DevicePro Ultimate 2009
Strengths: Easy to load, provides great protection with good flexibility
Weaknesses: Management console was not as easy to navigate as we would have liked. Reporting was weak
Verdict: Very strong device management solution for the price
The DevicePro Ultimate 2009 package consists of the Cynapspro server, Cynapspro suite and DevicePro suite. The package includes a comprehensive set of endpoint protection capabilities. The server component required us to load either an MSDE or SQL database. Once we had our server prepped, the application load went extremely fast. We were up, running and discovering devices within several minutes.
The Cynapspro server is responsible for central admin of the clients. A nice feature was the level of integration with various directories. The directory services structure of our MS Active Directory was read in by Cynapspro and no schema changes were required. There is support for Novell eDirectory.
The client distributions were easy to configure and push. Once we built and pushed out the msi file, we had complete control over any device on that endpoint. Although this does not come with built-in firewall, anti-virus, anti-spyware or IPS capabilities, it did provide the most comprehensive and flexible solution for controlling every drive, port and communication component.
We were able to set policy to control everything from the USB ports, CD/DVD drives, force encryption, control WiFi, Bluetooth, infrared and TV tuner, to whitelist and blacklist applications, manage game ports, printers, scanners and cameras. This functionality was not unique compared with the other products we tested, but what was unique was the ability to do more than block or allow.
The Cynapspro server gave us options to configure each policy as block, read only, full, scheduled or temporary access. This level of granularity gives a lot of flexibility to still deliver security while allowing for access when it can be controlled. The end user client provided a nice display for allowing the users to see exactly what they do and do not have access rights to.
The solution did provide various options for alerting. Statistics were available for some events, but we found the reporting in general to be lacking. Support options are included with the base purchase and additional options are available for purchase. This is a very nice solution with a lot of endpoint device protection for the price.