Heimdal Patch and Asset Management vs. ManageEngine Endpoint Central

Heimdal Patch and Asset Management has really helped us consistently patch our endpoints in what has become a much more flexible work environment. It picks up updates immediately upon release (looking at you patch Tuesday!), lets you set automatic install windows for "zero touch" deployment where appropriate and more manual control for clients you may want a slower roll-out for. Support staff are knowledgeable and quick to respond!

Incentivized

Compared to other endpoint management tools that I have experience with, the patch management and the system health statistics functions work much better and are easier to navigate. The endpoint control functions are nowhere near as good as what I've used with Kaseya's VSA application - with that you could remote control a machine via a remote desktop type interface, or you could connect to the command line or PowerShell and it functioned as if you were directly connected to the machine - command history, tab completion, etc.. "just worked" and if the endpoint disconnected, you didn't lose anything that was going in the window when it reconnected (Exception being if the machine rebooted), grouping systems by department or building was also easier, as was moving systems between groups

Incentivized

• Fast updates of well-known 3rd party applications
• Fast Management with only seldom cases in which we need to stop a change
• Quick Support-Team that will handle problems professionally
• Good amount of settings in the Dashboard with Group Policy options to allow custom settings for different Departments or Sub-Companies

Incentivized

• We set alerts when a devices gets low on disk space. That is automatic and creates a ticket in ME SDP. We are then able to Add space to a VM Desktop, and then go thru ManageEngine Endpoint Central to extend the drives so the entire process can be done without interruption to the end user.
• Using the patch scans we can easily see what patches have been installed for all manufacturers not just Microsoft, without having to physically go to the device. It also allows us to choose which patches we want to push out and automate the process so we can be hands off, freeing up out time for other things.
• Remote access to devices. This allows us to remotely make changes, not just via remote control but also make registry changes and clean up space without going to the device and without interruption to the end user.
• Alerts. We have set up to get email alerts when new hardware is plugged into any computers. This lets us know if someone is bringing in un-authorized equipment (thumb drives, hubs, etc) to better manage what is/is not on our network.

Incentivized

• Interface could be more user friendly but when you know how it works its allright
• Easier way to quickly see what updates are installed on what machines

Incentivized

• When I first started using ManageEngine Endpoint Central, the UI felt very complicated and cluttered up, which means as a new user, it took a lot of time to get used to using it and knowing where certain features are. This was also because specific features aren't obvious to the user, it can take time to find them through multiple routes.
• When pushing out specifc software to a large number of endpoint devices such as 1500 in my organisation, the deployment fails a lot more meaning some devices dont receive the software and this has to be done manually for them. This can take a lot of time.
• When an issue is reported about ManageEngine Endpoint Central, for example it constantly crashing when being heavily used. The support was delayed and it took a lot of time for first line support to address the issue and escalate it.

ManageEngine is considered an excellent product due to its comprehensive suite of solutions for IT management, with ManageEngine Endpoint Central specifically excelling in endpoint management. The platform stands out for its user-friendly interface, robust features, and versatility in addressing diverse IT needs. It offers organizations a centralized solution for endpoint security, patch management, software deployment, and asset management

The application itself is great. However, I have little insight to what the patches are doing. Being able to see patch download progress, not just the status, would be great. The user interface could also use an overhaul. The countless menus, sometimes containing similar if not duplicate tabs can be frustrating to navigate.

Incentivized

The immediate chat support is great and very helpful. However, if you need escalated support or have a deeper need that the chat tool can't help with, you will experience significant wait times and slow responses. The time zone difference becomes painful to the point of often just giving up.

We Kaseya VSA as our RMM tool and this also incorporates patch and asset management. Although it overlaps Heimdal Patch and Asset Managment, VSA has a different database of 3rd party software. We use both solutions to give us a greater coverage of patches to ensure as many vulnerabilities as possible are patched.

Incentivized

I tend to use a combination of solutions to keep the estate running efficiently. ManageEngine Endpoint Central has more control over the timing of patching for users. Juggling users being able to work and keeping systems up to date with user satisfaction in mind is a monthly goal. Pushing updates with giving users some control seems to be working.

Incentivized

• A slight positive ROI according to the Heimdal Patch and Asset Management dashboard
• Malware detection rates are excellent with detections occuring live rather than during scheduled scans

Incentivized

• It has greatly helped us with our compliances through the compliance scans, such as taking our CIS compliance from 36% up to around 90%.
• It has massively reduced the number of application/patch vulnerabilities through automated patching & dynamic configurations with custom scripts. From 60 criticals and 300 highs down to just 5 criticals and 25 highs, very quickly.
• It has helped us identify issues with our Bitlocker not syncing to Azure AD properly, because the recovery keys in ManageEngine were always correct but werent always correct in Azure AD.

Incentivized