Panda Patch Management (Updating vulnerable programs)

Panda Patch Management is a built-in module on Aether platform that finds computers on the network with known software vulnerabilities and updates them centrally and automatically. It minimizes the attack surface and prevents malware attacks on vulnerable workstations and servers.

Panda Patch Management supports Windows, macOS, and Linux operating systems. It detects both third-party applications with missing patches or in EOL (end of life), as well as all patches and updates published by Microsoft for all of its products (operating systems, databases, Office applications, etc.).

For more information about the vendors and applications supported by Patch Management, see https://info.pandasecurity.com/patchmanagementapp/?type=windows.

Panda Patch Management does not support Extended Security Updates (ESU licenses). These licenses enable you to run Microsoft products past the end of support. For more information about ESU licenses, their availability, and end dates, see https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates.

For more information about the Panda Patch Management module, see:

Creating and managing settings profiles: Information about how to create, edit, delete, or assign settings profiles to the computers on your network.

Accessing, controlling, and monitoring the management console: Managing user accounts and assigning permissions.

Managing lists: Information about how to manage lists.

Panda Patch Management features

You can access the features provided by Panda Patch Management from these sections in the management console:

  • To configure the discovery of missing patches: Go to the Patch management settings section (top menu Settings, side panel Patch management). For more information, see Configuring the discovery of missing patches.

  • To configure patch exclusions: Go to the Available patches list. For more information, see Exclude patches for all or certain computers.

  • To have visibility into the update status of the entire IT network: Go to the Patch Management dashboard (top menu Status, side panel). For more information, see Patch management status.

  • To view lists of missing patches: Check the Patch management status, Available patches, and End-of-Life programs lists (top menu Status, side panel My lists - Add). For more information, see Panda Patch Management module lists.

  • To view a history of all installed patches: Check the Installation history list (top menu Status, side panel My lists - Add). For more information, see Installation history.

  • To patch computers: From the Tasks top menu, create an Install patches scheduled task. You can also patch computers from the context menus in the group tree available from the Computers top menu, from lists, and from Computer details. For more information, see Download and install patches.

  • To exclude computers from patch installation tasks: You can exclude computers and computer groups from patch installation tasks. The ability to exclude computers from patch installation tasks is a feature aimed at service providers that use Panda Partner Center to manage multiple customers.

    For more information, see Security product settings in the Panda Partner Center Administration Guide.

  • To patch test computers: When you configure Patch Management, you can designate test computers to install patches on and verify the installation results before you install the patches on the other computers on the network. To designate test computers:

    • Create a Panda Patch Management settings profile. From the Patch installation drop-down menu, select Designate as test computers and install patches. Assign the settings profile to the computers you want to designate as test computers. For more information, see Patch installation.

    • Create a Panda Patch Management task. Enable the Run the task only on test computers toggle. For more information, see Configuring a patch installation task.

  • To uninstall patches: Choose one of these options:

    • From the Last patch installation tasks widget, click the View installation history link. For more information, see Last patch installation tasks.

    • From the top menu, select Status. Click My lists - Add. Select the Installation history list. For more information, see Installation history.

    • From the top menu, select Tasks. Select the task that installed the patch you want to uninstall. Click View installed patches.

  • Click the patch you want to uninstall. A page opens and shows the patch details and the Uninstall button if the patch supports this option. For more information, see Uninstalling a patch.

Panda Patch Management requirements

On 30 June 2025, our Windows and Mac protection for these OS versions will become End of Life (EOL): Windows XP, Vista, Server 2003, Server 2008 (Windows 2008 R2 will continue to be supported)and macOS Yosemite, El Capitán, Sierra, High Sierra and Mojave. After the EOL date, the product license will be automatically removed from all computers that run these OS versions, and you will not be able allocate licenses to affected computers. Computers without a license will have all protections disabled, lose access to Collective Intelligence, stop receiving signature file updates, and cease to run assigned tasks. See https://www.watchguard.com/wgrd-trust-center/end-of-life-policy.

Supported Windows operating systems

Workstations

  • Windows 7 (32-bit and 64-bit)

  • Windows 8 (32-bit and 64-bit)

  • Windows 8.1 (32-bit and 64-bit)

  • Windows 10 (32-bit and 64-bit)

  • Windows 11 (64-bit)

Servers

  • Windows 2008 (32-bit and 64-bit) and 2008 R2

  • Windows Small Business Server 2011, 2012

  • Windows Server 2012 R2

  • Windows Server 2016

  • Windows Server Core 2008, 2008 R2, 2012 R2, and 2016

  • Windows Server 2022

Support for Windows ARM-based computers

Panda Patch Management is partially compatible with Windows ARM systems:

  • Detects 32-bit and 64-bit patches.

  • Installs only 32-bit patches.

  • Does not detect operating system patches.

These limitations do not apply to Linux or Mac computers.

Supported macOS operating systems

  • macOS Catalina 10.15

  • macOS Big Sur 11

  • macOS Monterey 12

  • macOS Ventura

  • macOS Sonoma

Installing operating system patches on Apple Silicon macOS computers

To install operating system patches on these computers, the computer user must enter their user name and password. The user has three attempts to enter valid credentials. After the patch is installed, the computer restarts automatically.

If the installation task includes other patches that do not require credentials, they install normally. See Installing operating system patches on macOS computers.

Supported Linux operating systems

Supported 64-bit distributions:

  • Red Hat: 7.0 and higher; 8.0 and higher.

  • CentOS: 7.0 and higher.

  • SUSE Linux Enterprise: 12.0 and higher; 15.0 and higher.

To install patches correctly, make sure the computer repository settings have not been modified and point to the distribution vendor servers.

Unsupported computers

On computers not compatible with Panda Patch Management:

  • Panda Patch Management does not install.

  • Computers keep the Panda Patch Management settings profiles and tasks assigned to them, but they are not applied.

  • The Available patches list does not show information about these computers or about the status of the patches installed.

  • These computers do not count toward the number of Panda Patch Management licenses used.

  • The installation history reports previous installations of Panda Patch Management as Not available.

Required URLs

  • https://content.ivanti.com

  • https://application.ivanti.com

  • https://stlicense.ivanti.com

  • https://help.ivanti.com

  • https://license.shavlik.com