Also a Security Controls user… since the HFNetChkPro days…
I don’t find the UI hard to use, but 15 years of use will do that to you.
I just wish they had a better answer for multi tier app patching. For now we schedule the tiers far enough apart that things come up cleanly.
I think part of the problem is they were bought over around the time of development, same old story.
We use it also and have the same issue where we can’t use agent to remote control but all other network access works…
Still not resolved.
Oddly, enough Ivanti has never come up in any of the conversations we had prior to this person starting. If I remember correctly I don’t remember them placing very well in any of the Gartner squares that I looked at. None of the SOCaaS providers we talked to even used them either. It sounds like their only real benefit is they’re for shops with inexperienced personnel. This manager came from a smaller ‘university’ with a smaller budget too I’m starting to gather. Thanks for the input
re deployment, remote control for user assistance, and so
What’s it’s reliability been in your experience? I’ve noticed with a couple comments already that could be a potential pain point.
We do the same for our VDI environment. Two times we have done engagements with a third party to get things up to date or get things running smoothly because their support sucks. I don’t know about their other products, but on more than one occasion I had their support ask if I checked their forums or KBs for the answer to our problem, even when we were on a supported version.
Second for Intune. It’s cheaper too. The user interface is so much friendlier, but I’m obviously biased.
Was actually looking into POCing Neurons for 3rd Party app patching in InTune lol
I’ve tried to steer him towards a process to decide the best solution rather than going with something just because it’s what he knows. That said, I’m not against Ivanti I just want to make sure we’re not redoing this process in a year cause it was a bust and something we could’ve prevented.
I actually looked at BigFix at one point and it looked like a phenomenal solution. The problem was the price tag was crazy. How does Ivanti compare to BigFix? Any close runner-ups to BigFix that you all looked at that are cheaper in price?
I don’t think it’s that it’s difficult to use, it’s just not super intuitive and very dated.
It works for us for the most part.
I do remember you can call the agent to run a abbreviated scan that usually gets remote connect working. Still clunky at the end of the day.
The agents off network? The remote tunnel works surprisingly well, but have had some weird issues with it as well.
Gartner isn’t really relevant. I agree that Ivanti is more of a budget choice.
If you are an Azure/365 shop, InTune is a good purchase.
Ive never heard it used outside of education and its likely because sales gives discounts to edu and great after sales support to universities. At the time I was one of the only non engineering folks who had any config management experience so sccm was a non-starter for most support staff, it takes maybe a quarter of the knowledge to get up to speed with Ivanti (vs sccm)
Rare occasion the service/process that listens for remote control would crash, but I don’t think it’s been that frequent. Though we are also on an older version, and have not had an opportunity to upgrade due to some compliance requirements we have.
Current remote control is different from their last 2 iterations, with the most recent previous one being HTML5 and was indeed garbage. Few/rare issues with current one, unless our desktop support staff just aren’t reporting any issues they experience (which is entirely possible.)
We also have the Ivanti Gateway (Cloud Services Appliance) which provides us the ability to patch and deploy to devices off WAN, as well as remote control devices off WAN. The agent essentially makes an SSL VPN tunnel to the gateway and the setup/configuration wasn’t terribly difficult.
The patch products have always been great, I use the Neurons patching in my home lab to familiarize myself with the product and I know it sounds corny coming from an employee (I am not sales) but it’s really good, simple to use and just works
This decision was kind of made for me. Teams were restructured and the responsibility for patching was taken off of the server team. I can’t really give you much insight into BigFix as I didn’t work directly with it as I did with Shavlik.
Agents on LAN. We don’t have the option for WAN connections
That’s really what I’m looking for. I guess specifically ‘risk based third party patching’. Was contemplating this or maybe Qualys. I’m sure there’s a demo or POC I can do.
Edit: thanks for the info!