MS17-010 WannaCry patch

[FONEGUY]

Has anyone installed the MS17-010 WannaCry patch on their Symposium server ? We are running Server 2008 R2 SP1 . Wondering how long this takes and if there are any concerns .
THANKS !

 

[bignose21]

Symposium or AACC? I have on AACC 6.4 and its fine

 

[FONEGUY]

Sorry , we are running AACC 6.3 , Server 2008 R2 SP1 . Do you remember which KB version that you used ? Any idea how long the install takes ? I'm assuming that we shutdown AACC , install the patch , reboot and pray nothing fails ? thanks !

 

[bignose21]

May be worth updating the AACC SP and bringing it up to the latest 6.x SP. I will take a look tomorrow and see what kb we added

 

[FONEGUY]

Thanks . I have found KB4012212 Security Update Only and KB401215 rollup update just have to decide which to install . Our support tech has always said , DON'T MESS WITH IT ! . Unless we had a problem , he saw no need to install any of the Nortel / Avaya PEPS unless they were a critical rollout or was related to something that we used . This has seemed to work well for us as we haven't had any issues since Symposium version 1.0 was installed many years ago . Upgrades were done along the way until the last at 6.3 , since then there has barely been so much as an annual reboot . Personally , I see little risk for the WannaCry in this environment but someone on the security team noticed this during an audit , now they are on my back to add the patch . I see more risk by installing the patch and praying it doesn't break anything on the server or app .

 

[bignose21]

Yes I only say it as on the Later AACC Hotfix Compatibility files it always says all Hotfixes are ok. Where as earlier SP you had to go through the file to see what Hotfixes were not applicable.

We put ours up to SP16 an now let the server hosting company do monthly MS patching, we just shutdown the AACC before they start and then they reboot at the end of the patching and we do a health check. I would say that it is very stable at SP16 not really had any issues like used to in the past (Access channels not coming up etc.).