GFI LanGuard vs. ManageEngine Endpoint Central

-To track the vulnerability level of a windows network. -To push windows and other application updates from a central location. -Produce reports to highlight work being done to protect a network. In some organizations, you may have to prove for audit reasons you are enforcing policies put into place around cyber-security. This software can help you track work done on an ongoing basis for such purposes.

Incentivized

Patch management is a HUGE time saver. Simply being able to push patches out to devices without having to physically go around to each one save a ton of time. Inventory tracking has also helped us better manage equipment. We are all human and make mistakes, and this helps to eliminate or catch many of those mistakes. With ManageEngine Endpoint Central scans showing us who is using the device and what else is plugged into it, saves us from having to search for devices when they are being refreshed.

Incentivized

• Install an agent to thoroughly scan machines to discover vulnerabilities.
• Keeps there lists up-to-date with applications outside of windows and lets you know when an update is available.

Incentivized

• It helps to facilitate the administration of a network of workstations and servers.
• The deployment of applications and updates is very easy to implement, and greatly facilitates keeping workstations and servers up to date.
• The commissioning of the solution is very simple, and with the help of the external gateway, it allows for the supervision of all equipment, as long as they have internet access.
• We can manage multiple mobile fleets, with user smartphones on one side and industrial smartphones with specific missions on the other. The possibility of applying a kiosk mode is not negligible.

Incentivized

• It could be a bit of information overload which some things are shown can become noise. Maybe different levels of "security" for lack of a better term may be better where you have a summary vs detailed level when it comes to rating the vulnerability of the entire network.
• I find I sometimes have issues with PCs on a different network accessed across a VPN where timeouts often occur with very large updates. This aspect can be improved.

Incentivized

• Better remote access, sometimes manage engine will not be running in services and I can't remote in.
• Pop-up when I'm trying to work, no I don't want to learn about a new feature while trying to solve an emergency.
• Hard to onboard a computer if it doesn't automatically go.

Given these factors, organizations would individually assess their experience with Endpoint Central to determine its renewal likelihood. If you're considering renewal, it might be helpful to gather feedback from users within your organization, review performance metrics, and assess how well Endpoint Central aligns with your current and future endpoint management needs.

Incentivized

The application itself is great. However, I have little insight to what the patches are doing. Being able to see patch download progress, not just the status, would be great. The user interface could also use an overhaul. The countless menus, sometimes containing similar if not duplicate tabs can be frustrating to navigate.

Incentivized

I only tried to access there support once and it was a relatively pain-free process. They also have a lot of documentation available online which can be used to learn and tailor the software to suit your needs. It just takes time and effort to plan, execute and monitor going forward.

Incentivized

The immediate chat support is great and very helpful. However, if you need escalated support or have a deeper need that the chat tool can't help with, you will experience significant wait times and slow responses. The time zone difference becomes painful to the point of often just giving up.

WSUS was the other alternative I considered but I believe GFI takes updates, reporting, and functionality to a different level for an enterprise/medium-size business environment.

Incentivized

Kaseya's system of handling patch management was not as intuitive as Endpoint Central, however in some respects it was easier to set up. Kaseya VSA and ConnectWise are also more geared towards managed service providers that handle multiple organizations versus a single company's IT department, which Endpoint Central seems more designed for. Intune, while helpful for machine management, does not have the level of overall endpoint management and inventory management and is better used alongside another endpoint management tool

Incentivized

• Certainty. It allows you to know where on your network needs attention.
• Peace of mind. As security professionals, we can only put the necessary things in place to prevent malicious persons from exploiting a network. The software allows you to know whether or not your risk of exploitation is high or low. and if high what to do with it.

Incentivized

• We have been able resolve and complete any requests which include things like software deployment or issues that include troubleshooting, much faster and more efficiently. This has had a sharp decrease in our response times and also time it takes to complete these requests or incidents.
• The mobile device management features have allowed us to be able to have a much tighter grip on security. This means we have dramtically decreased our device vulnerabilities and risk of data breaches. This has saved us lots of time and money.
• The remote features that are available have helped a lot with user's being able to work remotely and allow our organisation to sustain hybrid work. It means user's can still be as productive and IT support is as efficient no matter where the user is working.