GFI LanGuard vs. Ivanti Security Controls

-To track the vulnerability level of a windows network. -To push windows and other application updates from a central location. -Produce reports to highlight work being done to protect a network. In some organizations, you may have to prove for audit reasons you are enforcing policies put into place around cyber-security. This software can help you track work done on an ongoing basis for such purposes.

Incentivized

Security Controls is particularly suitable for customers who are looking for a patch solution and need security to protect themselves from unknown malicious code. For customers who are already using the Workspace Manager Suite, we don't think the solution is that suitable. A patch for Windows would be sufficient.

• Install an agent to thoroughly scan machines to discover vulnerabilities.
• Keeps there lists up-to-date with applications outside of windows and lets you know when an update is available.

Incentivized

• Live status update on patch deployments with an agent and also agentless deployments.
• A large 3rd party patching inventory.
• Easy to navigate and troubleshoot.

Incentivized

• It could be a bit of information overload which some things are shown can become noise. Maybe different levels of "security" for lack of a better term may be better where you have a summary vs detailed level when it comes to rating the vulnerability of the entire network.
• I find I sometimes have issues with PCs on a different network accessed across a VPN where timeouts often occur with very large updates. This aspect can be improved.

Incentivized

• Better search in the application control configuration
• User rights management for modern user interface settings dialog.
• For patching, a more intuitive console. Some features are hidden or not easy to find for users who are accessing the console for the first time.

I only tried to access there support once and it was a relatively pain-free process. They also have a lot of documentation available online which can be used to learn and tailor the software to suit your needs. It just takes time and effort to plan, execute and monitor going forward.

Incentivized

Support wasn't used as the cost didn't justify the expense. We have yet to use the support.

Incentivized

WSUS was the other alternative I considered but I believe GFI takes updates, reporting, and functionality to a different level for an enterprise/medium-size business environment.

Incentivized

Ivanti allowed for the most control without using agent deployments. Ivanti also has the largest 3rd party patching. Easy to use.

Incentivized

• Certainty. It allows you to know where on your network needs attention.
• Peace of mind. As security professionals, we can only put the necessary things in place to prevent malicious persons from exploiting a network. The software allows you to know whether or not your risk of exploitation is high or low. and if high what to do with it.

Incentivized

• Reduced amount of operating hours for administration of patching.

Incentivized