain all
the updates and channels
Microsoft throws at you.

isolate an infected machine,
remotely control it, remediate
or reimage it, and put it backon the network.

that ties everything together
in the background—services, deployment, asset
management—while the user
just pushes a button.

Patch for Endpoint Manager | Data Sheet4

ivanti.com
1 800 982 2130
sales@ivanti.com

Copyright © 2021, Ivanti. All rights reserved. IVI-1982 03/21 DH