Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 518
  • Last Modified:

GFI Languard Versus Microsoft SUS

I want to deploy update services and patches in The Network (100 users) , and am not sure which of the SUS or GFI Languard is the best.

Any clarifications, I will appreciate it.
Thanks
0
Chuckbuchan
Asked:
Chuckbuchan
  • 2
  • 2
1 Solution
 
Yan_westCommented:
1st of all, GFI Languard is much more then MS SUS..

- It's log monitor
- It's a network / server monitor
- It's a complete security scanner

SUS is only a Windows update local server. It downloads patch from microsoft, and wait for them to be approved for distribution.. (by machine type, group, users, etc..)
After this, each windows boxes download their patch from the SUS server via the automatic update service..

GFI Languard download the proper patches, scan your network for missing patches and give you a report of what is missing. after this, you can deploy the patches yourself by clicking on the machine and deploying patch yourself. You have much more control, you have some reporting features.. and you can schedule everything you need. MUCH MORE POWERFULL.

Windows SUS Doesnt tell you what is missing from your network.

BTW, I think the best patch management product is Shavlik HFNetChkPro.

http://www.shavlik.com/hfn_windows.aspx

"Simplified, intuitive, Drag-n-Drop Patch Management interface allows you to precisely control which groups will be scanned, by what criteria and when, how patches are deployed and more. Just set your parameters, click and deploy. Then, in minutes you'll receive instant validation to assure patches are applied successfully via Shavlik's PatchPush Trackerâ„¢."

check out the description. If you need patch management, this is for you :)
0
 
DiCeRCommented:
Not much more to say here. HFNetChkPro rocks!

But if your choice is GFI or SUS - I'd go with GFI. The current version of SUS is a bit limited. For instance you cannot deploy Service-packs with it, not any custom apps. It also requires a Windows Server OS (IIRC it cant be run on a workstation)

As Yan pointed out, GFI offers a lot more than just patch-management. There is good value for money there.
0
 
Endre_Szekely_BenczediCommented:
SUS
GFI
Shavlik
SMS

These are the options I checked last time. I am using SUS right now.
Anyway right now I am waiting for WUS (http://www.microsoft.com/windowsserversystem/sus/wusbeta.mspx), it surely looks good for a free solution (well you need a win2k3 srv for it but you can use that for something else too).

If money are not a problem, I'd suggest SMS, especially if you are a bit familiar with packaging; you can deploy anything with it.
Second option would be Shavlik for me. For some reasons I did not like GFI very well (as a security scanner is not so great I believe).
SUS is good if you're interested in OS patches only. For Office, Visual Studio, MS SQL and so on you will need something else.

PS: I have just deployed Win XP SP2 with SUS in our network (200 workstations). Of course we used the same to deploy Win2kPro/Srv SP4 also after I implemented SUS over here. The best definition would be, that SUS can deploy critical M$ updates, ones you see at the Windows Update site.

Also I'd recommend Microsoft Baseline Security Analyzer, especially the CLI mode to generate very nice patch/vulnerability reports related to all M$ products. I run that weekly. It's free.

Greetings,
Endre
0
 
Yan_westCommented:
Unfortunatly, WUS will be comming out around June 05...
0
 
Endre_Szekely_BenczediCommented:
Well, we can't have everything just right now, and for free, can we? :) Especially from M$.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now