Pros: non-stop ongoing patching and remediation, based on locations, settings. Relays can be set to distribute the load. One single pane of glass for all patch-related information. I heard new version is web based and has multiple administrators. Cons: Currently one single console user at a time can use the system and will have to RDP into the server, so if you are running a task and another person logs on to the server, it will bring a duplicate session but will not work. The new version is supposed to fix this (hopefully). Also, need faster convergence on reports coming back from agents.
Overall: Languard is a great product to deploy patches throughout distributed environments. Easy interface, user friendly, nice reports, automation and scheduling of tasks, auto remediation, etc. It also serves as a scanner to check for vulnerabilities, not only software-related but miss-configurations and other things that can be mitigated.
GFI LANguard is an award-winning solution that provides patch. Chapter 2: Identify product pre-requisites and how to install GFI LANguard on your network.
It can be used to scan everything. Recommendations to other buyers: We struggle with one type of custom report we could not make happen, so it is not so 'custom' after all. Please add a way to put in as many options as possible to really create a custom report. Pros: The dashboard was great. It provides all kinds of information and setup and configuration are fairly straight forward. Cons: What I didn't like was the reporting accuracy. GFI vulnerability scanner was reporting false positive vulnerabilities.
We would look at a system GFI reported as requiring a patch and we would find the patch already deployed on the system. This created more work for us and caused us to chase down a lot of false positives Overall: Looked great out of the box but lacked correct reporting. We moved to another SIEM because of false reporting.
How to deploy agents with GFI LanGuard In this video I'm going to show you how to quickly and easily deploy the GFI LanGuard agents. Open the Configuration tab, select the Agents Management tool from the Menu on the left, then select Deploy Agents. Set the list of computers or domains or organizational units where the agents need to be deployed and provide credentials with administrative access to the remote machines. GFI LanGuard can be configured to perform network discovery automatically and domains or organizational units and install agents automatically at newly discovered machines. By default, agents will perform a full scan of their host machine once everyday but the frequency, the scan time and scanning profile can be configured.
GFI LanGuard will handle the deployment operation. Agents consume CPU power only when the host computer is audited this is normally a few minutes per day in the priority of the process is below normal so that it will not interfere with the work done on that machine. By default the agents communicate their status to the GFI LanGuard server using the TCP port 1070 the port number can be configured. Use the Dashboard to see agent status for specific computers.
Now another way to enable and configure agents is to use the Deploy Agent option from the common tasks section in the bottom left corner of the Dashboard. I hope you found this video useful be sure to check out our other. Thanks for watching.