Solved Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.
-
@JaredBusch said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@Dashrender said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@StrongBad said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
PDQ is awfully good. But for patching, why not use the OS itself or WSUS?
That works for OS level, but what about application level patching?
Also WSUS is a disaster to deal with in a small business. More headache than it is worth really.
I generally avoid it. Lots of work, encourages people not to patch. In a big environment I totally get it, but in smaller ones, I skip it unless there is a very clear need.
-
@Dashrender said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@openit said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@Dashrender Not technically, but mentally maybe
I prefer to be local than cloud.While I can understand that - I know of many Exchange servers that have had zero no anticipated downtime, but you hear about outages in O365 all the time. Even so, the environment is still better in O365 than most if not all of the SMBs can provide.
I think, it depends on the service or benefits to choose Local or Cloud.
FYI, we are with O365, which is good. And we get more benefits on cloud for Exchange things than to be local
,especially when it comes to maintenance. -
@JaredBusch said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@Dashrender said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@StrongBad said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
PDQ is awfully good. But for patching, why not use the OS itself or WSUS?
That works for OS level, but what about application level patching?
Also WSUS is a disaster to deal with in a small business. More headache than it is worth really.
Do you mean, it's not that much easy to use, so not suitable for Small Business ?
-
@openit said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@JaredBusch said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@Dashrender said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@StrongBad said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
PDQ is awfully good. But for patching, why not use the OS itself or WSUS?
That works for OS level, but what about application level patching?
Also WSUS is a disaster to deal with in a small business. More headache than it is worth really.
Do you mean, it's not that much easy to use, so not suitable for Small Business ?
I'm guessing both. It's a ton of overhead that serves little purpose (potentially even negative purpose) requiring lots of storage, another system to maintain, etc. And it takes a bit of work to use it. And it adds the risk that you might feel like you should filter your patches which, unless you have a full testing department, you should not.
-
@scottalanmiller said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@JaredBusch said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@Dashrender said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@StrongBad said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
PDQ is awfully good. But for patching, why not use the OS itself or WSUS?
That works for OS level, but what about application level patching?
Also WSUS is a disaster to deal with in a small business. More headache than it is worth really.
I generally avoid it. Lots of work, encourages people not to patch. In a big environment I totally get it, but in smaller ones, I skip it unless there is a very clear need.
I see, so it requires lots of work, which may not be feasible at Small Businesses ?
You said "encourages people not to patch", what do you mean here ? do you mean not to patch Windows Updates with WSUS from MS ?
If so, you are asking to go with some other third party software to manage Windows Updates ?
-
@openit said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
I see, so it requires lots of work, which may not be feasible at Small Businesses ?
It requires effort... and effort without real benefit. For any business all effort needs to have a reward for doing it. And WSUS generally lacks that in the SMB.
-
@openit said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
If so, you are asking to go with some other third party software to manage Windows Updates ?
What's the purpose of managing the updates at all?
-
@openit said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
You said "encourages people not to patch", what do you mean here ? do you mean not to patch Windows Updates with WSUS from MS ?
WSUS has one primary purpose in the SMB.... to stop or slow patching. But that's generally very, very bad. You want systems patched as quickly as possible. So WSUS actively gets in the way of doing a good job. What purpose do you see WSUS serving in your environment?
-
@scottalanmiller said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@openit said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
You said "encourages people not to patch", what do you mean here ? do you mean not to patch Windows Updates with WSUS from MS ?
WSUS has one primary purpose in the SMB.... to stop or slow patching. But that's generally very, very bad. You want systems patched as quickly as possible. So WSUS actively gets in the way of doing a good job. What purpose do you see WSUS serving in your environment?
I guess, nothing much. But of course, new task, time and effort to be invested.
So, if it's not making enough benefit, better to leave it updates on it's own ? (automatic updates, individually)
-
@openit said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
So, if it's not making enough benefit, better to leave it updates on it's own ? (automatic updates, individually)
Yes, absolutely. And update to Windows 10 so that you get all the WAN benefits of WSUS without needing WSUS itself. The reason that big enterprises use WSUS is because they have huge testing departments that test each patch quickly to see if it is safe to deploy to their environment. Unless you have a testing department for this, WSUS has no purpose for you. You want all patches as soon as they are released.
-
I skip WSUS. Don't want to pay for another license. Easy enough to do without it in a small place.
-
@scottalanmiller said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@openit said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
So, if it's not making enough benefit, better to leave it updates on it's own ? (automatic updates, individually)
And update to Windows 10 so that you get all the WAN benefits of WSUS without needing WSUS itself.
I think, it's about "Delivery Optimization " ? I will have a look.... -
@openit said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@scottalanmiller said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
@openit said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:
So, if it's not making enough benefit, better to leave it updates on it's own ? (automatic updates, individually)
And update to Windows 10 so that you get all the WAN benefits of WSUS without needing WSUS itself.
I think, it's about "Delivery Optimization " ? I will have a look....Windows 10 has this great peer to peer functionality where patches and updates get downloaded to the LAN and the workstations share them amongst themselves. It's awesome, automatic functionality that improves your WAN utilization, speeds patching and lowers the cost of Windows maintenance for Microsoft.
