Ivanti Security Controls

We use Isec (Ivanti Security Controls) for our monthly security patching of all servers in the environment (on-prem). This allows us to keep our servers up to date with the monthly release cycles from Microsoft and other vendors. It's also used for ad-hoc patching as needed for zero-day threats as well as keeping our template builds up to date.

Great for deploying patches to large groups of machines.

We went through an evaluation of patch management tools, and Ivanti was the tool we choose to go with. Ivanti offers a wide range of security tools that it has purchased over the years. Ivanti Security Controls is a great tool that offers both agent and agentless patching. We opted not to go for the whole security suite that they offer because we were only interested in the patch management tool. Our environment consists mainly of Windows and a few Linux servers. We also have a decent sized workstation pool that can all be patched and managed under a single patching software.

Agentless patching is the best of all the products I've used. The real-time updates that don't require re-scanning after each step is great.

We implement Security Controls for companies looking for a patch/security solution. We also implement Security Controls for companies that have used Application Control as a standalone solution (we have many years of experience in this area) and are looking for a patch solution. With our customers, Security Controls is mainly used because of the increased security through Application Control. The implementation is very simple and the Config can be set up quickly to implement Trusted Ownership checking. Customers usually first use the product in a VDI / terminal server environment and then extend it to mobile clients and fat clients. The greatest benefit is the efficient security against unknown malicious code and the low maintenance effort during operation.

Security Controls is particularly suitable for customers who are looking for a patch solution and need security to protect themselves from unknown malicious code. For customers who are already using the Workspace Manager Suite, we don't think the solution is that suitable. A patch for Windows would be sufficient.