Dear Wallwork, Nathan,
We understand your concern: Ivanti is reporting missing .NET updates that are not applicable to your systems, as newer cumulative updates have already been installed. However, WSUS is not accurately reflecting supersedence relationships for these older updates—showing “n/a” for both “replaced by” and “replaces” fields.
This behavior can occur when metadata for certain updates is incomplete or not refreshed correctly in the WSUS catalog. Supersedence data is provided by Microsoft Update Services and is expected to reflect accurate relationships between cumulative updates. When this data is missing or outdated, it can lead to false positives in third-party tools like Ivanti.
I recommend:
Run WSUS Cleanup Tasks: Use the Server Cleanup Wizard to remove obsolete and superseded updates. This may help refresh metadata and reduce clutter.
Decline Non-Applicable Updates: Manually decline updates that are not applicable due to newer cumulative patches already being installed.
Review Update Metadata: You can cross-reference update supersedence using the Microsoft Update Catalog to verify which KBs have been replaced.
Provide Feedback to Microsoft: If you believe the WSUS catalog is missing critical supersedence data, you can submit feedback via the Microsoft Q&A platform or through your support channel. This helps our product teams prioritize catalog improvements.
I hope this helps. Just kindly tick Accept Answer that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.
Best regards,
Domic Vo