HP Xw460c HP Insight Control Environment User Guide - Page 81

Results for all scans performed on the selected system appear. 4. Select the scan results to view, and click View. Customizing vulnerability scan definitions You can create custom scans from the default system scans. Custom scans are updated automatically with the corresponding vulnerability updates when the default system scans are updated. To customize the provided vulnerability scans or previously created custom vulnerability scans: 1. Select Diagnose→Vulnerability and Patch Management→Customize Scan. 2. Select a default system scan or a previously created custom scan to modify, and then click Edit. A list of vulnerabilities appears. Clicking the entry in either the Vulnerability ID or Advisory column displays additional information about the vulnerability. 3. Select one or more vulnerabilities to include in the custom scan definition. 4. Enter a name and description for the new customized scan, and click Save. You must rename the customized vulnerability scan. You cannot save a modified default Vulnerability and Patch Management scan using the original scan name. You can delete only custom vulnerability scans. You cannot delete the default system scans provided with VPM. To delete a customized scan: 1. Select Diagnose→Vulnerability and Patch Management→Customize Scan. 2. Select the custom vulnerability scan to delete, and click Delete. 3. To confirm the deletion, click OK when prompted. Deleting scan results Vulnerability and Patch Management scan results can be deleted for a specified scan or for an individual system. Removing results breaks the links to the results in the events and the system list. Run another scan to create new results for the system. Deleting scan results by scan name 1. Select Diagnose→Vulnerability and Patch Management→Scan→View Results by Scan Name. 2. Select the appropriate scan or scans, and then click Delete. All results associated with the selected scan are deleted. Deleting scan results by system 1. Select Diagnose→Vulnerability and Patch Management→Scan→View Results by System. 2. Select the individual system for which you want to delete the results from, and then click Apply. 3. Verify that the correct target systems appear in the lists. To reselect target systems, click Add Targets or Remove Targets, and then click Next. 4. Results from all scans performed on the selected system appear. Select the scan results to delete, and then click Delete. Deploying patches and fixes The following sections describe deploying HP Vulnerability and Patch Management Pack patches and fixes. Deploying patches and fixes based on a vulnerability scan You can deploy patch and configuration fixes immediately or schedule them for deployment later. You can select patches individually from the database for deployment to all systems or any combination of specified systems without performing a scan, or deploy patches and fixes for all vulnerabilities identified in a particular scan. Patches that come from software vendors can update existing software, registry, or configuration settings or files. Configuration fixes resolve incorrect system settings that can leave the system open to security threats, such as open ports or services running that are not required. Vulnerability scanning and deploying patches and fixes 81