Lumension Endpoint Management and Security Suite v7.3
From c£21 per node for 500 nodes (assuming all components licenced)
Strengths: Experience and imports of hashes directly from the developers
Weaknesses: Hard to find one
Verdict: Very well done. We designate this our Recommended product
Lumension Endpoint Management and Security Suite (LEMSS) v7.3 unifies the functions of IT operations and security through a single console, server and agent architecture to seamlessly and more effectively address IT risk and systems management requirements across the enterprise. It delivers modular, licenced capabilities across patch management, anti-virus, configuration management, power management, application control, device control and asset management.
Our first step in deploying this solution was to identify assets and install agents. One can click to see agent jobs. This was where we selected the modules to add or remove. Agent downloads were done by selecting the OS and version. Agent policies were selected and recurring scan policy set, then the Directory Service Group was selected (other systems were selected by custom groups). Verification that the agent was enabled was presented. We then ran through the functions and features, such as the application control policies.
There are several foundational components: Patch and Remediation reduces organisational risk and optimises IT operations through the timely, proactive elimination of operating system and application vulnerabilities across all endpoints and servers. The tool supports multiple platforms (e.g. Windows, xNIX, OS X) and third-party applications (e.g. Adobe, Apple, Java).
Security Configuration Management ensures that endpoints are securely configured and in compliance with industry best practices and regulatory mandates, while reducing configuration drift.
Power Management reduces endpoint power consumption costs of both online and offline endpoints.
Content Wizard delivers customised extensibility through wizard-driven and custom scripting tools to take any action on endpoints, including deploying and removing software, remediating configurations, performing systems management tasks and delivering custom patches.
Reporting Services provides integrated, preconfigured and centralised business intelligence that can be customised to meet organisational needs.
Application Control defines and enforces trusted application use through whitelist policies to ensure only applications explicitly authorised or trusted are allowed to execute.
Advanced Memory Protection defends against sophisticated memory injection attacks, and anti-virus provides blacklist protection and removal of all malware, including viruses, worms, spyware, Trojans and adware.
Device Control enforces usage policies for devices and ports, while providing data encryption for removable media to prevent data loss/theft.
Finally, Disk Encryption reduces risks and costs of a data breach when a workstation is lost or stolen via easy-to-use full disk encryption.
Lumension provided an array of documents for installing, configuring and using the features. Installation was performed by downloading executable files. For a product that is loaded with high-value features, the system is very easy to operate. The dashboard is well laid out with all of the toolbars, status panels and graphs one would expect.
The value for the money for LEMSS v7.3 is very good.