NetChkProtect

The Patch Plus approach leverages Shavlik’s easy to use and manage NetChk Console to address organizations’ top priorities. Patch Plus bundles Shavlik’s best-in-class patch management with asset inventory, power management, and antivirus protection in an easy-to-use, centralized console to simplify and automate the top IT management challenges faced by today’s IT environments. By bundling additional features along with Shavlik’s industry leading agentless asset discovery and broad, trusted application (Microsoft and 3rd party apps) update capabilities in a single console, organizations increase their operational efficiency without increasing management overhead or costs, and puts time back in the day of the IT Administrator.

• Antivirus + Antispyware: For a fraction of the money you spend for antivirus protection today, you can have complete protection against the top security threats – operating system patching, application-level patching, virtual machine patching, and AV. NetChk Protect has integrated the Sunbelt VIPRE Enterprise Antivirus + Antispyware engine into the NetChk Agent. You’ll save time by managing AV from the same familiar NetChk Console and eliminate headaches by reducing the number of agents on your desktops and laptops.
• Asset Inventory and Tracking: IT can’t manage what it can’t see so an accurate asset inventory is an absolute necessity. Shavlik’s asset management gives you a dynamic, up-to-date method to track your software, hardware and virtual assets. You will discover physical and virtual machines you didn’t know you had and uncover software applications you didn’t know were installed. By eliminating these blind spots, you can quickly close the gaps in your security and policy compliance.
• Virtual Machine Management: Shavlik NetChk Protect enables you to scan and patch offline virtual machines. Offline virtual machines are those that aren’t powered on when a patch scan is performed. These virtual machines may be part of a roster kept to satisfy demand for more virtual machines quickly. It’s important to ensure that these systems are patched so that when they are brought online they don’t place your network at risk.
• Power Management: In the US alone, more than $2.8 billion of PC power is wasted every year by not shutting down or reducing the power state of these machines when not in use. But care must be taken to ensure sleeping computers receive software updates (patches). NetChk Protect Plus Power Management centralizes control from the familiar NetChk Console to power machines off in the evenings and on weekends AND wake machines up to deploy critical security patches
• Ease of Use: You start managing your physical and virtual assets, software, patches, AV, and energy costs.
• Active Protection with On-access File Scanning: Active Protection is an integrated component of the Antivirus + Antispyware engine. It provides real-time file scanning functions for each file as they are being accessed. This includes on-access scanning for all threats – including spyware, adware, malware, and viruses.
• Scheduled Data File Downloads: Automatically check for new patch and/or antivirus/spyware signatures on a recurring basis. The scheduled check and download function can occur hourly at intervals ranging from 1 to 24 hours – even when the NetChk console is closed.
• Automated Synchronization of Distribution Servers: Define the interval when you’d like to sync your distribution servers with the NetChk console or choose to manually sync your distribution servers. Specify that Shavlik Engines and Definitions be synchronized or Patches (or both).
• Flexible & Robust Scanning Options: Shavlik NetChk Protect provides a number of ways to perform a scan. The home page provides simple one-click methods for beginning a scan. Or, you can begin scans from within a machine group or with a favorite group. Scans can also be performed by domain, organizational unit, machine name, IP address or IP range.

NetChk Protect allows you to schedule when a patch will be executed on each remote system. The deployment can be set for a specific date/time, immediately, at next reboot, or they can be copied to the machine but not installed. Reboots can occur immediately after the installation of patches, scheduled at the next occurrence of a specific time, or a specific date/time.

• Precise Reboot Options: NetChk Protect provides pinpoint control over when systems are rebooted- during planned downtime. This is a critical difference, particularly on servers. Shavlik enables administrators to specify detailed, granular reboot instructions that allow for system restarting during scheduled windows. Remediation and reboots can be scheduled separately.
• Automated Patch Deployment: By enabling the Auto Deploy option, you can automatically enforce patch policies by correcting any discrepancies found on the scanned machines. Any missing patches are automatically deployed immediately after the scan.
• Support for Custom Patches: The program provides the ability to patch virtually any Windows application on your network, including custom applications and legacy applications. You can also scan for and deploy private patches from Microsoft Corporation. All of this is managed with the implementation of the Custom Patch File Editor. The editor’s wizard-like interface expertly guides you through the process of creating your own custom patch XML files. The program combines your custom XML files with the primary XML patch data file and uses that modified file when performing scans and deployments.
• Comprehensive Reporting: More than 20 built-in reports ranging from Executive Dashboard to Patch Status Detail. Reports detail everything from Seat License Count to Patch Status to Threat summary and detail information. Advanced filtering allows you to obtain a very granular view all the way down to specific machines or specific patches. Reports can be exported in 9 different formats. Automatically email reports or notifications by defining the email recipients in scan template, deployment template, or machine group.
• Automated E-Mailer: Shavlik NetChk Protect provides the ability to automatically e-mail scan results and reports to machine owners, network administrators, or executives.
• Support for Multiple Console Configurations: For large organizations there are many advantages to maintaining multiple consoles:
  ◦The consoles can reside at physically distinct locations and be close to the machines they are managing
  ◦You can distribute the workload across multiple consoles
  ◦The scans, deployments, and remediations are performed much quicker
  ◦You won't tie up your network trying to scan hundreds of geographically distinct machines from one location
  ◦It cuts down on a lot of network traffic, especially over WANs
  ◦The results from each console can be rolled up to and viewed from one central location
• Shavlik NetChk Agent: Shavlik NetChk Agent is an agent service. The agents configured by Shavlik NetChk Agent are distributed agents, meaning they are installed on physically distinct machines and have the ability to independently initiate specific actions. They are configured via the Shavlik NetChk Protect interface and then installed on the desired machines either by executing a menu command from the Shavlik NetChk Protect console or by manually installing them off a CD or flash drive. With Shavlik NetChk Agent you can create as many different agent policies as necessary to manage your network. This provides a great deal of flexibility, enabling you to assign different agent configurations to different machines in your organization.

Depending on how they are configured, when installed on a machine a Shavlik agent can:
◦Scan for and deploy missing patches
◦Scan for and remediate viruses, worms, Trojans and rootkits
◦Report the results to the local console

• Machine Groups: Shavlik NetChk Protect uses machine groups to keep track of the machines that are included in a particular scan. The machine groups within Shavlik's product are flexible enough to allow you to organize and group machines based on OU, Domain or IP Ranges which will automatically identify new machines that are added to the network.
• Machine View: This extremely powerful and flexible tool enables you to display current information about every machine in your network that has been previously scanned and whose information resides in the database. It enables you to align management of your security posture with how you manage your network assets. The advantages of the Machine View include:
  ◦You are not restricted to viewing just those machines involved in a particular scan. You can view all the machines that have ever been scanned.
  ◦You can quickly assess the status of all machines in your organization.
  ◦You can filter the information and drill down into the table for a more detailed analysis.
  ◦You can view both patch and threat information at the same time. With the Scan view you can only view one or the other.
• Role-based Administration: You can assign different roles to different users of Shavlik NetChk Protect. This enables you to make the program available to a wide variety of people within your organization while maintaining control over its use. The role assigned to a user determines what that particular user can do.

Minimum:

• Windows XP Professional, SP3 or later (SP2 or later if using 64-bit version)
• Windows Vista, SP1 or later, Business, Enterprise, or Ultimate Edition
• Windows 7, Professional, Enterprise, or Ultimate Edition

Recommended:

• Windows Server 2003 Family, SP2 or later
• Windows Server 2008 Family, excluding Server Core
• Windows Server 2008 Family R2, excluding Server Core

Note: NetChk Protect supports 32- and 64-bit versions of the listed operating systems for both console and target systems.