WSUS and enVision

[RSAAdmin]

Has anyone setup envision to collect events from WSUS?

[AnkushBaveja]

what kind of events are you looking for in WSUS ??

[RSAAdmin]

Ivan~

If you are talking about adding enVision appliances to WSUS, then yes we have added our appliances to our WSUS.  As I recall, all we had to do was adjust the registry keys for assigning the WSUS server and adjusting the various automatic update options.  See keys HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate and HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU.

Hope that helps.

Bart

[RSAAdmin]

Event collection from WSUS is on our roadmap.  I can't give you an exact date, but we are tentatively shooting for this year (and there aren't many months left).

[RSAAdmin]

Any updates on envision supporting WUS patching logs for reports?

[RSAAdmin]

Hello,

WSUS v3.0 support was released in the November ESU.  You can find the instructions for the device configuration on the Secure Care OnLine site at http://edelivery.rsasecurity.com/docs/rsa_env/device_config/Microsoft_WSUS.pdf

Cheers.

[RSAAdmin]

Its great that RSA added WSUS support.  

What about reporting - have any ad hoc reports for WUS been added (looks like no?)

[RSAAdmin]

Hi,

We added 4 reports with that event source update:

• MSWSUS - System Errors
• MSWSUS - System Alert Action Required
• MSWSUS - Successful Update Installation and Un-installation
• MSWSUS - Failed Update Installation and Un-installation

As always, we welcome your input and feedback.  If you have suggestions for reports that you think we should deliver out of the box let us know. 

Thanks.

[RSAAdmin]

ah, found it!  If anyone else is looking, the reports are not under Host - Windows, they are under Network -> configuration management -> MS WSUS

thank you

[RSAAdmin]

Not to seem ungrateful, but it looks like support was added as long as during the WSUS install the SQL option was selected. However although MS offers SQL as a DB option, their default option is to use Windows Internal DB. Naturally we took the default option. Any chance Envision can be set up to work with that?