Rolling Review: LANDesk Patch Manager

¿SE HABLA ESPAÑOL?

We were pleased that LANDesk enabled us to specify language-specific patches, a handy capability for global enterprises that want to standardize on a patch package. The patch repository is updated daily by LANDesk, and the frequency with which the management station checks for updates is configurable by IT from hours to months and anywhere in between.

While the use of agents may be problematic for some organizations, in our testing it's become clear that for robust patch management, you're going to have to bite the bullet. To ease the pain of getting agents to target devices, Patch Manager supports push-based agent deployment as well as login script installation.

We also liked the ease of bandwidth monitoring. With agent installation, both peer downloading and bandwidth throttling, including settings for both minimum and maximum usage, are available.

Bandwidth usage is calculated by the device agent dynamically during patch deployment. Peer downloading is also an interesting feature, especially for distributed enterprises with remote locations or employees who have less-than-optimal connectivity.

We found reporting to be on par with the other three platforms we've reviewed. Patch Manager has a wide array of standard reports and provides the ability to create custom reports as needed. Reports can be run on any group of devices or all devices and can analyze agent status, vulnerability states, and remediation progress.

While a wide range of operating systems are supported, features are relatively limited for non-Windows devices. For example, while we could do scanning and remediation on Red Hat Enterprise Linux and SUSE Enterprise Linux systems, no other Unix platforms or Linux distributions are supported for both scanning and remediation. HP-UX, AIX, and Solaris 8 and 9 are supported for scanning only, and Solaris agent installation was lacking in both ease and documentation.

While the user interface is adequate, the overall design is less intuitive compared with what we've seen in other platforms. Agent deployment, scanning, and remediation tasks can all be done through the GUI, but in some cases, we found that creating the desired task required multiple steps and nonintuitive navigation. For example, deploying agents to unmanaged devices required dragging the devices from one tab to another tab, then onto their correct places.

Navigation may be better if you're using LANDesk's Management Suite. The option to uninstall a patch wasn't as easily exercised as it was in the other products we reviewed, but it did the job. Pricing is about $29 per node managed.