2. Background
2
Wheebox is looking to equip all the employee’s Laptops with a solution which will give Wheebox admins an option to
manage the devices of the employees remotely particularly for installed software, pending software updates, pending
Windows updates and enforce device policies.
There is no free software in the market which will allow the Wheebox admins to manage the systems of the employees
remotely for various purposes.
3. Process Followed
3
We initiated discussion with firms offering Endpoint management system. We had discussion with 3
vendors. The summary of discussions with those vendors is shared below.
Vendor Status Comments
KACE by Quest
Quote
Received
Low Client references, POC is paid.
CMDB Servicenow
Quote
Received
Lacking in features, does not fulfill our requirement
ManageEngine Desktop Central
Enterprise
Quote
Received
Feature rich, good option.
4. Advantages of dedicated solution for endpoint security and asset management
4
1. Patch Management - Securing the network by automating patch deployment for Windows, Mac, Linux and Third-Party Applications.
2. Track use of administrator credentials to detect if they’re being used inappropriately
3. Explore detailed inventory of managed and rogue systems. Monitor asset inventory to help achieve, maintain and prove compliance requirements.
4. Understand all applications running in your environment, and search to see versions, hosts and users. Pinpoint unprotected and unmanaged applications
that may pose a risk.
5. Continuously monitor the vulnerability status of all endpoints wherever they reside: on-premises, off-premises or in the cloud.
6. Mitigate risks associated with USB devices. Gain automatic visibility of USB device usage. implement and manage policies with ease
7. Help in assessment at the time of certifications such as SOC2 and ISO 27001.
8. Credibility building with the clients which might be lost in case of any unforeseen incidents.
9. Better management and monitoring of the devices provided by the organization.
10.Easy to create, manage and enforce policies with a simple, centralized approach.
11.Create a firewall rules group once and reuse it in multiple policies.
5. Manage Engine POC findings (In line with Wheebox Requirements)
5
1. USB device policies implementation possible.
2. Windows patches implementation possible.
3. Software update on system implementation possible.
4. Remote software installation possible.
5. Inventory management possible.
6. Firewall rule implementation.
7. Remote desktop support – Possible.
8. Overall System health graph – Yes
9. User Log on reports
6. Shortlisted Vendors - Commercials
6
Vendor Commercials
KACE by Quest
Capex INR 7,92,469
AMC 1-year online support is bundled with Capex.
POC Status
Paid POC only
CMDB Servicenow
Capex INR 1,73,250
AMC 1-year online support is bundled with Capex.
POC Status Not done, very few features provided.
Manage Engine
Capex INR 3,01,195
AMC 1-year online support is bundled with Capex.
POC Status
(No Cost)
POC done, features showcased, shortlisted.