How to Perform Test and Deploy on the Saner CVEM Console

Product Version: 6.5.0.0

Overview

The Test and Deploy feature in SanerCVEM’s Patch Management module allows administrators to validate patches in a test environment before rolling them out to production systems. This ensures patches work as expected, reduces the risk of downtime, and safeguards production infrastructure.

By creating patching jobs with this feature, you can first apply patches on a Test Group and, after verification, proceed to deploy them on a Production Group. Several approval workflows are available to provide flexibility and control during deployment.

Affected Deployment Types

• Cloud Deployment
• On-Premise / In-House Deployment

Prerequisites

Before performing a Test and Deploy operation, ensure that:

• Both Test and Production environments run identical versions of operating systems or platforms.
• Vulnerable assets in both environments are of the same version.
• Appropriate user permissions are available for creating patching tasks in SanerCVEM.

Solution

1. Log into the Saner CVEM Console

• Navigate to saner.secpod.com.
• Enter your credentials and log in to the console.

2. Select the Patch Management Module

• From the dashboard, click Patch Management.
• Select the asset or patch you wish to apply.
  
• Ensure that at least two devices are available — one for testing and one for production deployment.

3. Create a Patching Task

• Navigate to the Create Patching Task section.
• Select the Test and Deploy option.
  
• Provide a task name and configure Test Criteria based on your requirements.
• Select the devices where remediation will be tested.
• Click Next to continue.

4. Select Deployment Criteria for Production

Choose one of the following deployment options for the Production environment:

1. Deploy manually after test completion

   • Deployment to production is triggered manually once testing completes.

2. All test deployments succeeded with no failures

   • Patches are deployed to production only if all test deployments succeed.

3. At least one test deployment succeeded with no failures

   • Deployment to production proceeds if at least one test deployment succeeds without errors.

5. Monitor Test Environment Completion and Deploy to Production

• After test remediation is completed, go to Patch Management > Status.
  
• Based on the deployment option chosen in Step 4, the console will display the option to deploy patches to production.
• Initiate or confirm deployment as required.

Conclusion

The Test and Deploy feature in Saner CVEM provide a safe and efficient way to ensure patches are validated before being deployed to production environments. By following the steps above, administrators can:

• Reduce the risk of unexpected downtime.
• Gain confidence in patch behavior across identical environments.
• Maintain smooth and secure operations whether deploying in the cloud or on-premise.

This structured workflow offers flexibility and control throughout the patching lifecycle, ensuring effective vulnerability management across your infrastructure.

For additional guidance or troubleshooting, please contact SecPod Support.