Secure User Management
9.5 SP1 Technology Updates
Updated Overview: Secure User Management / LANDesk
®Management and Security Solutions,
including Management Suite, Security Suite, Data Analytics, Patch Manager, Portal, SmartVue and
Cloud Services Appliance
Secure User Management
In today's ever-changing endpoint management environment, driving performance in a capital-constrained market requires innovative solutions that integrate traditional endpoint management, security, and software asset management. By integrating these technologies, LANDesk helps customers reduce costs, minimize risk, and increase user productivity.
With over 20 years of experience, LANDesk brings a proven approach to integrated endpoint management across private, public, and global markets. LANDesk delivers breakthrough technology in an integrated endpoint management solution. By incorporating advanced automation, powerful downloading technologies, advanced remote control technologies, effective software license asset management, real-time dashboards and reporting, and robust security technologies, LANDesk leads the market in endpoint management.
LANDesk Management and Security Solutions Offer:
• Comprehensive and simplified IT Management: LANDesk Management Suite, Security Suite, Data Analytics, and Mobility Manager integrate seamlessly together to offer a single-console approach to IT management. Most competitors require multiple add-ons to achieve the same result.
• Reliability and lower cost: LANDesk offers patented downloading technologies, providing unsurpassed software and patch delivery that uses fewer infrastructure components than competitive solutions. Additionally, console automation and third-party patching saves IT time and resources.
• Unparalleled device support: The ability to manage and secure devices outside corporate networks is vital to modern organizations with a global presence. LANDesk offers unmatched device support for Windows, Mac, Linux, iOS, Android, and many other device platforms. LANDesk keeps people productive working on the devices they choose, no matter where they work in the world.
• Elimination of complexity using automation: LANDesk allows administrators to control and monitor any endpoint from a single, centralized console, providing a single point of data aggregation. This helps to synchronize information; eliminate many manual, time-consuming, and error-prone tasks; and reduce complexity and operating costs. Automation also helps eliminate potential conflicts and configuration errors, reducing downtime of end-user devices and lowering IT operating costs.
• Integrated endpoint security management: Provides multiple layers of security to users and their devices through patch management, antivirus, host-based intrusion prevention, application control, device control, and vulnerability detection. Enables organizations to meet compliance and regulatory standards, mitigate lost opportunities and reduce the risk of legal and financial penalties.
New in Release 9.5 SP1:
The newest release of the LANDesk endpoint management solution adds these significant features and benefits:
Effective Software License Asset Management: Unlike the majority of our competitors, LANDesk offers Software License Asset Management (SLAM) as a standard capability within LANDesk suite solutions. In the 9.5 SP1 release, we’ve made significant strides in developing a centralized, complete tool that facilitates easy, integrated management of hardware and software. Included in the 9.5 SP1 release is an Automated Software License Reclamation feature that optimizes license usage by reclaiming underutilized software assets automatically. In addition to SLAM capabilities, we offer extensions using LANDesk Data Analytics with Management Suite. By coupling the two, organizations can gain control from the start with Business-to-Business
Connectors, increasing visibility and management with the least amount of effort. Data Analytics uses advanced software and hardware discovery, asset mapping, SNMP discovery services, data normalization, rules-based licensing, and search and deploy. LANDesk software management capabilities help establish business alignment, automate complex IT processes, and improve visibility.
Enhanced Cross Platform Support: LANDesk offers customers a flexible, cross-platform environment. The 9.5 SP1 release takes support for the world’s next-generation operating systems to the next level (Microsoft® Windows® 8 and Apple® Mountain Lion). In this release, LANDesk has enhanced Mac OS
X management significantly (cross-platform antivirus solution; apply configuration policies to almost any Mac system configuration to keep Mac’s in compliance with defined business policies; provide end-user convenient, non-destructive OS X upgrades, and target Mac management to the primary owner or an LDAP group without knowing the name of the machine). LANDesk has also included additional Unix and Linux operating system support. LANDesk Mobile Productivity Tools: IT organizations need the right tools to help end-users and IT administrators increase job productivity. In this release, LANDesk has added and improved several tools that can significantly boost the productivity and efficiency of endpoint management and user support. For example, SmartVue can now be used from any device and any HTML5 compliant browser. Integration with the Cloud Services Appliance (CSA) eliminates the need to be connected to the corporate environment to access SmartVue. Additionally, role-based security in SmartVue allows administrators to control which widgets are displayed to a given user. HTML5 Remote Control now offers remote screen capture, and full screen mode. These features enhance productivity by leveraging all of the screen “real estate” available. LANDesk has also made improvements to Patch Management. Administrators can now set a timeframe and specific circumstances for when it is okay to patch a system—reducing unwanted disruptions and maximizing end-user productivity. , LANDesk offers all of these tools as part of Management Suite.
Table 1 details enhancements and new features of LANDesk Management & Security Suites. The enhancements and new features are categorized into four primary areas: 1) User Management, 2) Broad Platform 3) Software Asset Management, and 4) Endpoint Security.
Table 1. Enhancements and New Features of LANDesk Secure User Management Solutions
Enhancements and
New Features
Benefits
Description
User Management (Deliver)
Package Bundles Simplify the methods for chaining and distributing software packages. Multiple software packages can be bundled and deployed as a single task.
Portal
Present a corporate branded IT portal to users and consolidate all their tools into a one-stop location to do their work. The Launchpad (app, docs and links) provides self-service software delivery to the user.
The portal manager is an extensible framework that can be fully branded. The portal can be extended to load custom applications for frame web-based applications. IT can aggregate their tools into one location. Default applications shipped are Software Delivery (Launchpad) and client SWD history.
Printer Consumables Organizations can now decide how to purchase printer consumables based on usage information.
Data Analytics now has the capability to retrieve printer consumables information such as pages printed, toner levels, and maintenance kit’s life. The data is stored in the Asset Control repository and is available in reports.
HTML5 Remote Control
Organizations can now ensure that sensitive, but non-classified information is secure in transit with FIPS 140-2 compatibility for all traffic passing through the Cloud Services Appliance. With remote screen capture, administrators can easily capture a screenshot of the machine being controlled. Full screen mode facilitates remote control sessions from any device, all while leveraging all of the screen real estate available. Efficiently audit the network environment with visibility into the “who, what, and when” of all remote control sessions. Granular benefits extend to who can move files from machine to machine in the network.
The HTML5 Remote Control is now FIPS compatible in addition to a number of feature enhancements, including:
• Remote screen capture
• Full screen mode (auto-hide toolbar) • Visibility into who performed a remote
control session, what device was targeted, and when it was performed Granular permissions to allow/block HTML file transfer
Enhanced and Expanded Remote User Management
The conversion of the Cloud Services Appliance (CSA) to 64-bit in this release allows for extended memory and capacity. Multiple Gateways per core provide segmentation and scalability (not failover). The agent setting for the CSA to communicate with enables adaptive settings to connect with the nearest CSA dynamically. The CSA activity log allows administrators to see what support is proved through the CSA.
The Cloud Services Appliance has been converted to 64-bit, allowing multiple CSAs per core to be supported. The Agent is extended to have an agent setting for the CSA to communicate with. A CSA activity log is provided.
Improved Scalability 1:Many Cores
New 64-bit architecture allows for more simultaneous connections. Span one Cloud Services Appliance across multiple Cores. Reducing the infrastructure investment required by the Cloud Services Appliance enhances value.
More scalable, modern 64-bit Linux architecture for the CSA.
Enhancements and
New Features
Benefits
Description
Broad Platform (Choice)
Enhanced Mac OS X Management
Enhanced Mac OS X Management offers several key benefits, including:
• Centralized AV management for both Windows and Mac machines • Ability to append to or remove and
replace OS X configuration policies set previously—regardless of whether it was a user- or machine-targeted policy • Intuitive workflow and automation by
installing Kaspersky Lab AV jointly with the LANDesk Mac management agent curbing malware infections
• Leverage preferred servers to reduce bandwidth usage and facilitate business policy compliance via admin- defined and delivered OS X configuration profile settings
• Perform management by targeting a user at the user level and LANDesk takes care of the rest
• Increase productivity by providing instant, end-user convenient OS upgrades and save admin time by eliminating the need for data and application migration prior to an upgrade
Mac OS X management now offers one centralized tool to manage:
• Mac AV; deploy OS X configuration settings aligning to business policies • Stage OS upgrades and enable
end-user control
• Reduce bandwidth usage via LANDesk preferred server integration
• Target machines via actual people and groups
• Track potential security risks by inventorying machines that have unencrypted hard drives
AMT vPro Integration
Integration with Intel’s version 9 WS-MAN only host-based provisioning enables LANDesk admins to stick with their standard workflow; simply install LANDesk agents, or direct LANDesk to provision pre-managed machines, without any further action to obtain vPro functionality. Further integration into version 9’s graceful shutdown and restart provides a better end user experience. Finally, PFX certificate file support means admin control mode provisioning is a drag-and-drop experience. Simply purchase a certificate, place it on the core server, and security levels are increased.
AMT vPro 9 Integration includes:
• WS-MAN compatibility for vPro 9 compatibility
• Full PFX certificate file support; no need to create PEM files
• Graceful vPro 9 shutdown and restart integration
• Queuing of incoming provisioning web service calls for balance and performance control
• vPro provisioning certificate purchase and place; no need to understand certificate chaining
HP ElitePad Integration Improve the security of all data on an HP ElitePad based on the tablet’s location.
HP ElitePad integration provides mobile management security tools for HP’s ElitePad; enables an HP ElitePad to change its security posture based on the device’s location as well as remotely removing all data if lost or stolen.
HII Driver Management
HII reduces the technical load of the imaging process. Automated driver discovery and admin controls to set specified drivers greatly reduce the time to prepare HII for new systems.
Granular controls to set driver exclusions or enforcements allows automated driver processing while still having the needed controls.
CentOS 6 x 64 Support AIX 6.3 and 7.1 Support
Perform software and hardware inventory information as well as vulnerability detection.
Additional platform support with CentOS 6 x64, AIX 6.3 and AIX 7.1 support.
Enhancements and
New Features
Benefits
Description
LANDesk Mobility
SaaS models can be one of the answers to reducing expenses in two ways:
1. Initial hardware costs
2. Ongoing hardware and OS maintenance Management is also simplified, going from three consoles to two.
LANDesk Mobility is moving to a full-featured MDM via a SaaS-based offering, which comes from our Wavelink Avalanche product line. This integrated hybrid SaaS solution lets IT administrators see and report on mobile and desktop environments from one console and reporting system.
Software Asset Management (Control)
SmartVue—Access and Control
SmartVue is easier and more intuitive to use than ever. SmartVue for Web allows greater access to SmartVue from virtually any device—from Mac to PCs to tablets. Scoping widgets by users allows administrators to simplify the experience of their users by only displaying widgets relevant to them. Integration with the Cloud Services Appliance eliminates the need to be connected to the corporate environment to view SmartVue. The benefits of SmartVue can be realized regardless of location.
The 9.5 SP1 release provides several new capabilities, including:
• SmartVue for Web–Use SmartVue
from any device; iOS no longer required
• Role-based security–Control which widgets are displayed to a given user • SmartVue through the cloud–Access
SmartVue from anywhere via the Cloud Services Appliance
• Usability enhancements
VDI Licensing
Empowers IT to accelerate smart decisions and reduce risk of failing software audits by correctly measuring software usage for Group Licensed software.
Provides effective licensing analytics for VDI-type software (Cytric, Terminal Server).The user can set up a process that communicates with Active Directory and the LANDesk inventory to correctly report on compliance of software that is measured by the presence of a user in a group as well as the presence of the software installed on the user’s computer.
Automated Software License Reclamation
Supports optimization of license usage, enabling reclamation of underutilized software assets. “Just- in-time” license reclamation helps organizations minimize the impact while leveraging underutilized software assets.
Once IT administrators define a reclamation process, the “just-in-time” license reclamation reclaims unused or underused software automatically as needed, while also alerting the admin of the actions taken. Define which user groups can or cannot be used for software reclamation, i.e. don’t reclaim software for executives.
Approved Software
Designate software as “approved,” making it easier to detect the amount of unapproved software in the environment. Helps organizations avoid fines from software audits and establish a software baseline.
Additional analytics enable administrators to designate software as either “approved” or “unapproved” and report of what software is running in the environment.
New B2B Connectors
Increase the number of vendors the product can interact with. The more critical asset information that is imported automatically, the more accurate the LANDesk asset data is and the more effective the product will be in empowering IT to accelerate smart decisions.
New Business to Business Connectors for PCM Sarcom, PC Connection, PDS, SHI. The asset import function for software and hardware is now automated.
Enhancements and
New Features
Benefits
Description
Endpoint Security (Control)
Kaspersky Lab Endpoint 10 Integration
Windows 8 is coming into the enterprise in pockets. Kaspersky Lab Endpoint 10 Integration enables organizations to protect devices running the new OS platform. LANDesk Antivirus now protects all Windows desktop platforms.
The 9.5 SP1 release has upgraded the Kaspersky Lab AV client from version 8 to version 10. OS support has also been updated; specifically Windows 8 is now a supported OS.
FIPS 140-2 Compliance
Helps LANDesk customers in government, retail, and healthcare avoid sanctions and penalties from government or industry regulatory standards. Additionally, protecting “Data in Motion” helps avoid revenue loss due to public announcement of data loss, and remediation efforts required.
To protect all "Data in Motion"—data transferred from Windows clients through the CSA—and to stay in compliance with government and industry standards, all Data in Motion through the LANDesk CSA will be encrypted with FIPS 140-2 approved cryptography.
Patch Management – End-user Productivity Enhancements
Being able to set a timeframe and circumstances for patches allows administrators to specify key processes that if found running—and optionally are in full screen mode—patching will not occur. For example, if PowerPoint is running and in full screen mode, don’t patch. This reduces unwanted disruptions and maximizes end-user productivity
The 9.5 SP1 release of Patch Management allows administrators to set a timeframe and fine tune circumstances for when it is okay to patch a system.
Client Task History
Provides simplified tracking of what has occurred in the environment; helps administrators demonstrate ROI and problem resolution.
Software deployment tasks are tracked in inventory, allowing visibility of task history successes and failures.
Application Control— Cloud-Based File Reputation
Enables the securing of endpoints at a lower operational cost and greatly streamlines white listing processes, improving the user experience. For example, when a user downloads and installs a known good application from the Internet, it is immediately allowed to run rather than being blocked and requiring a call to the help desk to remediate.
File reputation allows administrators to greatly reduce the amount of time spent manually managing the applications that should be allowed to run in the environment.
This is a cloud-hosted service that provides a database of more than 24 million known files.
This document contains information, which is the confidential information and/or proprietary property of LANDesk Software, Inc. and its affiliates (referred to collectively as “LANDesk”), and may not be disclosed or copied without prior written consent of LANDesk. To the maximum extent permitted under applicable law, LANDesk assumes no liability whatsoever, and disclaims any express or implied warranty, relating to the sale and/or use of LANDesk products including liability or warranties relating to fitness for a particular purpose, merchantability, or infringement of any patent, copyright or other intellectual property right, without limiting the rights under copyright.
LANDesk retains the right to make changes to this document or related product specifications and descriptions, at any time, without notice. LANDesk makes no warranty for the use of this document and assumes no responsibility for any errors that can appear in the document nor does it make a commitment to update the information contained herein. For the most current product information, please visit www.landesk.com.
Copyright © 2013, LANDesk Software, Inc. and its affiliates. All rights reserved. LANDesk and its logos are registered trademarks or trademarks of LANDesk Software, Inc. and its affiliates in the United States and/or other countries. Other brands and names may be claimed as the property of others.
