Managed Patchting Service for Foreign Banking
Managed Security Service
Customer Requirement
As a globally renowned multinational bank, customer plays a crucial role in the healthy financial development and economic progress of developing countries. The Windows system has various security vulnerabilities, which need to be addressed by relying on one patch after another released by Microsoft. However, the internal network of customer cannot access the Internet and cannot download patches in a timely manner for updates. Therefore, customer needs to deploy a Windows Server patch update system to solve the problem of the inability to update patches within the bank's internal network. Microsoft has specially developed a patch update management software for the Windows system called Windows Server Update Services (abbreviated as WSUS), which can achieve the download of updates through a single server and the distribution of patches via the internal network.
Solution
- Microsoft regularly releases patches on the second Tuesday on each month. The WSUS server in the company's POC environment is refreshed with the newly released patches for that month, and the patches that need to be updated are selected and pushed to the Windows Server in the POC environment for update testing to see if they can be updated normally.
- After all patches are successfully updated in the POC environment, export the patch-related files to a USB flash drive or mobile hard drive through WSUS, and disinfect the USB flash drive or mobile hard drive to ensure the safety of the exported data.
- Import the data from the USB drive or mobile hard drive into the WSUS server in the customer's production environment. Update the Windows Server patches in the DR environment first. If there are no problems with the DR environment patch update, update the Windows Server in the production environment last.
Customer Benefits
WSUS helps enterprises improve security, reduce operation and maintenance costs, and meet compliance requirements through centralized, automated, and phased patch management strategies.