How To:

How to create Definition download settings in Download Updates

There are many different reasons a customer would benefit by utilizing Definition download settings. In this example, we will be using the following scenario:

I want the devices in my environment to only scan Microsoft vulnerabilities.

Step by Step:

1. In Patch and Compliance, click on the Download updates icon

2. Click on Definition download settings...

3. Click New

4. In the Filter tab, under Definition type and severity, choose Vulnerability and Any

5. Under Comparison, choose Vendor, choose Contains, type in Microsoft

6. Click on the Scan tab

7. Check the box for Assign scan status

8. Check the box for Disable any rules this definition replaces

9. Change Global scan status to Scan (global)

10. In this scenario, I do not want my devices to Autofix, so I am leaving that tab untouched

11. I am also not utilizing the Groups and Tags tab in this scenario

12. Same for the Rollout projects tab

13. Click OK

14. You will now see the Definition download setting you have just created

15. Click Close

16. Since I only want my devices to scan for Microsoft vulnerabilities, I want all other definitions to be put in Unassigned so that my devices will not scan for them. Under Definition grouping, change Set new definition scan status to Unassigned

17. Click Apply

Now that you have made these changes, you will need to create a Scheduled download task. If you already have one, delete it as it will not contain the changes you just made.

18. After you have clicked Apply, click on Schedule download

19. In this window you can review your download settings. Notice how there is now information in the Patch and definition settings box

20. Click OK

21. This creates a Scheduled task. Click on Schedule task and specify when you would like Download updates to run. In this case, I would like my core to download updates every day at 6am

22. You will now see a recurring task in Scheduled tasks for 'Download patch content'

**When this task runs, the new definition download setting will take effect. Any definitions that have been downloaded before this will not be affected by the definition download setting you just created.**