TrueSight Automation Console, a product by BMC Software, is designed to simplify patching, quickly remediate security vulnerabilities, and ensure compliance by automating the patch, vulnerability, and compliance management process for Windows and Linux servers, integrating with TrueSight Server Automation.   

TrueSight Automation Console integrates with TrueSight Server Automation to identify, analyze, and remediate missing patches, vulnerabilities, and compliance violations in your environment. IT operators and administrators use Automation Console to automate the patch, vulnerability, and compliance management process for Windows and Linux servers. Using Automation Console, operators can create operations for performing jobs in TrueSight Server Automation. 

Automation Console also integrates with TrueSight Network Automation to provide some of the vulnerability management capabilities for network devices. 

Patch Management 

Organizations spend significant time and effort in monitoring a network of servers to keep track of the patches installed and configured on the servers, also known as assets. With application vendors releasing patches periodically, an organization invests a considerable amount of time in obtaining the released patches, evaluating the impact, identifying gaps, and eventually installing these patches. Most security breaches occur due to known but unpatched vulnerabilities. Typically, a patch administrator analyzes individual servers to determine the patches to be acquired and installed to comply with the organizational policies. This process involves significant time and manual effort.  

Using Automation Console, an administrator imports patch catalogs from TrueSight Server Automation. These catalogs store patch metadata released by the vendors. An IT operator creates a patch policy based on a catalog, which runs a patching job in Server Automation. This job scans the assets according to the policy settings and identifies missing patches on assets. Operators can then create an operation to install missing patches, restart the assets, and send notifications after the operation is complete. Patch management is for the TrueSight Orchestration endpoint manager only. The end-to-end patch management process of identifying missing patches and installing them on the assets is done automatically by integrating seamlessly with TrueSight Server Automation. 

Vulnerability Management 

Automation Console helps you maintain the integrity of enterprise computing by analyzing and remediating vulnerabilities across your environment. By establishing a connection with the endpoint manager, such as TrueSight Server Automation and TrueSight Network Automation, Automation Console enables you to remediate vulnerabilities on the assets such as servers or network devices in the environment. 

Compliance Management 

Compliance is the process of determining whether the systems in your environment meet a specific standard. That standard might be a regulatory standard, such as DISA or SOX, or some type of internal standard defined by an organization. 

You can now create a compliance scan policy in Automation Console, which scans the specified assets, and displays the compliance posture of the assets (which shows a percentage of compliant, non-compliant, and indeterminate assets) on the Risks > Compliance page. After identifying compliance violations on the scanned assets, you can create remediation operations to resolve the violated rules and make the assets compliant. 

A new Compliance Dashboard shows the compliance posture, non-compliant assets by risk score, SLA, assets by stages of compliance, and other such metrics about the compliance evaluations on the assets in your environment. Compliance management is for the TrueSight Orchestration endpoint manager only.