How to apply Microsoft windows Patches for Call managers

[banalas_2]

I am planning to do windows Update on the CallManagers , is there any Process & Procedures for Updating the Patches, because iam Having MBlaster worm in the Network

Thanks

Sridhar

[c-charlebois]

I would recommend calling TAC if at all possible before putting any MS Patches on a CCM. Cisco will come out with the "Cisco-ized" version of the MS patch soon, I should think.

The CallManager OS install makes some slight changes to Windows under the hood, so unaltered MS Patches could break something else.

[tboynton]

The problem is that Cisco doesn't come out with them fast enough.

[jvanick]

didn't the WIN-K9-MS03-26.exe patch fix this? that was the one for the RPC bugs I thought...

if not that... 2000-2-4 + 2000-2-4sr5 should have fixed it...

we have 'Blaster running all over the place here and none of our callmanager servers have even hinted at getting hit.

-J

[dugrant]

Actually, this patch has been on CCO since August 1st.

Cisco's MS Patch policy is that all Critical patches released by MSFT will be posted to CCO within 24 hours, other patches will be released on the 1st and 15th of the month.

[rneil]

We are having the same problem with our CCMs, so I too would be interested in the answer.

[dugrant]

No, do not run Windows Update. We have packaged all of the necessary updates into easy-to-use executables downloadable from CCO.

Everyone should have the following patches installed:

win-OS-Upgrade-K9.2000-2-4.exe

win-OS-Upgrade-k9.2000-2-4sr5.exe (contains patch for blaster)

It is also a good idea to update your SQL to the latest service pack.

Both the WIN OS updates and SQL updates are available from the OS/BIOS software section:

http://www.cisco.com/cgi-bin/tablebuild.pl/cmva-3des

Please also see these links for more details on Blaster (also called Poza, Lovsan or msblast):

CallManager:

http://www.cisco.com/warp/public/788/AVVID/callmanager-love-worm.html

Unity:

http://www.cisco.com/warp/public/788/AVVID/unity-love-worm.html

[rlotwala]

Sridhar,

I agree with Dugrant and in addition here's another Url which will be helpful to you.

http://ftp-sj.cisco.com/cisco/crypto/3DES/voice/cmva/win-OS-Upgrade-K9.2000-2-4sr5-Readme.htm

Reminder, make sure you're running " win-OS-Upgrade-K9.2000-2-4.exe" in order to apply SR5 patch.

Thanks.

Raj