Ivanti Patch for Endpoint Manager vs. Tenable Vulnerability Management

Anytime you have desktops/laptops or servers that need to be managed for patching this is awesome. Integrates with other products very well. I have yet to find a product that wasn't in their system but they still have a manual option to add 3rd party programs that they've missed.

Tenable.io is a cost effective Internal and External scanner. The Internal scanner came with a .ova, so it was very simple and quick to deploy it into our ESXi environment. It has a cloud-based dashboard for management and the internal scanner is configured to auto-update from Tenable.io. The license came with 4 External PCI scans (with remediation) a year.

Incentivized

• Scheduling patching
• Inventory management
• Reporting
• Patch management

• Wide range of capabilities that can be customized to fit each user's environment and needs
• Provides high-quality data and insights into detected vulnerabilities
• Great customer support

Incentivized

• Ivanti Patch needs more enhancement for application connectors.
• Its user interface is not so easy to use for someone new.
• They can do some more improvement with auto scan and inventory management.

• Configuration is not always intuitive, but the comprehensive training and documentation comes to the rescue.
• The mix of classic and beta UIs currently is confusing and we find the classic UI is actually better.

Incentivized

We like to renew tenable each year we have had it so far.

Incentivized

Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

Ivanti Patch is more reliable and easy to use than any system center configuration management software in the market. This is value for money and provides you the best tools for patching and configuration. Its user interface is easy to understand and has a great support community online and Ivanti Patch's technical support team helps you in every step when they find any issues.

I think Tenable and Qualys have a lot of similarities, I continue to go back to Tenable because of my familiarity and comfort level with it. I've also used a company called SecurityMetrics which has vulnerability scanning included but it is not as comprehensive as Tenable.

Incentivized

• Patching is more scalable and easier with Ivanti Patch.
• It's compatible and handles major version upgrades and is compatible with Windows and Linux.
• Ivanti requires more enhancement for application connectors.

• We're able to mitigate over 90% of our vulnerability risk without too much effort. It helps find where automated patching fails and we can plan a fix from the findings.
• A side effect of our scanning reveals new devices on our network that aren't cleared to be.

Incentivized