GFI LanGuard vs. ManageEngine Vulnerability Manager Plus

-To track the vulnerability level of a windows network. -To push windows and other application updates from a central location. -Produce reports to highlight work being done to protect a network. In some organizations, you may have to prove for audit reasons you are enforcing policies put into place around cyber-security. This software can help you track work done on an ongoing basis for such purposes.

Incentivized

ManageEngine Vulnerability Manager Plus is highly effective for organizations prioritizing ease of use, cost-effectiveness, and a single pane of glass for both vulnerability detection and patching. It is well-suited for organizations needing to manage a diverse, yet traditional, on-premise IT infrastructure (servers, workstations, laptops). It is good at securing remote endpoints by using an agent to scan, detect and patch workstations. It is good for both scanning and remediating vulnerabilities through the built-in patching tools. It is ideal for a smaller to mid sized environment using Active Directory.

Incentivized

• Install an agent to thoroughly scan machines to discover vulnerabilities.
• Keeps there lists up-to-date with applications outside of windows and lets you know when an update is available.

Incentivized

• Patch detection
• Patch application
• History and inventory.

• It could be a bit of information overload which some things are shown can become noise. Maybe different levels of "security" for lack of a better term may be better where you have a summary vs detailed level when it comes to rating the vulnerability of the entire network.
• I find I sometimes have issues with PCs on a different network accessed across a VPN where timeouts often occur with very large updates. This aspect can be improved.

Incentivized

• Better integration with third-party tools.
• Licenses for budget-friendly customers

Incentivized

We're already on our third renewal.

Its usable for system patchig

Incentivized

I only tried to access there support once and it was a relatively pain-free process. They also have a lot of documentation available online which can be used to learn and tailor the software to suit your needs. It just takes time and effort to plan, execute and monitor going forward.

Incentivized

WSUS was the other alternative I considered but I believe GFI takes updates, reporting, and functionality to a different level for an enterprise/medium-size business environment.

Incentivized

I chose Vulnerability because it is very easy to use and analyzes threats effectively. I previously used Microsoft System Center; however, due to its complexity and lack of transparency, we decided to remove it from our company and keep only Vulnerability.

Incentivized

• Certainty. It allows you to know where on your network needs attention.
• Peace of mind. As security professionals, we can only put the necessary things in place to prevent malicious persons from exploiting a network. The software allows you to know whether or not your risk of exploitation is high or low. and if high what to do with it.

Incentivized

• By automating the scanning, assessment, and patch management process, VMP has helped reduce the time to patch for us by 40%.
• It has provided continuous visibility into device health and overall patch state. This has helped reduce the amount of time manually checking and updating.
• By prioritizing the list of vulnerabilities the tool has helped our staff stay focused on the high-impact risks and ensure that critical assets are patched first.

Incentivized