For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

AhmedSaied_2402's avatar
AhmedSaied_2402
Icon for Altostratus rankAltostratus
Apr 10, 2018

How APM calculate critical missing windows updates

Hello,   In APM it can check on windows update name like KB3170455 also it can perform another check from patch management on Microsoft Windows Update Agent and shows missing patches for example t...
application delivery
BIG-IP Access Policy Manager (APM)
Ford_Prefect's avatar
Ford_Prefect
Icon for Cirrus rankCirrus
Dec 03, 2020

Hi!

Exactly that one question I am wondering about. Does anybody know the answer? Really appreciate your help.

I have already analysed client PC with OESISDiagnose tool from epsec-1.0.0-936.0 image, collected APM session variables and analyzed WAAPI errror codes from https://github.com/opswatgears/innovation2014_topic2_1/blob/master/Mac/Source/ProcessMonitor/ProcessMonitor/wa_api_error_codes.h

 

because there are such errors in Mac user session variables. But I still have no idea how exactly f5epi checks client OS, over some API calls? Is everything collected from the embedded software update subsystems? From logs it looks like f5epi just receive some kind of response from system update managers: Windows Update Agent (Win), Advanced Packaging Tool(Linux), Software Update(Mac)