ManageEngine Security Manager Plus from Zoho is a full-scale tool that provides a lot of punch in a relatively tiny package. With this application, administrators can proactively scan the network for vulnerabilities and directly remediate them to ensure compliance throughout the enterprise. This product uses a mix of vulnerability scanning, open ports detection, patch-level scanning and Windows file, folder and registry change detection to find and repair possible trouble spots on the network. All this functionality is integrated into a simple and easy-to-use application.
Installation of the application is quick and straightforward. It is installed by running a short setup wizard that engages all the necessary components, including the web-based administration interface. After installation is complete, the web-based management interface is used to perform all configuration and management of the application. We find this interface to be well organized and intuitive to navigate. One thing we instantly noticed about the interface is that not only did it have a clean and organized look, but it had a fluid feel. We find it to be quite effortless to move within the interface with little lag and redraw.
Aside from the look and feel of the interface, we also find this product to have a complete feature set with many configurable options. Scans could be configured to do credential-based scanning using Windows or Linux credentials, as well as null scans. At the completion of the initial scan, we were presented with many charts and graphs that were all cleanly displayed on the dashboard of the management interface, and we were able to drill down into several of the dashboard elements. Finally, coming full circle from scan to remediation, this product integrates direct remediation and patch management right into the interface.
Documentation is slightly weaker than we like to see. The product contains a help file, as well as a separate PDF user guide. Both contain pretty much the same information, covering the product all the way from installation through configuration and management. While we find both documents to provide a lot of great information, there is a definite lack of step-by-step instructions, screen shots and diagrams. We find that features like these help aid in the installation and configuration process and they should be present.
Zoho provides free 24/5 phone and email support as part of its 30-day evaluation period, and ongoing help also is available as part of the purchase price for the first year. After the first year, customers can then purchase assistance as part of an agreement at a cost of 20 percent of the original license cost. We would like to see a knowledge base as part of the support site.
At a price starting at $695 per year for 25 systems and going all the way up to about $6,000 per year for 1,000 systems, this product can be quite expensive over time. While it has a strong feature set and some good functionality, we find it to be an average value for the money for larger environments. On the other hand, it is a good value for smaller environments looking to gain a sleek vulnerability management platform at a reasonable cost.