Windows defender for Antivirus and Endpoint updates

Question

Hi All,

We are planning to deploy defender for endpoint for our premises, the patch management solution which we are using is Ivanti to deploy the patches to windows 10 and 11 client machines.

I read from the MS article that below are the patches responsible for MDE updates in windows 10 and 11 machines KB4052623 - Platform Updates KB2267602 - SIU and AV engine updates

Microsoft has provided the following update locations for signature update fallback order, I understand that we can define this update location in our Intune policy or GPO for the windows client machines to take the defender updates, but how these update locations are applicable for the environment who were using the third party solutions such as Ivanti to apply windows patches for windows 10 and windows 11 computers ?

what is the recommended approach to perform the platform updates, AV engine update and SIU for the environments who were using the third party patching solutions ?

Can we directly push these updates from third party patching solutions to the windows 10 and 11 devices ? OR the windows defender updates for Windows 10 and windows 11 machines should only be updated from either one of the update locations ?

KB4052623 - Platform Updates

KB2267602 - SIU and AV engine

Updates Update locations :

Windows Server Update Service

Microsoft Update

File share

Microsoft Configuration Manager

Security intelligence updates and platform updates for Microsoft Defender Antivirus and other Microsoft anti-malware (formerly referred to as MMPC)

Answer 1

Hi, thanks for reaching out!

The updates you’re referring to can be installed either through Group Policy (GPO) or Intune. You can follow the steps documented in these articles:

• https://learn.microsoft.com/en-us/mem/intune/protect/windows-update-for-business-configure
• https://learn.microsoft.com/en-us/defender-endpoint/use-group-policy-microsoft-defender-antivirus

However, if you’re using a third-party service like Ivanti, we suggest validating with your vendor to ensure it supports integration with WSUS or Microsoft Update to push updates to your Windows devices.

Hope this helps!