Lumension offers a pair of products, Sanctuary Application Control and Sanctuary Device Control, that work in tandem to provide protection of devices, as well as applications running on the endpoints. Both applications are administered from a central configuration interface, which is installed on a Windows 2003 server with a SQL database installed. The management interface allows applications, users, groups, devices and just about anything else in the enterprise to be selected, detailed audits to be run, or for reports to be made. The interface lets administrators to go as granular as they want to. It really appears as if anything can be done from the console.
While the management console is feature-rich, it is also a bit busy, and it takes time to get used to. The management application has a pretty flat learning curve and a time or two through the interface and the administrator should have the feel for how to make the Sanctuary Suite run. The applications install an agent onto Windows-based client versions Windows 2000 Service Pack 3 and newer.
Sanctuary Application Control does exactly what its name says: it controls applications. The package works from a white list perspective, meaning that applications must be expressly permitted to run.
Sanctuary Device Control also provides an intuitive name. It restricts access to ports on endpoints. A unique feature is that the app can specify not just whether a device needs to be encrypted, but to what level the device needs to be encrypted.
Support is first rate. A big plus is that standard support eight hours a day/five days a week local time is free. This option covers many different methods of support. Email, phone and an online knowledge base are all part of the standard support solution.
Documentation for the Sanctuary is the best of this group review. There are many PDFs that are part of the online knowledge base, but there are also video demos, which show common tasks. These help flatten the learning curve.
Application Control is $19.70 per seat and Device Control is $20.60 per seat. The figures appear to be on the low end of the price spectrum, but because they are annual licenses can elevate the cost to the high end of the spectrum.
