In light of the CCleaner exploit, my organization wishes to completely remove CCleaner from ever being patched or acknowledged. Right now 5 other sites submit their Shavlik scans to our console, where our console is the one who obtains the patches. It then pushes the patches out to the other sites so that they can then apply them.
From the main console, is it possible to:
1) Prevent Shavlik from ever downloading a patch from a product we don't want?
2) Prevent Shavlik from downloading a patch requested by one of the other scans that we don't want?