Microsoft updates

[glarkin]

Besides my vendor, where can I find which Microsoft updates are safe to install on my SCCS and Web Client servers? I can't get them from Nortel's site and my vendor takes way too long to get them to me. Our IT group wants new patches from Microsoft installed as soon as they're released but we always have to wait and end up being the last group to update our servers. Why does it take so long, and why isn't it readily available from Nortel's site?

Greg

 

[cgilmer]

This has always been an issue with regards to and IT group wanting security patches placed on every server. Plain and simple your answer has to be "No don't touch it" for these reasons.

First being that you might just well find they aren't compatible which leaves you with either restoring from a backup or backing out the patches. Either way you inccur downtime and their need for compliance ends up affecting the customers.

Secondly, don't expect support from your vendor or nortel if you call them up and say we loaded these patches and its not working now. They will tell you to remove the patches and call them back if there is still a problem. Sure they might help you through a reload but you aren't going to be troubleshooting the application while the patches are on it.

Your vendor should be providing you either with the information on what is okay to install or get it for you when you ask. I can say that even knowing this you still have to allow for testing time. If Microsoft releases a patch on Monday realistically you can't expect Nortel to have it tested "fully" on all of their server based applications that day/week(s).

Nortel Releases "Product Bulletins" to its Distributors. The hard part as you know is getting that information in a timely manner for yourself. My suggestion would be to try and put it in as part of your contract so they can be held accountable for providing you the information.

Just like them, we don't like troubleshooting something that already has a PEP out for it so it would be nice if that information would be passed along as it was available. Instead you get the answer of "Not all system configurations require these so we only distribute them as the issues arise in each system".

 

[glarkin]

Thanks for the reply. I realize it will probably take Nortel a couple of weeks to test all the patches, and I can appreciate that. After it's available it still takes my vendor an unacceptable time to get the information to me. How hard would it be to proactively send the spreadsheet out to your customers that have Symposium once it's available? I could go on and on about our telecom vendor...the only thing I really like is our local tech. Everything else about them is terrible. Sorry for the rant...

Greg

 

[cgilmer]

Try this and see if it doesn't help you out a bit...

Go to

http://www.nortelnetworks.com/

Select "Support&Training"
Click on "Technical Support"

There is a box on the bottom right side of the screen with a link to "Security Advisory Bulletins"

This might help some although it might be a bear to search through.

((Your Location: Home / Technical Support / Security Advisory Bulletins ))

 

[glarkin]

Excellent, I was able to find information on every patch our server group asked for except one. Your assistance is greatly appreciated!

Greg

 

[TheWorkingMan]

Just FYI, Nortel has two days to test all critical hotfixes. If you think that your network is going to have that probelm before Nortel can test and verify the hotfix then backup your system, split the RAID take all precautions for a failure. But install the hotfix. Nortel will not be held responsible for holding up patches. But you must take these extra precautions because the hotfixes have not been tested with the application.

TWM