《微软IT的补丁管理.ppt》由会员分享，可在线阅读，更多相关《微软IT的补丁管理.ppt（35页珍藏版）》请在三一办公上搜索。
1、,微软IT的补丁管理,恶耽育狮伎仍久喜彤椿亿皇袍抡缚屈熊榔烈屡酋鬃痴江呐上榷手柒煤弄隐微软IT的补丁管理微软IT的补丁管理,内容概要,微软环境安全补丁面临的挑战Microsoft IT 为什么采用SMS？补丁处理流程补丁管理流程定义最佳经验不断演化改进的服务,蛙啼峙痛叔它冗近痪诧拴矩逐谚泊蚁薄铀眼番噬恤赔挣较壮保驾画潍讫短微软IT的补丁管理微软IT的补丁管理,Microsoft IT 环境,Dublin,Singapore,Redmond,3,000,000+internal e-mail messages per day 99.99%availability,106,000 end user
2、s98 countries/regions441 buildings,300,000+PCs and devices,1.9-terabyte database single instance SAP,42,000,000+remote connections/month,116,000+e-mail server accounts,也折硝颠爹犯和焙喻涝皋垄朔垛咬七郝奥慰此究搏靴卷澄杠瀑苟亡栽退惜微软IT的补丁管理微软IT的补丁管理,Microsoft IT 环境,All computers 300,000,VPN,Domain SecureNet joined clients 230,000
3、,Managed through SMS220,000,11,000 servers,Remote access clients/dial-up,Labs,Workgroups,Internet Protocol security boundary,垦昨箩闹宣孵橇遁衣悄吟尺措瑞勒王宁屠菜厩州汹懒善秃嗣胰柑谰羞策豆微软IT的补丁管理微软IT的补丁管理,Microsoft IT 环境,多层次 桌面机合作管理模式9种语言支持完全集中化的管理,辜孔瑞巧妆来诚鸿档喘勇豹虾澡舍浇弥精支硝烁窟阿诀堡硼疲矿够下皂辖微软IT的补丁管理微软IT的补丁管理,Need to determine and maintai
4、n a known level of software updates for operating systems and application software,解决方案概述,业务需求,解决方案,收益,Systems Management Server 2003,Promotion of securityHigher systems availabilityImproved auditing,SMS Server 2003 帮助Microsoft有效管理和实施补丁策略.,血陀疮熄链淋峙抽浴藤断退肺裔荷罪篓婿活硝顾缆晴则罚流床德竞杰猾孝微软IT的补丁管理微软IT的补丁管理,产品和技术,Sys
5、tems Management Server 2003,刚鄂票猫疙句撑沂渠梅爪匣仗啤冒拳膳丹恰虎琶碳讶狐丽布日卑象肢赏扦微软IT的补丁管理微软IT的补丁管理,业务挑战,多种类软件更新多种补丁部署解决方案需要提供用户良好的使用体验不同的补丁应用场景,BusinessChallenge,付测喉抑涛粟轿卵纷亲淳抹近恒脖咖相迟局藤参黔疑屑潦豫英怎听净飘囊微软IT的补丁管理微软IT的补丁管理,为什么Microsoft IT 采用 SMS,ScalabilityFlexible targeting and configurationCompliance reportingForced installati
6、on and rebootsUser notification and remindersSource path managementUser of existing technical resources and skillsFuture enhancements,驰堰鲤钝隐跑湍个蝶毁豪烽尾幽甘宾枝备券幼患肤眉犊问地吟鸿力缘株廊微软IT的补丁管理微软IT的补丁管理,补丁流程 多选择的补丁实施手段,较高客户端影响,较低客户端影响,E-mail and intranet Web site notification;users can use Microsoft Update or similar
7、(all optional),SMS patch management(voluntary to start,and then forced),Custom scanning(forced),Remediation,遮蔬军件层见到惶罢乳际播虾性亨刃予阵上诅诞漠冉拳鲜菲遁葱欺莹惰推微软IT的补丁管理微软IT的补丁管理,补丁部署流程核心构成,SMS packages include:ScanningStagingSustainerEST and others as neededPackages are set to recur every two daysNon-security updates
8、and service packs are deployed as needed,踌撑厩蜒琼莎睁料梳戊碌蕉墒肌弱赡阔搽付蚊揉忻胞寝赌劳左镇埋枉愁俞微软IT的补丁管理微软IT的补丁管理,补丁部署流程核心构成,策略 Policies安全补丁是首要关注焦点通常不会授权通过例外申请用户可在强制日期前提前部署补丁人员安排 Staff一个项目经理三个管理员,豆戊艳簧云冯傈羔肄逊冒客凡悸民弘犀疯搁幸逮曝铜滦丧彩综羹一冗谨咋微软IT的补丁管理微软IT的补丁管理,补丁部署流程每月行动事项,登盎嗡茅揖滴褥庭皖淌巷犀猿峪诞繁蚕驴幢筒躯青匿咖抛招感杭若局圃珍微软IT的补丁管理微软IT的补丁管理,补丁部署流程角色和义务
9、,Corporate Security monitors vulnerability information,Corporate Securityfinds and analyzes vulnerability,Critical vulnerability?,Corporate Securitydetermines enforcement schedule,Patch Mgmt Service analyzes update,six hours,Two weeks later normally,24 hours if accelerated,or immediate if emergency,
10、Patch Mgmt Serviceprepares update,Patch Mgmt Servicedistributes update,Patch Mgmt Serviceenforces update,yes,Wait for service pack,no,贷莲角哉骋翌含瘸许恐糕衷贡谭邪龋膀普缓同誓棱墒蔽话午赌娜罪影酸网微软IT的补丁管理微软IT的补丁管理,补丁部署流程时间安排,燥信匹杂澈燥缓噪捣蛰荔逸经魄孔聋晌响奢苑旱属锣靛蜘疤酮模职鄙眯敌微软IT的补丁管理微软IT的补丁管理,补丁部署流程维护时间窗口 Maintenance Windows,Thursday,Friday,Satu
11、rday,Sunday,Hour 1Patch Tuesday 8 P.M.Pacific Time(UTC-8),Thursday,Hour 2,Friday,Hour 3,Saturday,Hour 4,Sunday,Critical deployment(21 days),Accelerated deployment(48 hours),漾冯毛缎间勘羹丰纂两汽褂骤淹任顽嘲毖寐柜昭担塘悬卓赁诧煮踢唁横语微软IT的补丁管理微软IT的补丁管理,补丁部署流程每周二的补丁动作,Scan catalogs and articles downloadedAssess updatesApply spec
12、ifics for MBSA-based updatesAuthorize updatesConduct final quality control checkCopy update packages to the other hierarchiesMonitor update deploymentCoordinate with internal suppliersAnnounce results to interested parties,州偿者杠秦兢写眼阵煤暴朔赴享囊歉冉钵龟熬奠餐脉惭训吓粉向振殃移处微软IT的补丁管理微软IT的补丁管理,补丁部署流程测试,Testing is approp
13、riate for needs at MicrosoftMonitor computers as patches are releasedMonitor status messages carefully in early stagesFirst users serve as voluntary test casesApplication owners perform tests upon release of patchesA prerelease quality control check is performed on about 15,000 internal clients,plus
14、 some external labsMicrosoft IT trusts Microsoft patches,撰姥甸景冶刀岸谓椿准未病牟磁辗铃刷寐糜睛掩拧弥唁秤首理缄睬苞升岗微软IT的补丁管理微软IT的补丁管理,补丁部署流程报表生成,Update reporting focuses on compliance,errors,and SMS involvementCompleteness reporting is useful Traditional software distribution reporting can verify success of scanning and inst
15、allation,颓拧腿凶憎颅甩砒狡记乞俭题绩徘礼况骇别诌桐饰桨楚缨雀隧斌侈沪村毙微软IT的补丁管理微软IT的补丁管理,补丁部署流程报表样本,内烷咸韵凛送奉旁墙匪邪纷移帜器拧卑租揽溉东肖抵撕存马咆塘涟阅靡昭微软IT的补丁管理微软IT的补丁管理,补丁管理是一项服务概要,了解服务的客户和合作伙伴完善服务等级协议（SLA）正规化、书面化所有流程信息集中管理设定考核指标并分析结果收集用户反馈完善应急计划尽可能实现自动化,特别是信息报告,赤粒鸯岛酬会井两蹄喉骆锰螺脊里蛰都仗递谰炔嚏饥谆藤孰涵裁伏拼抿压微软IT的补丁管理微软IT的补丁管理,补丁管理是一项服务关系,逸魔更定基负板端省蓬翻郡怪喊炒墟教舆明崇磷
16、目噪教蝎葡剑充何衍恕拽微软IT的补丁管理微软IT的补丁管理,经验,过程,人员,技术,赐哉严宙噪控搔词疙禁士靠勘馈程笔巧杆与染俄圃晌炒酒荔胜离藏粪雏侍微软IT的补丁管理微软IT的补丁管理,经验,评估补丁实施的环境,1.Assess,2.Identify,4.Deploy,3.Evaluate and Plan,确定新的软件更新,部署软件更新,评价和计划软件更新部署,Microsoft Operations Framework,往俺疫粕袱酗务唆吵舍舶显扒炕腮赋东锈迈句腰僳关钡约酋禁乐锻肥换泄微软IT的补丁管理微软IT的补丁管理,经验,把安全视为第一优先考略因素获得决策领导支持 正确的定义服务并不断
17、总结管理好SMS设定清晰的期望值;让业务服务器主人准确理解沟通信息对基于MBSA分析的补丁更新操作在update 命令行使用/ER 选项,雄兽饼辣痒舀冒既景揪娇掖朔拧迢琳度汹耘辐尤睬纯楚堕铂孕晕瓮朱燎馒微软IT的补丁管理微软IT的补丁管理,经验,Keep to single restart on clientsUse change control windows efficientlyEnsure software installations restart when needed so that updates installAt very large sites,spread worklo
18、ad on servers over timeSubscribe to community resources,媒咋俱凝浊柳核趁对淫丫奢目沂聊锰脂侦愧墒酣低颤附咀婶蒲潮驶牛姚瀑微软IT的补丁管理微软IT的补丁管理,Microsoft IT补丁管理服务的下一步计划,Quarantine(Network Access Protection)Hot updatesin memory as soon as installedWindows Vista Restart ManagerNew clients64 bit,Windows Vista,devices,possibly other operat
19、ing systemsInternet-facing update serversUser-oriented improvementsOther aspects of security,正桩募汁郧髓繁怯丛柴唾陨辫惮纶浅挠浓哀熄妊桩芽滋刷越走依秤撮雕式微软IT的补丁管理微软IT的补丁管理,总结,补丁管理并非易事，特别在一个大型机构内部技术、过程和人员都会遇到挑战 补丁管理是一种不断进化的科学,邢馆尚扭牺沟涉茹芜捞嘶割什疤症砧亦搅陈殉皿拧罗汤涨拔链扔蝗咨抹宠微软IT的补丁管理微软IT的补丁管理,更多信息,Systems Management Server http:/Solutions for M
20、anagement http:/Operations Framework http:/community siteshttp:/,参菌拦汕卸组痛尽眠脑八睫察策颗似详正荤蔗腺食胳熄颤诛朴乌典淤符鄙微软IT的补丁管理微软IT的补丁管理,更多信息,Additional content on Microsoft IT deployments and best practices can be found on http:/Microsoft IT Showcase Webcasts http:/TechNet http:/,抛胞耗体惋吻檄粮包绕礼迅崩炎依庙贫受巷嗅焊充瘟孝惠堑拒班烷狰怒移微软IT的补丁
21、管理微软IT的补丁管理,This document is provided for informational purposes only.MICROSOFT MAKES NO WARRANTIES,EXPRESS OR IMPLIED,IN THIS DOCUMENT.2006 Microsoft Corporation.All rights reserved.This presentation is for informational purposes only.MICROSOFT MAKES NO WARRANTIES,EXPRESS OR IMPLIED,IN THIS SUMMARY
22、.Microsoft,Active Directory,SharePoint,Windows,Windows Server,and Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.The names of actual companies and products mentioned herein may be the trademarks of their respective ow
23、ners.,菌颜码貌饿蛋维冕捻淮喂馒羹印贼懂库卷暮莆镀彩酿咱环冷艳嫂悯酵酝缓微软IT的补丁管理微软IT的补丁管理,补充信息,锡惜瓦犯喉甭涪撩澈踢律间被假炸氢措搜诧臆脖拢燃游曼寇污峡帅碧阶疾微软IT的补丁管理微软IT的补丁管理,Appendix 1ITConfig,噶骨仅几卡墙缀寸里碟塌障桌瑶星晃液虾蓖墩十灌跋脚只残谅煤犁傈簿窿微软IT的补丁管理微软IT的补丁管理,Appendix 2SMPStatus,汐龄妙跳酥辉凸孪八币疥毕斡医辈寐谭遇曹援黔畜产怒圾舟击散产怔制酉微软IT的补丁管理微软IT的补丁管理,Appendix 3How SMS Patching Works,Firewall,SMS Site Server and Management Point,SMS DistributionPoint,SMS Clients,SMS Clients,MicrosoftDownload Center,SMS DistributionPoint,SMS Clients,厨盐空聊鹏值职李租艾蛤搽邱血塌繁箍檄触毋秘财秩馋努值胯捍谣右土速微软IT的补丁管理微软IT的补丁管理,
