WSUS + Automox FAQ: How to Implement Together

We’re often asked when Automox is the better choice than WSUS. Of course, we’re biased, so we say ‘always’. But the reality is that some choose to run both WSUS and Automox together, to get the best of both worlds. Here’s what that can look like.

What is WSUS?

Before we dive in, let’s do a quick recap of Microsoft’s Windows Server Update System (WSUS). Microsoft created it in an attempt to provide a centralized patch management solution for Windows workstations and servers.

For a long time, it was effective enough. But it’s never been without its shortcomings:

• Clunky controls

• Heavy maintenance

• Non-existent coverage for Linux, macOS, and third-party applications

As it turns out, WSUS in many cases may be more trouble than it’s worth. These drawbacks are forcing administrators to spend too much time across too many tools just to cover the patching basics.

When should I replace WSUS with Automox?

Now could be a good time. As we said, WSUS can be clunky.

If you’re struggling with maintaining or using WSUS, or running into issues with patching devices off the corporate network, a cloud-native solution like Automox will immediately eliminate architecture-related maintenance and the need for VPNs. In fact, anything that can reach the internet will get patches, configuration, software, etc.

Teams using additional tools for macOS, Linux, or third-party software patching can also save time and reduce complexity by making the switch to a cross-platform solution like Automox.

When should I use Automox and WSUS together?

Many organizations transition from using SCCM + WSUS to Automox + WSUS for a more usable platform that can manage Linux and macOS (and third-party patching) seamlessly in addition to Windows.

When organizations purchase Automox, some continue to run WSUS due to bandwidth usage concerns at large locations, where everyone is on the corporate network.

In these environments, WSUS operates as a patch caching and distribution mechanism to reduce bandwidth consumption. In this scenario, organizations use Automox to create simple policies to manage patching that points to the WSUS server.

Bandwidth optimization is also possible without WSUS thanks to Windows Delivery Optimization (DO); these settings can also be configured easily with Automox Worklets. We’ll dive into this later.

Can I manage bandwidth usage without keeping WSUS?

Yes. Suppose you’re ready to eliminate all infrastructure related to patching and managing endpoints but have locations with many devices on the same network… In that case, you might want to manage the bandwidth they can consume when downloading patches.

Historically, this could be done with WSUS. But luckily, there are ways to reduce bandwidth usage on Windows 10 and 11 devices without forcing your team to waste time maintaining legacy infrastructure.

We’ve created an Automox Worklet to restrict bandwidth usage for patching across your managed devices – it really is the best of both worlds, allowing your network to maintain maximum productivity while allowing you to get rid of expensive and time-consuming legacy architecture. (Try it yourself in the Worklet Catalog.)

Windows + WSUS:

Managing patching for Windows desktop and laptop operating systems like Windows 10, as well as Windows Server operating systems, is what WSUS was designed for. It’s certainly not easy, with database requirements and management, and most of the administration taking place with PowerShell. If you only need to manage a few on-prem Windows devices and don’t mind using PowerShell or taking on the maintenance of a tool that can be finicky at times, WSUS may get the job done for you.

Linux + WSUS:

If you’re hoping to manage Linux updates with your WSUS server, you’ll, unfortunately, need to explore other avenues. WSUS can only manage Windows devices, so to manage Linux distributions you’ll either need to patch manually, use a distribution-specific tool like Red Hat Satellite, or consolidate to a single tool that can manage both Linux and Windows systems. Linux is not supported within the Microsoft endpoint management suite, as SCCM saw support for Linux removed in 2018, and newer management tools like Intune don’t support the management of Linux either.

macOS + WSUS:

In mixed environments with both Windows devices and Apple laptops or desktops using macOS, you won’t be able to manage macOS updates with WSUS either. Previously, SCCM could help with macOS management, though support for all versions has since been removed and shifted to Intune, with more limited management capabilities.