How to Exclude Patches Using Saner PM Tool

Overview
Saner PM Tool detects both security and non-security patches for devices in your account. In some scenarios, you may want to exclude certain patches from being applied. Saner PM allows patch exclusion at Account, Group(s), or Device(s) levels.

Prerequisites

Before beginning, ensure the following:

• You have access to the Saner PM tool with administrative privileges.

• Devices and groups are properly configured in your account.

Steps to Exclude Patches

Step 1: Access Missing Patches

• On the PM Dashboard, click Missing Patches located at the top of the page.

Step 2: Select Patches to Exclude

• On the Missing Patches page, view all missing patches (security and non-security).

• Select the patches you want to exclude.

• Click the Exclude button at the top-right corner.

Step 3: Fill Exclusion Policy Details

• A pop-up window will appear. Fill in all textboxes marked with an asterisk (*):

  • Policy Name – Enter a name for the exclusion policy.

  • Reason – Select the reason for exclusion from the drop-down:

    • Not Applicable

    • Risk Accepted

  • For Days – Enter the duration (1–999 days +) for which the patch should be excluded.

  • Patches – Confirm the patches you want to exclude. You can manually add patches using the Add button.

  • Scope – Select the level of exclusion:

    • Account – Excludes patches from all devices in the account until the specified date.

    • Group – Excludes patches from all devices in selected group(s). Multiple groups can be selected.

    • Device – Excludes patches from selected individual devices. Multiple devices from various groups can be selected.

Step 4: Apply Exclusion

• After selecting the scope, click Exclude Selected Items.

• PM Tool will run a scan and exclude the selected patches from the applicable devices.

Note

There are multiple ways to exclude patches in PM Tool (e.g., from Missing Critical Patches page or PM Dashboard), but the steps remain the same.