Avaliações do ManageEngine Patch Manager Plus

RMM tools patch microsoft and some 3rd party products. The problem is, the number of applications with CVE's continues to grow and RMM patching is not keeping pace. PMP patches over 900 applications.

Complexity of the agent deployment and approvals. Policy and group configs are a bit counter intuitive.

Considering other solutions, This has next-level agent-based patch deployment architecture and that helps me to hassle-free patch deployment.
And also the dashboard is well designed and very user-friendly.
For deploy patches, we only have to select the patch from the list and select the branch where we need to deploy the patch.

the price of the client license is really high and need more bandwidth power to run this.

Integrating ManageEngine was a breeze and the price of the software is either completely free (up to a generous 50 devices) or an inexpensive flat annual price for much larger organisations. The price doesn't dramatically shoot up once you need it at scale either, which is a relief.

Its interface although functional can be confusing at a glance - there are also some workflows that take you from one section to another without warning (thinking of the settings screen especially).

The product is affordable and the dashboard when logging in gives a good overview.

Machines with the agent installed and functioning would lose connection to the console, troubleshooting on the workstation showed no issue and the only way to resolve was to re-install.
This meant we couldn't trust the reporting from the product 100%

Easy to set up, customize and deploy. Control over the devices and their pending updates.

Online help is not too clear. Apply the missing patches and restart devices are not working if the user is not signed in. We can't deploy overnight. Drivers need to be applied from the manufacturer website because this software uses Windows update driver database.

Easy to configure, like that 3rd party apps are available to update as well as windows updates

Does everything as advertised, not sure what i would say a con is

cloud based and can patch a laptop that is remote and not on VPN

patches take too long to deploy at times

Patch scanning and managmenet and easy installation of agent

need cloud eventlogs analyzer , as per information from support we heard that there is only on prem event log analyzer but we need completely cloud solution

This product was extremely easy to configure and deploy

Some additional reposting could be useful.

This product has given us the very needed man-hours back from manual patching labor. We found this product easy to get setup and manage our environment.

None at the moment as I'm still evaluating this product.

To me what makes this product so great is it does NOT utilize the built in Windows Update service that has been giving us trouble for so long. ME uses their own agent / service. This has made the patching process a lot smoother during our trial. The management console is also super user friendly and very easy to navigate.

it made our patch scheduling for production servers a bit difficult because there is no option to manually click install when ready to start installation. instead we are relying on detailed auto install policies which work for us but this is the biggest limitation I have see thus far.

We used the cloud hosted product, it was very easy to set up and deploy to all of our endpoints. The software makes it easy to identify machines which are missing critical patches, so that you can focus on fixing the high priority cases. Using a distribution server means that you can save on bandwidth, which is a useful benefit in some use-cases. Patch scheduling and behaviour is customisable, e.g. auto reboot can be enabled/disabled.

Technical support has been a poor experience for us, it can take a lot of time to resolve issues, or to ensure they look at your problem in more detail. The interface is a little bit slow/clunky, it could be more intuitive. The failure reasons for deployment tasks can be unclear, or if an agent isn't behaving as expected it can be tricky to pinpoint the issue.

The simple cloud-based deployment and management has been a major benefit for us during COVID in the shift to hybrid working. Whereas previously devices required an onsite or VPN connection for patch application and scanning, now only an Internet connection is required. This means our time to patch is massively reduced and consequently security exposure also reduced.

Coverage of third-party applications is very good, and far exceeds the other products we looked at.

The inability to precisely schedule patch timing can be frustrating, and the conversion of Microsoft hex error numbers into signed decimal error codes is annoying.

The product is very well designed for an on premises Active Directory network. It will work with remote Azure AD only devices directly from a cloud SaaS subscription but encounters some limitations around Feature Update Packs from Microsoft for Enterprise editions of Windows 10. All security rollups are deployed transparently as if users were on the corporate LAN. Overall this is an excellent product and with a bit of refinement feature updates to adjust to Azure AD only attached devices it will become a very powerful tool for security posture enforcement.

It is not yet a seamless Cloud SaaS experience when using only Azure AD with no on-premises AD.

The ability to download and deploy patches with ease for both Windows and OSX.

It took a little getting used to but that is probably my fault for not reading and going through the demo.

Our organization uses 4 different ManageEngine products and I don't understand why they don't use the same process for support across the board. ADmanager and ADaudit have excellent chat support. They don't hesitate to ingage in a remote session right away to help resolve an issue. I'm not saying patch manager support is bad, I have issues with the process. When using the chat feature, they will not remote in. They only do chat and screen shots. They will only schedule a remote session after going back and forth over email. I think it really hurts the customer.

Can be a bit buggy. They're always pushing new builds. My biggest complaint is the chat support process. It takes to long to resolve an issue, if they resolve it period.

While we are an SCCM shop, the use of Patch Manager Plus is amazing. It is easy to use from reporting to pushing patches, querying workstations, and setting up automated deployment rules. This tool has helped us "set it and forgot it" as it just runs (at least for the workstations that can be managed that way). ManageEngine is always looking to better their products and that is what I like about them.

I feel the on-premises Patch Manager Plus environment runs a little slow from a web server and SQL connection. While both servers have plenty of power, just seems the software should respond quicker. This is why we are moving to Patch Manager Plus in the cloud as it is super fast.

Very easy to setup and start deploying the agents. Great to have the option to test and approve patches or just automatically approve. Easy to see available and missing patches and the health of the systems.

A bit of a problem with the Mac agent deployment at a large scale, we had to come up with our own script for it, it clearly shows Macs are not the focus. Some views have a delay in refreshing so you sometimes end up seeing a computer with Patch Completed status but with Patches Missing in a different tab, only to go to the systems tab and see that it says 0 for the number of the missing patches.

I really like the ease of use with this product, the reporting is layed out nicely, and the customer service is excellent.

The initial set up of this software with our current infrastructure was challenging, but after that, it was pretty hassle free.

we are now able to patch systems that are remote, a VPN connection is required, we have had a large increase in remote users and this tool helps us keep the remote systems patched, the reboot options gives the end user flexibility on reboot time

dashboard is not that user friendly, takes some time to figure out certain tasks

The ability to queue/schedule updates during off peak hours. To reboot devices after applying updates. 3rd party software updates. Download throttling speeds.

Sometimes the updates come out a day after patch Tuesday. Sometimes updates fail to deploy with weird error readings that's not very detailed.

The customer support for this product is really great. They offer a chat support, with immediate response for your issues. The product can be scaled to your needs. The product utilizes a third-party repository (Manage Engine's repository) for patches, so there is a sense of security there for the user that the patches being put into the repository have gone through a vetting process (They allow the user to further vet the patches as well, giving the option to 'DENY' a patch at any level). Works very similar to SCCM.

We run a multi-domain, multi-location, Active/Non-Active environment, and configuring and optimizing the product for this type of environment has proven to be difficult. The Distribution servers do not pull all active patches from the main server, it only pulls patches that are being pushed, at the time you push them. Since patch downloads impact production servers, we have to push patches during a down window, which makes distribution servers in this solution useless, as it basically just adds another unnecessary step to the process. For environments where this would not be an issue (Non-production customer facing environments), this would not be an issue.

Before writing any review what is our mind ? why we write about this product, is this worth it or it's useful? , The answer is Yes, if write about the product it will reach the people they will decide what they expect and what they want. the overall agenda is to secure our systems. What I like most about the feature in patch manage plus are Automatic patch and patch testing. These both will give is a win-win solution for these patch management kinds of software. Automattic patch will easily save manpower and once you set up it will take care and patch testing will eliminate the bug-oriented patch that will install our systems. so my vote goes to these features.

The cons about this product really I need to think before I write the review. I use this product day-to-day basis and I think they need to improve the overall dashboard look and feel. this dashboard is fantastic but we need to customize the page. On rare occasions, the installation failed and we push it again and again.

Very easy to deploy
Automates deploying Security patches allowing us to maintain certifications
Flexibility to deploy Distribution Servers to save bandwidth for our brick and mortar offices

The kb that lists which sites needed to be allowed through the proxy was not complete.

Support for wide variety of 3rd party products.
Excellent value for money.
Easy (overall) deploy and monitor.
Good support.
Once up and running works its way through the outstanding patch workload.

Mainly niggles, but worth mentioning some. Do not let these put you off however, it is a solid product!

The portal creation process is a bit fragmented.
It is an element of a larger product, so most articles refer to that parent product.
The interface is feature rich but takes some getting used to (don't they all!).
Initial setup and deployment needed some teething and tinkering (support is good).
Support is decent but not immediate.
Issues deploying some 3rd party patches.
Shows some patches pending when they are not - isolated issue to couple of machines.
Performs best with an on-premise deployment server.
Patches may need multiple cycles - but this is due to some patches requiring reboots.