Avaliações do ManageEngine Patch Manager Plus

RMM tools patch microsoft and some 3rd party products. The problem is, the number of applications with CVE's continues to grow and RMM patching is not keeping pace. PMP patches over 900 applications.

Complexity of the agent deployment and approvals. Policy and group configs are a bit counter intuitive.

To me what makes this product so great is it does NOT utilize the built in Windows Update service that has been giving us trouble for so long. ME uses their own agent / service. This has made the patching process a lot smoother during our trial. The management console is also super user friendly and very easy to navigate.

it made our patch scheduling for production servers a bit difficult because there is no option to manually click install when ready to start installation. instead we are relying on detailed auto install policies which work for us but this is the biggest limitation I have see thus far.

The Patch Manager Plus software has a brilliant catalogue of supported third party software, and this was one of the key reasons we chose to trial this product. The fact that this product is totally cloud based is also a huge reason for us picking it.

Haven't really come across anything negative so far.

The product is affordable and the dashboard when logging in gives a good overview.

Machines with the agent installed and functioning would lose connection to the console, troubleshooting on the workstation showed no issue and the only way to resolve was to re-install.
This meant we couldn't trust the reporting from the product 100%

The software has support for many 3rd party apps. I had Heimdal and Action1 installed on my computer a while to test them. The ManageEngine PM+ agent was still able to find more patches I was missing.

Installing the Agent is simple and works well.

The UI is not very user friendly because it seems out-of-date. Easy to get lost in the menus and the "Remote Offices" screen is not for what it sounds like. I'm trying to use "remote offices" to split up my departments into groups because the software lacks a feature for that elsewhere.

I wanted to be able to customize computer patch policies by OU. You can link your domain and add the computers within an OU, but you can't just select the OU itself. This means if you move computers in/out of the OU, ManageEngine isn't going to recognize the new computers automatically. This feature seems just for adding computers to your portal rather than grouping them.

I have multiple domains that aren't connected but I can only have 1 AD connector in ManageEngine. Either I set up a machine that uses VPNs to tunnel into all the sites as the AD connector, or I set up 3 different web portals as different accounts. Not something I should need to do for any SAS solution.

Considering other solutions, This has next-level agent-based patch deployment architecture and that helps me to hassle-free patch deployment.
And also the dashboard is well designed and very user-friendly.
For deploy patches, we only have to select the patch from the list and select the branch where we need to deploy the patch.

the price of the client license is really high and need more bandwidth power to run this.

The interface is nice and easy to maneuver. Plenty of data / information regarding the systems. The only support I've needed was the documentation and "FAQ's" but expect the human CS to be as helpful based on other reviews.

Initial introduction felt a little over whelming (no wizard or initial configuration help) but that's not a real issue.

Does what it's supposed to. Does not try to be an all in one software.

The language support lacks a bit of control.

The patch scan and patch deployment is very handy

the load time of the browser is delaying, it takes a lot of time

Save the for patch management, auto deployment

Cannot easy upgrade to desktop management

The simple cloud-based deployment and management has been a major benefit for us during COVID in the shift to hybrid working. Whereas previously devices required an onsite or VPN connection for patch application and scanning, now only an Internet connection is required. This means our time to patch is massively reduced and consequently security exposure also reduced.

Coverage of third-party applications is very good, and far exceeds the other products we looked at.

The inability to precisely schedule patch timing can be frustrating, and the conversion of Microsoft hex error numbers into signed decimal error codes is annoying.

We used the cloud hosted product, it was very easy to set up and deploy to all of our endpoints. The software makes it easy to identify machines which are missing critical patches, so that you can focus on fixing the high priority cases. Using a distribution server means that you can save on bandwidth, which is a useful benefit in some use-cases. Patch scheduling and behaviour is customisable, e.g. auto reboot can be enabled/disabled.

Technical support has been a poor experience for us, it can take a lot of time to resolve issues, or to ensure they look at your problem in more detail. The interface is a little bit slow/clunky, it could be more intuitive. The failure reasons for deployment tasks can be unclear, or if an agent isn't behaving as expected it can be tricky to pinpoint the issue.

Our organization uses 4 different ManageEngine products and I don't understand why they don't use the same process for support across the board. ADmanager and ADaudit have excellent chat support. They don't hesitate to ingage in a remote session right away to help resolve an issue. I'm not saying patch manager support is bad, I have issues with the process. When using the chat feature, they will not remote in. They only do chat and screen shots. They will only schedule a remote session after going back and forth over email. I think it really hurts the customer.

Can be a bit buggy. They're always pushing new builds. My biggest complaint is the chat support process. It takes to long to resolve an issue, if they resolve it period.

The product is very well designed for an on premises Active Directory network. It will work with remote Azure AD only devices directly from a cloud SaaS subscription but encounters some limitations around Feature Update Packs from Microsoft for Enterprise editions of Windows 10. All security rollups are deployed transparently as if users were on the corporate LAN. Overall this is an excellent product and with a bit of refinement feature updates to adjust to Azure AD only attached devices it will become a very powerful tool for security posture enforcement.

It is not yet a seamless Cloud SaaS experience when using only Azure AD with no on-premises AD.

The ability to download and deploy patches with ease for both Windows and OSX.

It took a little getting used to but that is probably my fault for not reading and going through the demo.

While we are an SCCM shop, the use of Patch Manager Plus is amazing. It is easy to use from reporting to pushing patches, querying workstations, and setting up automated deployment rules. This tool has helped us "set it and forgot it" as it just runs (at least for the workstations that can be managed that way). ManageEngine is always looking to better their products and that is what I like about them.

I feel the on-premises Patch Manager Plus environment runs a little slow from a web server and SQL connection. While both servers have plenty of power, just seems the software should respond quicker. This is why we are moving to Patch Manager Plus in the cloud as it is super fast.

Very easy to setup and start deploying the agents. Great to have the option to test and approve patches or just automatically approve. Easy to see available and missing patches and the health of the systems.

A bit of a problem with the Mac agent deployment at a large scale, we had to come up with our own script for it, it clearly shows Macs are not the focus. Some views have a delay in refreshing so you sometimes end up seeing a computer with Patch Completed status but with Patches Missing in a different tab, only to go to the systems tab and see that it says 0 for the number of the missing patches.

I really like the ease of use with this product, the reporting is layed out nicely, and the customer service is excellent.

The initial set up of this software with our current infrastructure was challenging, but after that, it was pretty hassle free.

we are now able to patch systems that are remote, a VPN connection is required, we have had a large increase in remote users and this tool helps us keep the remote systems patched, the reboot options gives the end user flexibility on reboot time

dashboard is not that user friendly, takes some time to figure out certain tasks

The ability to queue/schedule updates during off peak hours. To reboot devices after applying updates. 3rd party software updates. Download throttling speeds.

Sometimes the updates come out a day after patch Tuesday. Sometimes updates fail to deploy with weird error readings that's not very detailed.

The customer support for this product is really great. They offer a chat support, with immediate response for your issues. The product can be scaled to your needs. The product utilizes a third-party repository (Manage Engine's repository) for patches, so there is a sense of security there for the user that the patches being put into the repository have gone through a vetting process (They allow the user to further vet the patches as well, giving the option to 'DENY' a patch at any level). Works very similar to SCCM.

We run a multi-domain, multi-location, Active/Non-Active environment, and configuring and optimizing the product for this type of environment has proven to be difficult. The Distribution servers do not pull all active patches from the main server, it only pulls patches that are being pushed, at the time you push them. Since patch downloads impact production servers, we have to push patches during a down window, which makes distribution servers in this solution useless, as it basically just adds another unnecessary step to the process. For environments where this would not be an issue (Non-production customer facing environments), this would not be an issue.

Before writing any review what is our mind ? why we write about this product, is this worth it or it's useful? , The answer is Yes, if write about the product it will reach the people they will decide what they expect and what they want. the overall agenda is to secure our systems. What I like most about the feature in patch manage plus are Automatic patch and patch testing. These both will give is a win-win solution for these patch management kinds of software. Automattic patch will easily save manpower and once you set up it will take care and patch testing will eliminate the bug-oriented patch that will install our systems. so my vote goes to these features.

The cons about this product really I need to think before I write the review. I use this product day-to-day basis and I think they need to improve the overall dashboard look and feel. this dashboard is fantastic but we need to customize the page. On rare occasions, the installation failed and we push it again and again.

Very easy to deploy
Automates deploying Security patches allowing us to maintain certifications
Flexibility to deploy Distribution Servers to save bandwidth for our brick and mortar offices

The kb that lists which sites needed to be allowed through the proxy was not complete.

Patch Manager Plus is fairly easy to configure and automatically deploys Microsoft and third party patches.

The only downside I see is that there isn't much explanation as to why some deployments fail and sometimes it takes a while to find a solution.

Support for wide variety of 3rd party products.
Excellent value for money.
Easy (overall) deploy and monitor.
Good support.
Once up and running works its way through the outstanding patch workload.

Mainly niggles, but worth mentioning some. Do not let these put you off however, it is a solid product!

The portal creation process is a bit fragmented.
It is an element of a larger product, so most articles refer to that parent product.
The interface is feature rich but takes some getting used to (don't they all!).
Initial setup and deployment needed some teething and tinkering (support is good).
Support is decent but not immediate.
Issues deploying some 3rd party patches.
Shows some patches pending when they are not - isolated issue to couple of machines.
Performs best with an on-premise deployment server.
Patches may need multiple cycles - but this is due to some patches requiring reboots.