Patch Management Requirements

Applies To: WatchGuard Patch Management

These products support the installation of WatchGuard Patch Management:

  • WatchGuard Endpoint Security Basic
  • WatchGuard Endpoint Security Prime
  • WatchGuard Endpoint Security 360
  • WatchGuard Endpoint Security Elite
  • WatchGuard EDR

WatchGuard EDR Core does not support modules. We recommend that you upgrade to Endpoint Security 360.

Hardware Requirements

  • Processor — Pentium 1 GHz
  • RAM — 1 GB
  • Disk Free Space — 650 MB

Supported Operating Systems

Patch Management supports Windows, Mac, and Linux operating systems. Patch Management is fully compatible with Windows ARM systems.

Linux and Mac computer patches cannot be uninstalled.

We do not support Microsoft operating system patches from the Microsoft Extended Security Update (ESU) Program.

Windows

Workstations

  • Windows 7
  • Windows 8
  • Windows 8.1
  • Windows 10 (including ARM)
  • Windows 11 (including ARM)

Servers

  • Windows 2008 R2
  • Windows Small Business Server 2011
  • Windows Server 2012
  • Windows Server 2012 R2
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2025 (including ARM)

Patch Management does not support the Windows Extended Security Update Feature in Windows Server 2012 and higher.

Mac

  • macOS Catalina (version 10.15)
  • macOS Big Sur (version 11)
  • macOS Monterey (version 12)
  • macOS Ventura (version 13)
  • macOS Sonoma (version 14)
  • macOS Sequoia (version 15)
  • macOS Tahoe (version 26)

To install operating system patches on computers with the Apple Silicon infrastructure, the computer user must enter their credentials. The user has three attempts to enter valid credentials. After the patch is installed, the computer restarts automatically. If the installation task includes other patches that do not require credentials, they install normally.

Linux

Supported 64-bit distributions:

  • Red Hat: 7 and 8
  • CentOS: 7
  • SUSE Linux Enterprise: 12 and 15

Patch Management requires that the device repository configuration has not been modified and that it points to the distribution provider’s servers. Other distributions such as Ubuntu, Fedora, and Debian are not supported.

Required URLs

These URLs are required to download the knowledge files of Patch Management:

  • https://*.ivanti.com
  • https://license.shavlik.com

For a list of URLs required to download catalog content and patches, go to this Ivanti Knowledge Base article (external link).

Unsupported Computers

On computers not compatible with Patch Management:

  • Patch Management does not install.
  • Computers keep the Patch Management settings profiles and tasks assigned to them, but they are not applied.
  • The Available patches list does not show information about these computers or about the status of the patches installed.
  • These computers do not count toward the number of Patch Management licenses used.
  • The installation history reports previous installations of Patch Management as Not available.

Related Topics

WatchGuard Cloud URLs and Network Access Requirements

Supported Third-Party Applications (external link)

Designate a Cache Computer (Windows computers)

Configure Patch Management Settings

Install Patches