The Automox patch policy gives you several filters that you can enable to control which patches are applied to your devices.
Exclusion Filter
If you want to create a policy that applies all patches except .NET, follow these steps:
- Create a patch policy and select "Patch All Except".
- In the Policy Scope section, you can select the policies and patches that you want to exclude: Enter search criteria in "Filter Package List". You can further filter the packages returned by specifying a group in the "Filter by Group" drop-down list. When you select a group, it only lists the packages found on devices in that group.
- Select packages from the Package List located in the Policy Scope section. If you select a specific package, the exclusion filter looks for that exact package. If you want to exclude based on a pattern match, you can choose the Everything "<package name>" list item. In the following example we have excluded everything that has .NET in the package name by selecting the Everything .NET list item.
Inclusion Filters
Inclusion filters are created in a similar fashion as exclusion filters - just be sure to choose the "Patch Only" option at the top of the patch policy.
Severity Filters
If you want to create a policy that only applies patches of a certain severity level, you can use a severity filter. Click the "By Severity" option at the top of the patch policy to select the different levels of patch severity that you want to have applied to the devices assigned to this policy. See the following image for details.
