Ask the Community
Groups
Patch Status Shows No Patch Data When Using Offline Patch Scan Option - Connect IT Community | Kaseya
<main> <article class="userContent"> <h3 data-id="problem">Problem</h3> <p>I am using <a href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fhelp.kaseya.com%2FWebHelp%2FEN%2FKPATCH%2FR8%2Findex.asp%23350.htm" rel="noopener nofollow">Offline Default Scan Source</a> and facing the following issues:</p> <ul><li>Patch Status shows no patch data (only dashes) even after patch scan</li> <li>Patch Status shows no missing patches but you believe there should be some</li> <li>Patch Status numbers do not appear to be changing over time when you believe they should</li> </ul><h3 data-id="cause">Cause</h3> <p>The Primary Data Source (Online Scan) for patch management is the Microsoft Update Catalog (MUC). Kaseya leverages the Windows Update Agent (wua.api) to check the Microsoft Update Catalog (MUC) for all patches currently available and to determine which of those patches are applicable to the endpoint. In offline Patch Scan, the scan source is <code class="code codeInline" spellcheck="false" tabindex="0">wsusscn2.cab</code> file. This file is copied to the agent's working directory from the Kaseya Server at the time of the scan. There is a file size limit to WSUSscn2.cab, it contains only an extremely limited number of patches - only current, active Service Packs, Security Updates, and Update Rollups. For example, where the MUC might contain 10,000, the .cab file might contain only 100. Of those, only one might potentially apply to the endpoint and if that patch is already installed (Windows 7 SP1, for example), then patch scan would not report any needed patches.</p> <h3 data-id="solution">Solution</h3> <p>1) Please set Set Default Scan Source to <a href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fhelp.kaseya.com%2FWebHelp%2FEN%2FKPATCH%2FR8%2Findex.asp%23350.htm" rel="noopener nofollow">Online</a></p> <p>2) Ensure the five websites necessary for patching are allowed by Firewall, Proxy, web filter, or other security services (allow anonymous browse access to these sites). The five sites are:</p> <ul><li>update.microsoft.com</li> <li>download.microsoft.com</li> <li>download.windowsupdate.com</li> <li><a href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fwww.windowsupdate.com%2F" rel="nofollow">www.windowsupdate.com</a></li> <li>vsaupdate.kaseya.net</li> </ul><p><strong>More Information</strong></p> <p>If the problem persists, refer to these resources for further troubleshooting steps</p> <p>Troubleshooting incorrect data on Patch Status page:- <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fhelpdesk.kaseya.com%2Fentries%2F33782016-Troubleshooting-failed-patch-installs-and-failed-patch-scans-and-incorrect-data-on-Patch-Status-page">https://helpdesk.kaseya.com/entries/33782016-Troubleshooting-failed-patch-installs-and-failed-patch-scans-and-incorrect-data-on-Patch-Status-page</a></p> <p> </p> <h3 data-id="applies-to">Applies to</h3> <p>Kaseya VSA - V6.3 and above</p> <p>Kaseya Patch Management</p> <p> </p> </article> </main>