SolarWinds Access Rights Manager (ARM) vs. Yubico YubiKeys

It [SolarWinds Access Rights Manager (ARM)] is well suited for small to medium sized companies who want to enhance and ease up their daily work. As well as it is suited for organized structures, it has its problems with very complex environments. For example, if you are working with direct and multiple permissions instead of having more granular group based permissions.

Incentivized

YubiKeys are incredibly effective for protecting against phishing attacks, as they require physical interaction and can't be remotely compromised. They're ideal for safeguarding high-value targets (executives, IT admins, those handling sensitive data), enhancing remote access security, and often help meet industry compliance regulations. However, the initial hardware cost may be a concern for large-scale deployments with many low-risk users. Users prone to losing small items or scenarios involving older, incompatible systems might pose logistical challenges. Nonetheless, YubiKeys remain robust when addressing phishing-based attacks and securing privileged accounts. Consider a targeted rollout balancing security gain against potential hardware costs and user needs.

Incentivized

• SolarWinds Access Rights Manager is easy to set up and configure. We had the first report generated in a few hours.
• The automated feature for the reports is great. We just set it and forget it and now the reports get emailed on schedule.

Incentivized

• Provides additional factors for authenticating against critical systems.
• Significantly reduces the chance of a successful phishing attempt.
• Can function as your primary credential for passwordless authentication.
• Extremely durable - I've had the same Yubikeys in use for years.
• Cross-platform - can be used on all mainstream operating systems and mobile devices.

Incentivized

• Licensing model when we changed over to SolarWinds was [I feel] a nightmare. It needs to be more streamlined and SolarWinds needs to understand what their customers require. When we changed over to SolarWinds we found it very hard to get answers to what modules we were still licensed for.
• Our current system is not functioning. We can't login to the application with the accounts we created that were working. The error that appears doesn't help to resolve it. So at present we just renewed licenses for this year and we can't use the system.

Incentivized

• I'd feel better if the key were a little more solidly built - it feels a little flimsy
• The design could also use a cap for the connection - I'm nervous having it on my key chain and users have mentioned the same concerns.
• There seems to be some cracks forming in the support for security keys which is starting to mitigate the usefulness across an entire ecosystem.

Incentivized

It is in place and working. No time or money to consider anything else.

Incentivized

End user experience is much better than administration

Incentivized

I give slightly better than average rating because of the complexity in using a Yubikey. It is not as easy as native push notifications for 2FA products, however, it provides much better strength. Rating this higher or lower would be a disservice to people reading this review. If you are in the market for a hardware 2FA tool, Yubikey will be a great asset in your toolbox.

Incentivized

On occasion the server will need to be restarted to get things running again

Incentivized

simple to use and keep on hand to deploy/use

Incentivized

Satisfactory performance

Incentivized

its instantaneous!

Incentivized

Very slow response times and sometimes I found the solution and ended up sharing it with support

Incentivized

It was my first exposure to this type of product and I wasn’t given the time to figure out how best to implement it. I would say get a plan together of what you are tying to accomplish first

Incentivized

I found the installation and configuration to be much easier and more straightforward. What also assisted in the decision to go with Access Rights Manager, was the fact we already made use of Solarwinds products. Knowing from previous experiences with their support staff, meant we knew how great their after-hours support was whenever we had any technical issues with the platform. We felt it would be better to keep it all under one roof so to speak

Incentivized

Duo and Yubico YubiKeys actually work very well together. We have chosen to use these two products together to make safe and secure MFA (including Passwordless) available to all users. The ease of use that Duo allows for both OTP import and WebAuthn enrollment makes it possible for modern and legacy applications to be protected by Duo MFA via Yubico YubiKeys as the second factor.

Incentivized

No experience with this

Incentivized

deployment is simple and the complex hardware is made simple.

Incentivized

• Team leads recieve automated reports of permissions within their team, and it allows them to proactively audit their team members
• Security specialists have really clear dashboards to audit individuals
• We can be sure we never leave a permission open after a person leaves

Incentivized

• It provides security that allows me to feel confident and peace of mind that my account is really hard to hack
• Easy ROI since it would be really expensive if my account were hacked
• It's easy and fast to use, so it doesn't slow me down when traveling.

Incentivized