GFI LanGuard vs. Patch My PC Patch Management

-To track the vulnerability level of a windows network. -To push windows and other application updates from a central location. -Produce reports to highlight work being done to protect a network. In some organizations, you may have to prove for audit reasons you are enforcing policies put into place around cyber-security. This software can help you track work done on an ongoing basis for such purposes.

Incentivized

I highly recommend Patch My PC to businesses of all types and sizes. The tool is highly customizable and can meet the needs of any organization. It is easy to implement with Configuration Manager (SCCM) and Intune and can be set up within a matter of minutes.

• Install an agent to thoroughly scan machines to discover vulnerabilities.
• Keeps there lists up-to-date with applications outside of windows and lets you know when an update is available.

Incentivized

• Great customer support
• Automation of application creation and updates
• Easy to integrate and manage

• It could be a bit of information overload which some things are shown can become noise. Maybe different levels of "security" for lack of a better term may be better where you have a summary vs detailed level when it comes to rating the vulnerability of the entire network.
• I find I sometimes have issues with PCs on a different network accessed across a VPN where timeouts often occur with very large updates. This aspect can be improved.

Incentivized

• SAS solution
• Be able to select a specific application version for deployment

I consider Patch My PC a necessary tool for any environment I manage. I cannot imagine managing an environment without it, as the time and effort it saves is invaluable.

I only tried to access there support once and it was a relatively pain-free process. They also have a lot of documentation available online which can be used to learn and tailor the software to suit your needs. It just takes time and effort to plan, execute and monitor going forward.

Incentivized

The implementation is super easy, specially if you're just Integrating it with Intune.

WSUS was the other alternative I considered but I believe GFI takes updates, reporting, and functionality to a different level for an enterprise/medium-size business environment.

Incentivized

Patch My PC is a tool developed and maintained by experienced systems administrators, who have a deep understanding of the workings of Configuration Manager (SCCM) and Intune. They know what it takes to successfully deploy applications to end-users, making the tool an ideal choice for managing software updates and deployments.

• Certainty. It allows you to know where on your network needs attention.
• Peace of mind. As security professionals, we can only put the necessary things in place to prevent malicious persons from exploiting a network. The software allows you to know whether or not your risk of exploitation is high or low. and if high what to do with it.

Incentivized

• Saves countless hours on manually packaging applications
• Saves countless hours on investigating what applications in your environment needs updated
• saves you 1-3 headcounts in your department