Ivanti Security Controls vs. Tenable Vulnerability Management

Security Controls is particularly suitable for customers who are looking for a patch solution and need security to protect themselves from unknown malicious code. For customers who are already using the Workspace Manager Suite, we don't think the solution is that suitable. A patch for Windows would be sufficient.

Tenable.io is a cost effective Internal and External scanner. The Internal scanner came with a .ova, so it was very simple and quick to deploy it into our ESXi environment. It has a cloud-based dashboard for management and the internal scanner is configured to auto-update from Tenable.io. The license came with 4 External PCI scans (with remediation) a year.

Incentivized

• Live status update on patch deployments with an agent and also agentless deployments.
• A large 3rd party patching inventory.
• Easy to navigate and troubleshoot.

Incentivized

• Wide range of capabilities that can be customized to fit each user's environment and needs
• Provides high-quality data and insights into detected vulnerabilities
• Great customer support

Incentivized

• Better search in the application control configuration
• User rights management for modern user interface settings dialog.
• For patching, a more intuitive console. Some features are hidden or not easy to find for users who are accessing the console for the first time.

• Configuration is not always intuitive, but the comprehensive training and documentation comes to the rescue.
• The mix of classic and beta UIs currently is confusing and we find the classic UI is actually better.

Incentivized

We like to renew tenable each year we have had it so far.

Incentivized

Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.

Incentivized

Support wasn't used as the cost didn't justify the expense. We have yet to use the support.

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

Ivanti allowed for the most control without using agent deployments. Ivanti also has the largest 3rd party patching. Easy to use.

Incentivized

I think Tenable and Qualys have a lot of similarities, I continue to go back to Tenable because of my familiarity and comfort level with it. I've also used a company called SecurityMetrics which has vulnerability scanning included but it is not as comprehensive as Tenable.

Incentivized

• Reduced amount of operating hours for administration of patching.

Incentivized

• We're able to mitigate over 90% of our vulnerability risk without too much effort. It helps find where automated patching fails and we can plan a fix from the findings.
• A side effect of our scanning reveals new devices on our network that aren't cleared to be.

Incentivized