Patchlink and CSA

[bethtyler]

Is anyone using Patchlink as their method of patching servers and if so how did you write a rule to allow it. For some reason it writes a temporary account to the server and after the patches are done deploying it erases it.

[drolemc]

You can create an exception to the rule being hit using the wizard. The necessary steps are documented in the user guide at http://www.cisco.com/application/pdf/en/us/guest/products/ps5057/c1626/ccmigration_09186a00801d7e7e.pdf

[b.borachok]

I have noticed that if you run the patchlink scan it actually tries to access all files on the host using the "remote client". I have tried to manually allow for exception, but due to the application it is hard to accomplish, but possible. I noticed that the Profiler doesn't assist much in this either. You would have to work closely with the person running patchlink to manually allow for the operations. You need to be careful due to the ambiguity of the application.

[tsteger1]

Could you create an app class that includes all the active components and allow it to act as a remote client on all files?