ICS Integrity provides a configuration utility to help you specify the credentials and locations for downloading the latest vulnerability management and patch management information from the PAS by Hexagon SFTP site and then moving the files to a location where it can be imported by the ICS Integrity server. ICS Integrity also provides download and import utilities that you can schedule as needed to get the latest vulnerability management and patch management information. This section addresses how to use these utilities for the patch management information. For more information about vulnerability management, see Automating Vulnerability Management Information Updates.
These utilities are provided on the Integrity server. However, due to network configuration, that server may not be able to access
the location where PAS by Hexagon publishes vulnerability and patch management information. In this case, you can run
the configuration and download utilities on another computer that has the access needed
to download the vulnerability and patch management information. Then, the utilities
can transfer the downloaded files to the Integrity server where needed.
To automate the download and import of patch management information:
-
Run the FTPLoadConfigTool.exe configuration utility to specify the credentials and locations for downloading the latest Patch Management asset model. For more information, see Setting Patch Management Credentials and Locations.
-
Use Windows Task Scheduler to schedule the FTPDownload.exe utility to run after the 15th of each month and download the latest Patch Management asset model. The FTPDownload.exe utility can also perform a second transfer/move to put the updated asset model where the ICS Integrity server can import and use it. For more information, see Scheduling Patch Management Import.
-
Use Windows Task Scheduler on the Integrity server to schedule the RunDefinition.exe utility to run after the 15th of each month and import the latest Patch Management asset model. This import should be scheduled for at least two hours after the download of the latest Patch Management asset model. For more information, see Scheduling Patch Management Import.