Compliant and Pending Statuses and their Meanings

A device is marked as Compliant when it has no Pending Patches according to its current policy assignments.

A device is marked as Pending when it has one or more Pending Patches according to its current policy assignments.

Any device that has a Pending Patch count greater than zero will fall into the Pending status. This can change a device from Compliant to Pending as soon as a new patch is detected--assuming that the new patch is applicable to the devices Patch Policies.

Pending Patches vs Total Patches

Pending Patches are the count of total patches that are available to a device and are applicable to its current policy assignments and policy rules.

Note: For a patch to be counted as Pending, the Patch Policy must have a Policy Status of ON. Policies that are set to OFF are not considered in this count.

Total Patches are the count of all patches currently available to that machine regardless of policy assignments or filters.

What Does This Mean for Me?

Device statuses will be updated once per scan, based on the latest software inventory and policy settings. This takes into account anything that has changed since that device’s previous scan.

When new patches are detected, a given device will switch to Pending if any of those patches are relevant to its enabled policies.

For Example:

Device A has a Patch All policy

Device B only has a Patch by Critical Severity policy

Device C has no policies.

They are all currently Compliant. Device C will also show “Unmanaged” because it lacks any enabled policies.

A new patch releases with a severity rating of Low.

Device A will move to Pending status, as this new patch is applicable and will be installed the next time it’s policy runs on schedule. This device’s entry in the list will show 1 under Pending Patches and 1 under Total Patches.

Device B will remain Compliant. This new patch is not applicable to its assigned policy and will not be installed. Since the patch isn’t relevant to this device’s rules, it is not considered Pending. This device’s entry in the list will show 0 under Pending Patches and 1 under Total Patches.

Device C will also remain Compliant. With no assigned or enable patch policies, no patches are considered to be Pending. This device’s entry in the list will also show 0 under Pending Patches and 1 under Total Patches.

For more information on the other statuses seen in the Automox Console, please view the following article.

https://support.automox.com/en/articles/2684071-what-the-statuses-found-in-the-automox-console-mean

Did this answer your question?