BeyondTrust Endpoint Privilege Management vs. HCL BigFix

It is an absolute must in all organizations where security is taken seriously. For organizations where there is a tendency among the users' end to abuse access privileges, this tool comes in handy. It has features that would enable the administrator to look through video logs to see what was done by a specific user. Also has the capability to terminate or lock users/ user sessions.

Incentivized

BigFix is well suited for patch review and deployment, but there are key features that can definitely be improved. An example is that if a specific patch is deployed, but a cumulative update that contains that patch is not deployed, the system still shows the patch as outstanding or not implemented. Another area for improvement is the customization of BigFix. The tool has many uses and can be extremely helpful, but the amount of knowledge required to customize the solution is significant and customized scripts or "fixlets" need to be created. If common things could be pre-packaged and provided to the customer community, it would allow for an easier deployment and use of the tool.

Incentivized

• Allow applications updates without IT need
• Block dangerous applications
• Block unknown applications
• Elevate some windows basic function as installing local printer

Incentivized

• Custom patch packages are easy to set up and allows for use with a repository.
• Asset management by use of agents is simple and allows for user assignment by the device.
• Reporting has a large variety of templates.

Incentivized

• Better communication to customers on new release compatibility
• Crowd-sourced rule logic for specific applications would be nice (I hear underway)
• Technical support processes could be a bit improved

Incentivized

• No console for macOS
• No easy setup UI for macOS users
• Patching can be complicated if you don't understand relevance
• Patching can be complicated it you don't understand scripting
• Could be better in helping with CIS Benchmarks

Incentivized

BeyondTrust Endpoint Privilege Management is really usable thanks to the Cloud platform that provide central management, analytics, updates and policy definitions. For policies, quickstart covers around 80% of the overall configuration and we just have to define home made applications and dedicated use cases. From the user perspective, messages can be customized so it's easy to understand for user and they have an endpoint application to follow workflows approval.

Incentivized

We've had no availability issues.

Incentivized

We've had no performance issues.

Incentivized

The product performed to the level of our requirements.

While some support calls are quickly responded to, many times our engineers have been pointed to collaborative web sites such as Bigfix.me for solutions or the option of engaging professional services has been proposed. While this may seem like a good way to drive business, it is not seen as efficient a support process as could be provided to the customer base.

Incentivized

The in person training was great. Very informative and the trainer was great. I would highly recommend this option if you're hesitant. Any questions can then be directed to support. Support is great as well, and will definitely help answer any questions. I would definitely
recommend adding some type of training as it was very helpful for our
staff.

Incentivized

It was informative and very helpful. They provide a lot of courses that give you exactly what is needed to manage the product. Any questions can then be directed to support. I would definitely recommend adding some type of training as it was very helpful for our staff. The online training sufficed for us.

Incentivized

BeyondTrust was super helpful with implementation and it only took a few weeks to get it up and running.

Incentivized

BeyondTrust Endpoint Privilege Management has more features than CyberArk and more detailed options for configurations. BeyondTrust Endpoint Privilege Management is more focused on setting up access-related endpoints, which requires some fine tuning and understanding for use cases where a single endpoint has to be shared with multiple vendors. CyberArk's setup is more geared to users' accounts and then endpoint management under the user accounts.

We have significantly enhanced our ability to patch desktops, including laptops, desktop, cloud, virtual machines and other mobile devices used by end-users. BigFix's endpoint management functionality allows us to seamlessly patch a wide range of operating systems, such as Windows, MacOS, ChromeOS, and Linux systems, ensuring comprehensive patch management across IT infrastructures. We have established a track record of delivering secure and hassle-free patching solutions to our clients

It's very easy to deploy with minimal interruption.

Incentivized

• We are able to securely monitor activity from vendors accessing our network.
• This meets our cybersecurity objectives of securing our OT networks.
• The benefits far outweigh the initial cost of the software.

• Overall, the product helps achieve the security posture mandated by HIPAA for our organization.
• It is a decent inventory management solution, and provides IT leaders with useful information for decision making.

Incentivized