BMC Helix Client Management vs. Rapid7 InsightVM

This tool will work the best in homogeneous environment where systems are running on Windows OS. In heterogeneous environment like ours where we have Windows, Linux and OS X operating systems, roll out and integration will be a challenge since not all the systems will have accessibility from a common credential

Incentivized

Rapid7 InsightVM is perfect for a scenario where IT admin or CISO wants to scan its infrastructure to be sure that there is no vulnerability that could be exploited from outside or inside the company. It also could be used to automate patching and dealing with vulnerabilities. It's also adapted for users that need cloud security management

Incentivized

• Easy to use
• Easy to upgrade
• Highly flexible without customization
• Great community/support
• Patch management provides the flexibility to deploy patches using a test to production methodology. It also allows us to customize restart actions which helps with compliance but eases disruption to the business.
• Computer imaging and software deployment work together to improve speed to delivery.
• Financial asset management is very useful providing all of the information we need to support our PC replacement process.

• Being a vulnerability scanner tool, its purpose is to scan the systems to find the vulnerabilities. We can define the assets like IP address for the scans and it also allows to either schedule the scan at a preferred time or start the scan immediately. Upon completion of the scan, this tool can result provide the details like host type, OS information, hardware address, along with the vulnerabilities.
• Rapid7 Nexpose has a list of templates to perform the scan. Once the templates are defined then the scans are performed accordingly.
• It also contains an option to add credentials/authentication using passwords, usernames, private keys to perform the credential-based scans which I think is a great feature.

Incentivized

• It would be nice if it were possible to export search results
• Schedule my reports to automatically, run at intervals of my choosing with the results either emailed or dumped to disk as a CSV
• Easy report writing

• In comparison to Tenable SecurityCenter we saw it didn't exactly find the same vulnerabilities which we would assume it should have
• We rely on a ticketing system and not our VM tool to assign tasks so wasn't too useful having that in there
• Filtering capabilities aren't as good as its competitors

Incentivized

The process followed by the support team for incidents as well as support requests will become bottleneck for dynamically growing organisations as nothing works fast from a support point of view. A few of the requirements that we asked for took more time to execute and most of them came with a cost.

Incentivized

I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.

Incentivized

As we decided to go for BMC Remedy for ITSM, BMC Helix Client Management was the better solution than other tools for ITAM solution as integrating ITAM and ITSM was easier than other tools and also from support point of view, it will be one throat to choke. The reporting module was elaborate and customisable.

Incentivized

Nessus Pro does scans, but does not maintain an inventory from scan to scan. There is no history for a specific device, you have to look inside the results of each scan. Search across inventory is non-existent. There are no dashboards for data analysis. This is no tracking for remediation

Incentivized

• BMC Client Management has improved our speed to delivery, quality of service and security by providing the necessary automation tools to improve our processes.

• Can reduce time to patch most critical vulnerabilities
• Can help to identify who is spending time patching things of lower risk thus keeping the organization in a more vulnerable position
• Easily provides the patch team with a work plan to enhance security more quickly

Incentivized