1. 4 Best Practices for Patch ManagementApril 20, 201111:00 am PST / 2:00 pm EST

2. Introductions Moderator: Gwen Solomon, Web Editor Tech & Learning Custom Projects

3. Speakers Gerald Beaulieu IT Automation Expert Kaseya Chris Stroupe System Administrator KIPP Academy Houston, TX

4. Polling Question 1 What is your biggest pain point for Patch Management? - workstation - server - laptop - other

5. Patch: It’s the Same Problem A. Knowing about the patch, the severity, and the risk B. Getting the patch to all your servers and PCs 5

6. How Bad is Manual Patching? Monitoring for new patch: 10min/d or 61hr/yr 61hr * $70/hr = $4.5K Applying new patch: 10min or 0.16hr 0.16hr*500PC*$70/hr = $5.6K per patch MSFT patches/yr = 72 (3 yr avg) Impact of managing 1 image/yr: $4.5K+($5.6K*72) = $408K D- 6 Source: Microsoft, 2010

7. And the Exploit Timeline is Shrinking Days Between Patch & Exploit As this cycle keeps getting shorter, patching is a less effective defense Automation for testing and deployment needed 331 180 151 25 Nimda SQL Slammer Nachi Blaster Source: Microsoft, 2010 7

8. K12 Schools: Patching is Top Automation Target IT Service SW upgrades & patches Backups Monitoring Ticketing Response* 75% 61% 58% 38% *Out of 174 K12 education IT leaders when asked – by Kaseya – their top 2011 target for automation

9. 4 Best Practices for Patch Management + 1 Bonus Tip Discover & assess 1 Identify & test 2 Evaluate & plan 3 Deploy & remediate 4 Automate 5 9

10. Discover & assess 1 Best Practice #1Discover & Assess Are there any threats in your environment? Has anything changed in your operation? Do you have an accurate, current inventory? Can your infrastructure support patch management? 10

12. How do you decide if the patch relevant? Needed?

13. Which PCs/servers will need a patch?

14. What is/are the system priority/ies?

15. Which systems are most vulnerable?

16. How will you test the patch itself?11

17. Evaluate & plan 3 Best Practice #3Evaluate & Plan How do you ensure all parties agree with “need to deploy?” Exceptions? How will you install the patch? PC vs server? Corporate vs remote? Do you combine with other tasks? Who will do it? When will you install the patch? How will you test an installed patch? Do critical business functions still “work?” How much testing is required? Where does testing occur? 12

19. Do you notify users? Support?

20. Do you provide training?

21. Did you check all your distribution/deployment points?

22. At deployment

23. How do you monitor patch distribution progress?

24. How do you deal with slow connections?

25. Post-deployment

26. How do you deal with exceptions?13

28. Use predefined, predetermined network scans to assess installed - and uncover missing - patches

29. Identify

30. Create alerts to capture new software added to inventory

31. Create new patch schedules, where needed

32. Evaluate

33. Create periodic vulnerability reports - and compare to patch policy - to determine which patches are needed

34. Create patch-analysis and patch-test scenarios

35. Deploy

36. Schedule patch distribution by time, by system, by group, or by user-defined collection of systems

37. Create exception-handling routines

40. A single Kaseya user can proactively manage 1,000s of automated IT systems tasks in the same amount of time required by a team of technicians using other techniques.

41. Key Facts

42. Founded 2000 & HQ in Switzerland

43. Privately held, no debt, no external capital requirements

44. 33 offices worldwide in 20 countries with 450+ employees

45. 10,000+ customers

46. 5,000,000+ assets managed

47. Patented technology and FIPS 140-2 compliantPatented #7,827,547 16

48. The Kaseya Solution for Automated Systems Management Comprehensive Automates all systems management tasks Integration friendly Scalable and flexible Uncomplicated Lightweight, 1 agent Cross platform Easy to install & use via a single pane Affordable On-premise or cloud http://www.kaseya.com/products.aspx

49. Integrated Patch ManagementAutomated scans, policies, deployments & reports No WSUS! http://www.kaseya.com/get-started/demo.aspx

50. Other Market Leaders Universities and K-12 Schools Hospitals and Care Facilities Our Customers 19

52. Virginia Tech (500 PCs) used Remote Access (IT Toolkit) to decrease MTTR by 83%

53. N. Canejos School District (500 clients) saved $100K with automation and increased PC availability from 80% to 99%

54. Cano Petroleum (100 PCs) usedEE to demonstrate SOX compliance with 100% IT control

55. Integrated Health Management (250 workstations) achieved target HIPAA compliance every year since EE first deployed

56. BankFirst (150 PCs) used EE to satisfy FDIC compliance regulations – since 2007

57. Advanced Motion Control (500 workstations) used EE to reduce monthly CADD updates from 2 hrs/PC to 5 mins/PC

58. Redbox (10,000 clients) used EE to reduce number of kiosk-technician visits by 90% in 1 year

61. Today’s Webinar Gerald Beaulieu IT Automation Expert Kaseya Chris Stroupe System Administrator KIPP Academy Houston, TX

62. Polling Question #2 Would you like to learn more about … - Yes, I’d like to try Kaseya free for 30 days - Yes, but I have no idea what Kaseya costs - Yes, please have someone contact me - No, not at this time

64. Thank You! www.techlearning.com www.kaseya.com/solutions/education.aspx