Why Cloud-Native Patching Beats SCCM and WSUS in Today’s Hybrid Work Environment

Let’s be honest – patching computers is more difficult than it used to be, since so many people transitioned to working from home. I’m also experiencing that pain as it’s clear that SCCM and WSUS aren’t ideal for the hybrid scenario we currently live in.

Why Old Tools Like SCCM and WSUS Don’t Work Well in This Hybrid World​

When everyone was sitting in an office, SCCM was great! It utilized the connection to the company network to push updates. When users are working from home, things get complicated.

SCCM depends on either a VPN connection or a direct connection back to the office to deliver updates. If the user forgets to connect, their laptop may never receive updates.

Many companies have found that about 1 out of 3 of their remote computers misses updates for 30 days or more because the users do not connect to the VPN frequently enough. It’s unsafe.

WSUS, the old software update system behind the scenes for SCCM, is likely worse. Microsoft has officially deprecated WSUS, meaning it is outdated and continues along that path! It often breaks, you have to replace WSUS when it does break, and when WSUS breaks it often simply stops updates completely!

Why Is It Better to Use a Cloud Native Solution​

The solution to this dilemma is a new type of solution called a "cloud-native" solution, which addresses the above issue through the use of an internet connection to provide access to cloud-native solutions.

Cloud-native solutions provide access to all devices supported by the cloud-based solution, regardless of their physical location (for example, a laptop can be upgraded from your home, from a hotel, or from your favorite coffee shop, etc. ).

The benefits of using cloud-based solutions include the following:

No More Need for VPN's: Users will no longer need to log in to a VPN to be able to use their machines.

Download Speeds: The cloud-based solutions will download updates at incredibly fast speeds because of the large, fast global servers.

Track Updates Live: Companies will now be able to view live progress on their patching.

Reduced Times to Patch: Some companies reported that by using cloud-based solutions, they were able to reduce their time to reach 95% of their patching from 12 days to only 48 hours.

Cost Reductions​

SCCM + WSUS are very expensive solutions to operate. The cost to run these systems include:

• Servers
• SQL Databases
• A VPN
• Storage
• A Lot of Maintenance

With cloud-based solutions, companies only pay for the cloud service, and the cloud service provider handles all aspects of operating the solution for them. Therefore, a company using cloud-based solutions will save both time and money and will no longer have the hassle of maintaining the solutions themselves.

Improvement for IT Teams, Improved Security​

Patching in the cloud does improve efficiencies, however, it also greatly increases the security of the organization. With faster installation of any updates, the time window in which an attacker can exploit a system that has not been patched has greatly diminished.

In addition, leaders can utilize dashboards to gain visibility into which systems are secure, which need an update, and which remain exposed to risk. This creates a seamless collaboration between the IT and Security Teams.

Final Thought​

Hybrid work is becoming the norm and SCCM and WSUS were created in a time gone by and are unable to keep up with the increasing demands of the remote working world. Cloud-native patching is significantly faster, easier, and cheaper, and is much more reliable than current methodologies.