BeyondTrust Privileged Remote Access vs. Microsoft Enterprise Mobility + Security

BeyondTrust Privileged Remote Access is well suited to grand monitored privileged access to resources. It works in a proxy mode so end-users don't have direct access to servers. This can help prevent attacks on servers from users' machines since all the traffic to the servers goes through the Privileged Remote Access server which performs auth according to the policies. In cases where direct access to the servers/service from the end-user's machine is required, it is a little bit complicated to set up that kind of connection using protocol tunneling.

Microsoft Enterprise Mobility + Security has been ideal for our organization (and would be for any I can think of) for securing user accounts through MFA and admin accounts through PIM. Its end-point management is also great for set-up and configuration as well as management of your devices. It also provides you with useful metrics and feedback on your devices.

Incentivized

• It's comprehensive, intelligent and easy to use.
• It has lots of features i.e. it allows special commands to be used whereas the other programs don't allow them.
• This tool is effective in allowing you to access all your applications through a single sign-on page.
• Actively manage the ongoing operational use of network devices, hardware, and application access via Secure App.
• Bomgar Privileged Access deploys on-premises via a hardened physical or virtual appliance, or through the Bomgar Secure Cloud.

Incentivized

• Simple pre-packed solution for many popular Microsoft products
• Advanced threat protection
• Simplified end user management with Intune

Incentivized

• questionnaire from technician for installation was difficult to follow
• after purchase of a product, an initial audio discussion with an Engineer would be great for better understanding the installation phase
• provide plans for on-premise and cloud strategies in different documents

Incentivized

• InTune deployment via Hybrid Azure AD. The instructions seem very simple but there are lots of little areas you can get tripped up and there is little logging to see where you've gone wrong.
• Advanced Threat Protection anti-impersonation. It is WAY too sensitive. Users emailing themselves from personal accounts get their mail sent to quarantine just because the name/label of the personal account matches their Office 365 mailbox name/label? HUH???
• Licensing. Typical of Microsoft, what you're actually getting and details of licensing are confusing.

Incentivized

• More secure
• Firewall compatible
• Privacy screen
• Application sharing
• Session recording

Incentivized

Microsoft Enterprise Mobility + Security is better than any of the products I have used that do similar things. There is a huge convenience to all the things Microsoft Enterprise Mobility + Security brings together in one place. Also, the speed and streamlining nature of Intune helps with the management and set up of devices.

Incentivized

• Improve security by improving the management of external remote access
• Help us meet Remote Access Compliance Requirements by creating audit trails, session forensics, and giving access monitoring and reporting data
• Simplify employee access and workflows by giving employees the exact amount of privileged access to systems and applications they need, without hindering productivity or overwhelming the service desk

• Increased productivity, including service requests for our customers
• Reduced operational costs, and threat/risk of cyber-attacks

Incentivized