by Dave Breslin
September 4, 2012
This report template combines event and patch audit data for analysis of Windows Server Update Services (WSUS) patch deployments.
- September 4th 2012, version 1, SecurityCenter 4.4
- Required Tools: LCE, Nessus
- Download Example - WSUS Monitoring Report
- Download Template - WSUS Monitoring Report
This post uses "patch" and "update" as interchangeable terms. The dashboard template titled “WSUS Monitoring” complements this report template. The dashboard post explains the concepts behind construction of the data used in both the dashboard and report templates.
The report template produces the same information seen in the dashboard.
WSUS Server and Client Event Counts (Past 7 Days)
WSUS Server and Client Failure Events (Past 7 Days)
WSUS Clients - Windows Update Successful Events (Past 7 Days)
Missing Security Updates with Known Exploits
However, the report also provides details that would require clicking the dashboard's Browse Component Data icons to drill into the data behind the components. Here are a few examples:
WSUS Server Failures
WSUS Client Update Failures
WSUS Client Update Failure Locations
The report's Table of Contents makes it very easy at a glance to see which WSUS clients have failure events and missing updates for Microsoft Bulletins that have known exploits. The client entries in the Table of Contents can be clicked to navigate to the details.
As a final note, reports can be scheduled in SecurityCenter and automatically emailed.