I usually recommend that you set it up without filtering when using software distribution (it is generally easier to just pick and choose from the items that show missing rather than use filtering in the template when doing software distribution):
-Uncheck security patches in your template.
-Set to to no filtering (no patch group, no product filter, scan all for criticality).
-Run just the scan across all your systems.
-View the scan result - select any items you wish to deploy (you can use CTRL+click to select multiple), then right click and choose Deploy selected patches.
Just make sure you don't deploy all or you'll end up with plenty of unecessary software.
I hope that helps!
Whoops, just saw you note to disregard...