Ivanti Endpoint Security for Endpoint Manager Reviews

Our use case with Ivanti is not very radically different from Matrix42. The two are comparable and similar in nature, where we separate private and personal profiles from the corporate profile while focusing on aspects like data leak prevention, security measures, access control, and data wipeout in case of loss.

The best part about Ivanti and Matrix 42 is that they are low-code solution builders with drag-and-drop capabilities regarding service management. They help where you need to build a lot of workflows and processes aligned to all IT processes or businesses.

Ivanti users are comfortable with the solution because its UI is appealing.

One of the features that Ivanti could improve is patching for non-Windows settings, such as Linux and Ubuntu. We manage the patching through workarounds because it is not straightforward. I have seen that the world is primarily on Windows and less on other operating systems, but large organizations with about 30,000 employees and multiple kinds of business will have core applications on these other operating systems as well, and that's where we find Ivanti faces limitations.

I have been using the solution for over a decade.

The solution is very stable.

The solution is highly scalable. We have implemented it for one of the largest banks in India, with approximately 150,000 to 160,000 endpoints, and the system is working fine for them.

Whether there are 10,000 or 150,000 endpoints, the solution remains stable. By following the product guidelines and details provided by the OEM, one is unlikely to deliver an unstable solution.

Technical support has a support portal where we log the case, and there is a response and resolution time frame. The support is good.

Positive

It's not complex, but you need certified skills for setup to be easy. It is different for an L1 resource, who has a basic understanding of things and may not be a developer who deeply understands how to build up the solution, where that understanding is present with an L3 or L2 resource.

For maintenance, you need at least one skill set for each module. You would need one for UEM and one more for MDM, which is the ideal way to do it unless you have people who know the modules in and out. We have a larger team for IT service management because the demand for IT service management is high, but we can see that for other modules as well now.

The timeline for the ROI differs based on the organization's size, whether it is small, medium, or large, but you will see an ROI after about 18 to 24 months.

The licensing is based on assets for MDM or EM, where you need one license per asset. The license is annual, and it is not very expensive.

You have to understand whether it is with or without an agent, regardless of managed devices, unmanaged devices, and endpoint management. Ivanti operates with agent and agentless, which sometimes becomes challenging because some organizations don't want to install an agent on an endpoint because it might interfere with other applications inside the end device. That becomes a challenge at times, but most of the time, organizations understand that having the agent is much safer because the agent is a repository of all the security and any elements that go through the agent. We push patches and upgrades and control the device through the agent, which makes more sense.

Working with Ivanti will be difficult if you have a layman trying to learn and understand Ivanti. We have multiple projects with people exchanging or rotating skills across projects of different kinds. All of this is important. It's not a one-way situation where you do certain things in a certain way. You need a global experience to happen, so what we do is different. Depending on the customer, we keep rotating skills, so there is more exposure to complexities, with more environments of different types, and then they can manage them. When configuring and building workflow processes or certain other things, you need to understand the outcome and impact. You need a system integrator or partner with those skills and experience implementing solutions for different customers in similar environments. You can gradually pick up the skills.

You have to keep integrating people and getting them skilled and certified, which is also a requirement for OEM and partnerships. You graduate to a high level of partnership based on the number of qualified skill sets, including pre-sales, delivery, and QA. So when you have a larger team size to show to the OEM, your partnership is two notches higher than the others. You could then be a platinum or a super partner. You will remain in a lower category because you don't have the skill set, and then you will not be able to implement the solution for many customers whose requirements might be bigger and more complex.

If you have drag-and-drop capabilities, you have a platform that helps you easily configure and build work processes while aligning them to the business, which makes the tool more powerful and flexible. However, that does not always work in the market because each environment, customer, and business is different. You need to understand what aligns best and what you need to configure out of the box to align it with the system.

In India, the SAARC region, the presence of Ivanti is limited in this part of the world. So Ivanti needs to reach out more often where the solution's marketing could be improved. This part of the world is adopting many solutions now, and the market has many value trends. Unless they look at the region in a more focused way, they will chase the competition and not get ahead of it. There are, however, more adopters of Ivant compared to Matrix42.

We use the solution to universally manage about 3,900 devices. Most of these devices are Windows, but we also have a lot of Macs. We have to start using a different solution for managing Macs due to some limitations of the Endpoint Security. We are still using Ivanti products. We are just not using the right endpoint security component for Mac management.

Patching and remediation are the strongest features.

The solution needs a complete overhaul or makeover. It gets stuck sometimes because they're focusing on the cloud UEM stuff rather than paying as much attention to that particular piece.

The ease of use could be improved. It combines many different functionalities that you would need multiple servers like SCCM. If I wanted to train people, I’d move to a higher level from an Apache architect. There are five or six different products. So, training functional staff to use the product can be challenging because it can sometimes be cumbersome.

Reporting is challenging. We use Avanti extraction to report off an endpoint. We don't use the reporting because of the need for more functionality, granularity, or customization.

I have been using Ivanti Endpoint Security for Endpoint Manager for nine years.

I rate the solution’s stability a seven out of ten.

Most of the limitations are due to the environment. I did some consulting for other areas, and when I worked with other institutions with issues, it all came back to that. If you design your environment or have an environment that works with it, it's pretty scalable.

20 technicians and service desk members utilize the product in some capacity.

I rate the solution’s scalability an eight out of ten.

The technical support for the Endpoint side is really good. They are very helpful. Other Ivanti products have varying degrees of support or helpfulness, but Endpoint Manager is where they are really helpful.

The initial setup is easy. Their articles are straightforward as long as you follow them and ensure all the ports are open.

The installation depends on the environment. The success of the product depends on your environment. Many people who have problems with the product do so because of their environment.

The deployment of Ivanti Endpoint Security for Endpoint Manager will take around six months. This includes standing up the solution and conducting initial testing. We had to deploy it out to devices.

The solution is pretty expensive. 

I would reiterate the importance of environment tuning. Your environment must be tuned to be fully effective. Many people give up on it because of the learning curve, but it is a very powerful solution as long as you take the time to learn it and tune your environment to it.

Mac support could be better. You must constantly update Ivanti Endpoint Manager to get the full functionality of Mac support. Otherwise, you will lose functionality on newer Mac OS versions. Ivanti Endpoint Manager is usually a bit behind the Mac OS versions.

That's why we switched to Ivanti MDM to manage our Macs. Make sure that you’re training up your environment correctly to tune.

Overall, I rate the solution a nine out of ten.

The product has different tool sets for different use cases. It provides security features for unified endpoint management. It has features for automated patching. It has a 96 to 97% success rate for patching our servers and workstations.

The platform helped us build firewalls and patches when a college server was hacked. We used it to detect all threats and eliminate them. It benefited us because we didn't have problems like we had before with malware and spyware. We have allowlisting and blocklisting and trust security for applications. It works efficiently for zero-day trust as well.

It is a unified solution. We can manage assets by collecting our database's hardware and software warranty information. It is beneficial for environment security patching.

The product's blocking definition needs improvement. They should update it every day. Additionally, its UI could be better and incorporate more AI features. They should use PowerShell scripts to create bots based on alerts.

We have been using Ivanti Endpoint Security for Endpoint Manager since 1998.

The product's agent-based engine works effectively for auto-healing in terms of downtime.

The platform is scalable. I have managed 50,000 computers using it.

The technical support services are good. However, no service is perfect.

The initial setup process is straightforward for me, as I have prior experience using it. I advise others to appoint an engineer for proper implementation. I have a cloud service application that helps me patch network devices for customers remotely.

The product generates a return on investment for us. It saves us a cost for malware detection. We can also keep track of device warranty with its asset management features. It helps in licensing. 

The product is expensive. However, it is one of the best-reviewed products.

I advise others to read the manual to know about the product. They would require an executive to invest time and gain knowledge to run it.

I rate it a nine out of ten.

We use Ivanti Endpoint Security for patch management, remote control functionalities, and asset tracking.

The product's remote control capabilities and patch management features are valuable.

We've experienced challenges adapting Ivanti to new Windows versions, such as Windows 11, where integration delays have been notable.

It could benefit from faster integration with new technologies, such as quicker adaptation to Windows updates. Additionally, more advanced customization options would be valuable.

The product has good stability. 

Approximately 500 users in our organization utilize Ivanti Endpoint Security. It scales quite well, making it suitable for small-scale deployments and larger enterprise environments.

We primarily rely on email communication with the technical support team for any technical issues.

Initially, the setup process was straightforward, though slightly more complex than that of competitors like ManageEngine.

The pricing is relatively high compared to some competitors.

I would recommend Ivanti Endpoint Security, especially for organizations that require robust security features and can independently manage some technical customization.

I rate it an eight. 

Positive

We primarily use Ivanti Endpoint Security for Endpoint Manager to deploy security patches to different machines.

Ivanti Endpoint Security for Endpoint Manager has benefited my organization because you can deploy many security patches to many machines. You can also control which patches you want to use and which ones you don't want to deploy on the machines, so the solution gives my organization more control than just the regular Windows updates.

The most valuable feature of Ivanti Endpoint Security for Endpoint Manager, which my company mainly uses, is patching.

Another valuable feature of Ivanti Endpoint Security for Endpoint Manager is that it allows you to view the inventory list of the different machines.

What needs improvement in Ivanti Endpoint Security for Endpoint Manager is the agent or client troubleshooting because it's a little annoying. You need to troubleshoot whenever there's an error. When there's a problem with the agent, you need to reinstall it, and that's annoying.

Another area for improvement in Ivanti Endpoint Security for Endpoint Manager is reporting. It's lacking.

A more detailed report about each machine must be added to the solution in the next release. For example, Ivanti Endpoint Security for Endpoint Manager reports should tell you if the agent is up to date, if the security patch is updated, etc. Right now, it's hard to see all the individual machine details. You don't get the complete picture for each machine.

I've used Ivanti Endpoint Security for Endpoint Manager for at least three years. I'm still using it.

Issues with the agent cause stability issues with Ivanti Endpoint Security for Endpoint Manager. The server is good, but agent issues aren't the easiest to fix.

I work with the technician in scaling Ivanti Endpoint Security for Endpoint Manager, and it's a little bit hard to scale. Per Ivanti, the solution works well on ten to fifteen thousand machines at best, but I'm not sure if it would still work well beyond that number.

The support for Ivanti Endpoint Security for Endpoint Manager is good. I first try to troubleshoot the problem. If I can't fix it, I work with support and find the Ivanti support team very good.

We use both Ivanti Endpoint Security for Endpoint Manager and McAfee. We primarily use McAfee to protect endpoints and Ivanti Endpoint Security for Endpoint Manager for patching. We're using McAfee for detecting viruses and malicious programs.

They're both functional, and we plan to keep using them. At least for McAfee, we have a long-term plan to keep using it. While we're using Ivanti Endpoint Security for Endpoint Manager now, we could change to a different Ivanti solution in the future because Ivanti has multiple patch management products.

The initial setup for Ivanti Endpoint Security for Endpoint Manager is a bit easier and less complex than other solutions I've set up.

I'd rate its setup as seven out of ten.

I deployed Ivanti Endpoint Security for Endpoint Manager.

For the most part, Ivanti automatically gave my company a list of the available patches, and then my company had to list the patches needed.

I would deploy the patches and add them to each group, with each group categorized based on the company structure, and there'll be different patches for each group.

The agent scans the machine and figures out what patch is needed and what applies to the Windows version, then the patch will be automatically downloaded to the machine.

I have yet to see ROI from Ivanti Endpoint Security for Endpoint Manager.

I don't remember how much Ivanti Endpoint Security for Endpoint Manager costs, but it's a little expensive. It's more expensive than some of the products I've used.

Ivanti Endpoint Security for Endpoint Manager follows module-based licensing, and my company only uses the patching module. Ivanti has a platform where you can attach different modules you want to use, but it would be more costly if you have more modules, so your costs depend on what modules you need.

Mainly, my experience lies with Ivanti products, particularly security and patch management products. I also have some experience with McAfee products.

I'm currently working with Ivanti Endpoint Security for Endpoint Manager.

I'm working with the latest version of the solution.

Ivanti Endpoint Security for Endpoint Manager is not that difficult to maintain. It's easy to maintain, and I'm in charge of its maintenance.

There's a plan to scale Ivanti Endpoint Security for Endpoint Manager, but I'm unsure if it would work as well as it does after scaling.

I'd recommend to others looking into implementing Ivanti Endpoint Security for Endpoint Manager to try a newer solution from Ivanti, particularly a more cloud-based solution.

My rating for Ivanti Endpoint Security for Endpoint Manager is seven out of ten.

Ivanti Endpoint Security for Endpoint Manager is a product that was originally developed by the LANDesk umbrella and has since become a legacy product. It's a solution that allows for asset inventory identification, software deployment, and voice deployment. Over time, it has evolved to include several advanced features, such as device management, mobile device management, application control, and patch management add-ons, making it a good choice for organizations with numerous endpoints in different office locations, as it can efficiently manage their IT operations.

The solution's most valuable features are its patch management functionality and provisioning.

Ivanti Endpoint Security for Endpoint Manager's support provided to its users by the vendor is one area that needs to improve.

I believe that enhancing the tool's support from its vendors to users, offering customization capabilities, and providing guidance to users would be beneficial for overall improvement.

I have seven years of experience with Ivanti Endpoint Security for Endpoint Manager. I am a reseller and not an end-user.

Since it is a legacy product, there are many users and customers who work with the solution, as one of its capabilities is asset scanning. So, they have one of the best tools to identify asset inventory. Hence, hundreds of customers in our region are using the equipment.

The support team is not really great. A solution like Ivanti Endpoint Security for Endpoint Manager needs more than just support alone. The demands from customers might include certain customizations in the tool or may need guidance on how to enable some of the tool's functionalities and how to fine-tune the product.

If there are any product-related issues, such as bugs or licensing problems, Ivanti offers support to resolve them. However, our customers often require more guidance and support to achieve success with the product. Also, other tools in the market provide guidance to their customers.

The solution's initial setup process was a bit complex. The basic setup and installation can be done in two days. Identification of all the machines in the network, including the network connectivity, and getting connected to all live machines can take some time. It may take up to a minimum of two to three weeks for at least 50% of the functionality enablement.

Since it is an on-premises solution, there are certain setup needs to be able to run the solution in the application, after which an agent has to scan all the machines in the network, including the ones at the remote locations. So, it may seem tedious since it involves many firewall port enablements, and network rules have to be rhythmed. Once all the machines are ready, an agent needs to be installed. After these steps, everything is easy.

In my company, two or three people are required for the deployment and maintenance of the solution. There is a lack of skilled people in the market who can manage the solution. Also, we don't see any effort from Ivanti Endpoint Security to provide training to its users like the one provided by its competitors like ManageEngine. Though the product is good, the scarcity to find skilled people to operate the solution is a concern.

The pricing needs to be made on the basis of per machine and per agent. On a scale of one to ten, where ten is the highest, and one is the cheapest, I rate its pricing a five. Though it is not a cheap tool, there is a scope for negotiations.

Ivanti is one of the well-established players in the market with hundreds of customers and public sector and well-established companies that include a range from small to large-scale customers who use the tool. Also, the solution's local sales team in the market is very supportive. So, those planning to use the solution can try it over the new players that have emerged in the market. I rate the overall product an eight out of ten.

Our clients use the solution to manage or provide workers or employees access to the entity's data. The solution is very helpful for Mac and Android devices regarding compliance, data breaches, or DLP use cases.

The most valuable features of the solution are accessing the data through the mobiles and meeting with the compliance for security best practices.

The solution is a bit complex. If I want to integrate the solution with any other solution, pushing the policies from the Ivanti side is a bit tough. Since accessing the device through Ivanti has already been in place, changing those policies is a bit tough.

After implementing this solution, it is challenging to implement any endpoint security like an antivirus.

I have been working with the solution for six to seven months.

I rate the solution ten out of ten for stability.

Our clients for Ivanti Endpoint Security for Endpoint Manager are medium-level businesses.

I rate the solution ten out of ten for scalability.

I rate the solution an eight out of ten for the ease of its initial setup.

The solution’s deployment took a month.

Users can pay a monthly or yearly licensing fee for the solution.

On a scale from one to ten, where one is low and ten is high, I rate the solution's pricing ten out of ten.

I am working with the latest version of Ivanti Endpoint Security for Endpoint Manager.

Overall, I rate Ivanti Endpoint Security for Endpoint Manager ten out of ten.

Our use case for this software is to implement, consult, and propose the software to our clients,

Ivanti is really good. They have a very good vulnerability database in which even if it is used for other products like BMC or Microsoft, the vulnerabilities and patching database is well filtered and very well documented. It allows us to have better management.

It only downloads the patches that are important to you. It works really well for patching for software distribution.

The key differentiator is that it manages mobile devices and laptops in the same console. Windows and Linux are on the same console. This is the only product that does this. It's really the best in the industry. 

I am in touch with the manufacturer now because the mobile onboarding process needs improvement. When you open a new mobile, you automatically come onboard the mobile on the Ivanti platform but it needs some improvements. It needs to be more automatic. We are installing it now for our customer so we're hoping the vendor will improve it. 

In the next release, I would like for them to make it easier to connect it with other IT service management tools like ServiceNow and BMC, not only the Ivanti ones.

I have been using Ivanti Endpoint Security for around five years. 

It is very stable. 

It is easy to scale.

Ivanti is good for large businesses and smaller businesses. You only need one person to manage all of the endpoints. 

Their support has changed throughout the years and now when we don't have any local territory manager. A year ago we had a consultant in an office in Spain. Now, we have to reach out to other regions. It's a little difficult for our region. I reach out to France and the US. 

We have good webinars and other means of support. 

The initial setup was easy. 

For the setup, your company has to be well structured regarding the active directory. If it is well organized then it takes around a month or even less to deploy 90% of your endpoints. 

You also have to prepare packages, reporting, and things like that for the setup.

The main difference between Ivanti and other similar solutions is that Ivanti covers all aspects surrounding the endpoint. It covers everything. It is a very specific product for this type of management. It has everything under the radar and you can manage every aspect that you want. Compared to other solutions, it has a very wide scope. 

My advice to someone implementing this solution is to organize your active directory and your user profiles. Also, make sure to organize the access roles and identity management because this will help the installation go quickly. You will get the advantages of the product quicker.

I would rate it an eight out of ten.