Manage Engine vs Ninjaone

[-]

cggam@reddit

same at the moment looking for RMM solution (we ahve intune but its definitively not a RMM solution : remote control, realtime, 3rd patching, endpoint management ... thats why there is inow Intune suite a an really expensive price, 10$/month/device)  For ninjaone, its a great interface, clear but i found a lots of missing things (not synchro to AD groups, 3rd patch management is poor, not a lots of options for Schedule, no real Advanced features, few reports ... but their remote control tool is nice (they offer their own tool but also teamviewer) and the heatlh status in real time (like CPU, memory ...)  I had a dmo with Manage Engine cloud and definitely there are here a lots of really interesting features : synch with AD, Advanced windows patch with testing group, a huge software catalog for patch .... interface is less clear but more complete i found

Reply

[-]

Patchewski@reddit (OP)

Generally the same for us but have a look at the list of current or open CVE associated with ME. That’s why we dropped it as an option. Ended up signing with Tanium. Onboarding scheduled for October. Still need a helpdesk but Spiceworks will die for now.

Reply

[-]

cggam@reddit

On our side we only looked at Cloud ME version, not onprem

Reply

[-]

MikeWalters-Action1@reddit

So you ended up paying $1,000,000 for your 1,500 endpoints for 3 years, and even for this much, it takes so many months just to schedule the onboarding? Other than the seemingly better architecture and security posture of Tanium, what else made you buy it?

Reply

[-]

cggam@reddit

Agreed, Tanium is like the NASA :) to big and to complex

Reply

[-]

MickCollins@reddit

All I can say is that I just ran Automox for a few months and while it does in theory deploy patches I really didn't like that when one patch fails it reports they all fail. I have 16 years of vulnerability management experience and I was like "are you fucking kidding me". I'm convinced that whoever came up with the reporting for Automox as well is someone using a copy of Crystal Reports from 1993 because the reports are bad. As such I'm currently running KACE for a business until they bring in Qualys with a good chunk of the bells and whistles. (They're trying to bring the cost of their cyberinsurance down.) One other I'll toss out because I did find it to be fairly bulletproof when I ran it (although it's been a hot minute) - Ivanti Security Controls. That's what used to be Shavlik NetChk. I really liked that it could be agentless if I wanted and since it used the MS Task Scheduler when it said it was going to deploy, 99 out of 100 times it did. And the reports from that were the cat's ass.

Reply

[-]

MikeWalters-Action1@reddit

>someone using a copy of Crystal Reports from 1993 I still remember using one in 1998. Piece of crap. Back then we ended up developing our own reporting engine.

Reply

[-]

DefiantPenguin@reddit

While Qualys is fantastic as a vulnerability scanner, the patch management feature only does software update patches. It won’t patch any of the other security vulnerabilities that it finds. You get to do all of those by hand or have a different solution to run those remediations.

Reply

[-]

MickCollins@reddit

As is expected. It's not going to patch log4j detections for instance but it will make the customer aware so they can have other personnel address them. I'm expecting a long list and that the network and sysadmin guys are going to hate me for a while but that's the price of doing business...

Reply

[-]

DefiantPenguin@reddit

Totally the price of doing business. And yes, they’ll hate you for a while. lol

Reply

[-]

6stringt3ch@reddit

ManageEngine Endpoint Central is ok. I found it lacking in a few areas like being able to create dynamic groups using more specific criteria than their current basic offering and any customized reporting required SQL queries but they offered no good documentation on how to do this not examples. The good thing is that their support will definitely help you creating your queries as long as it's not for something dumb. I use NinjaOne today to support a local business and its pretty good although probably not as powerful as Endpoint Central. The added benefit is that they include a documentation app (which isn't all that good) and a ticketing system. I think if I were to start from the beginning, I'd use ManageEngine Endpoint Central.

Reply

[-]

Patchewski@reddit (OP)

I liked the demo for endpoint central. Sr isn’t impressed because he was having trouble setting up the trial. Support was anti-helpful in his opinion. Had a look at their cloud offering today which was also pretty good but need on premises for endpoint central. In a pov for Ninja starting yesterday. I like what I saw but haven’t given it much time yet.

Reply

[-]

6stringt3ch@reddit

Depending on how many devices you have and what features you need, their on-premise edition is free for 25 devices or less

Reply

[-]

Patchewski@reddit (OP)

I saw that, great for a small office. We have about 1500

Reply

[-]

6stringt3ch@reddit

I used to have about 1800 devices in an on-premise deployment. Definitely leverage the remote office config and designate a machine or server at each site as a distribution server. This way only one host at each site is seeding patches,software,etc.

Reply

[-]

Patchewski@reddit (OP)

That came up on the call today. Interesting feature. I kinda like how Tanium does it too. As I understand, the first and last in line talk to the cloud console and pass whatever they need endpoint to endpoint.

Reply

[-]

MikeWalters-Action1@reddit

>As I understand, the first and last in line talk to the cloud console and pass whatever they need endpoint to endpoint. Yes, their design is very cool. P2P protocols are critical in achieving scale. You can't rely on "distribution points" or other such high-maintenance items. The best solutions do not require any deployment of any caching/distribution applications in your network. They just make all agents symmetric and talk to each other, so there is no single point of failure, no extra maintenance, no extra configuration.

Reply

[-]

THE_GR8ST@reddit

Dam 1500 offices is a lot.

Reply

[-]

Patchewski@reddit (OP)

Sorry, endpoints not offices

Reply

[-]

THE_GR8ST@reddit

Oh tru, that's my had.

Reply

[-]

ThatsNASt@reddit

I will light myself on fire, roll my freshly lit body over the biggest leggo collection, and then jump in a lake of alcohol before I make a conscious decision to use Manage Engine.

Reply

[-]

Shadowforciano@reddit

Hahaha love it! please tell us why? We are in the middle of evaluating it and your opinion will definitely help! lol

Reply

[-]

subbu17india@reddit

Again, Extremely sorry for this! Let us know how do we amend this! This is not what we are as a company and how we wish to be seen by our prospects and customers!

Reply

[-]

FriskyDuck@reddit

Uhhh.... can I ask why? We're looking at Log360 right now....

Reply

[-]

hngovr@reddit

Seconded

Reply

[-]

Patchewski@reddit (OP)

Noted.

Reply

[-]

dean88uk@reddit

Interesting to see people's opinions on the cloud version of manage engine products. I'm looking at service desk plus at the moment. I assume the vulnerabilities are specific to on prem software only? The difficulty I have is the network monitoring, ninjaone was quite poor and dint meet ITIL standards. Service desk plus does and can be well integrated in to site 24x7.

Reply

[-]

Zaphod1620@reddit

ManageEngine is the only vendor my Security department has outright said no to before even looking at the proposal. I don't know why. We actually just deployed Tanium and are getting it set up as we speak. It's a bit cumbersome, and a pain to twist into parity with our old system (which was also twisted into an inch of its life) but I like it.

Reply

[-]

darimm@reddit

ManageEngine's products are known for having huge vulnerabilities that allow full system level takeovers in the security world. That's why.

Reply

[-]

CPAtech@reddit

Do you have any sources for this? We're looking at them now.

Reply

[-]

darimm@reddit

[https://www.cvedetails.com/vulnerability-list/vendor\_id-6309/Manageengine.html](https://www.cvedetails.com/vulnerability-list/vendor_id-6309/Manageengine.html)

Reply

[-]

CPAtech@reddit

If I'm reading that right there have been none since 2021 and the last critical CVE was in 2017?

Reply

[-]

darimm@reddit

Seems like this particular site stopped updating a while ago, but the trend has continued. There are plenty of vulnerabilities in 2022 and 2023. They aren't that hard to find.

Reply

[-]

No-Marsupial8924@reddit

I use ME here. I kinda like it? Pricing isn't bad for everything it does. I see some people mentioning support is rough, but I wouldn't know, in my 6 months in this environment I haven't had the need to contact support. Which not having to need support so far says a lot to me. Last place I was at used N-Able/SentinelOne and that was terrible, constant issues.

Reply

[-]

Same_Refrigerator842@reddit

ManageEngine support is horrendous. They ask for logs until we get pissed and solve the issue ourselves and then they ask how we did it. They do occasionally add the fix/feature we figured out in updates though so that’s kinda cool I guess.

Reply

[-]

patmorgan235@reddit

Its hit or miss for me. Sometimes they're great sometimes they don't have any idea what's happening.

Reply

[-]

subbu17india@reddit

Hi, Subbu here from ManageEngine. Extremely sorry to note this. I'll get this passed on to our team and analyse what went wrong. Please reach out to me if you need any assistance with our products.

Reply

[-]

Snoo_73402@reddit

Yeah. Better just have those logs before you start the chat. Then they say they will get back to you and never do.

Reply

[-]

Vel-Crow@reddit

I've never heard anything good about manage engine. I use ninja,very happy with that. It has a robust simple interface and is able to complete any need that I've had from an RMM.. The support is also fantastic. They typically pull logs themselves after getting permission from you. If they are unable to fix the issue,they will tell you that it requires a code change,but they are not able to provide ETA, Despite that,my issue has always been fixed to the 2 releases. Releases are every 2 weeks.

Reply

[-]

Torenza_Alduin@reddit

Manage Engine is hot garbage!!!!

Reply

[-]

THE_GR8ST@reddit

Idk why exactly, but there are people out there that really hate ME. If I remember correctly, NinjaOne is a newer software, other than that idk anything about it.

Reply

[-]

Patchewski@reddit (OP)

Do you have any exposure to Tanium? Impressive piece of kit but expensive.

Reply

[-]

DefiantPenguin@reddit

What’s the licensing model and how much does it cost?

Reply

[-]

Patchewski@reddit (OP)

Agent subscription per endpoint. For us it was north of 1000000 for 3 years. From what we saw in the demo and speaking with a couple other similarly sized orgs, they’re the clear front runner but that’s a big bite.

Reply

[-]

THE_GR8ST@reddit

I don't know much about it other than I was in a Discord channel where people were talking about it, and they were saying how amazing/impressive it is.

Reply

[-]

AlleyCat800XL@reddit

With ME, support does require some effort to get solutions - we find them difficult but they eventually get there, mostly. By no means great but by no means the worst (we have other vendors who often get back to us to do initial triage days or weeks after we have moved on from the issue). Their software is relatively cheap, a bit old fashioned in implementation and uses some versions of component that really need to be updated (indeed, their own vulnerability scanning reports their own products as vulnerable!) On the plus side, it does a ton of thing for the price, is cross platform, and integrates with their Helpdesk so we don’t have to do much asset info maintenance for systems running it. Would I look at alternatives given the time and budget? Probably. Would I bother to when I have other things to do? No.

Reply

[-]

AlleyCat800XL@reddit

And I should add, would I select them again if I was looking? I have to say maybe, depending on specific requirements and budget.

Reply

[-]

corsicanguppy@reddit

But I'm not using NinjaOne either because it sounds like primary school kids named it.

Reply

[-]

ntrlsur@reddit

Before you make the jump take a look at action1. Been using them for a few months. You get 100 free machines and I am really digging it. Pretty close to buying a subscription..

Reply

[-]

AppIdentityGuy@reddit

What are looking to do? With respect to AD Management, delegation and auditing take a look at either NetIQ DRA or Quest ARS. Disclaimer. I used to work a NetIQ Distributor and I’m certified on Quest ARS so I am probably biased. But both products have been in the AD management game for at least 15 years.

Reply

[-]

Cookies_and_Cache@reddit

I implemented LOG360 and a few other modules from manage engine and run them effectively. The vulnerability manager has completely replaced my WSUS and is pushing updates on a rotating schedule to 1500+ devices. Is it a little clunky, sure, is the support less than useless, yes, but it does work

Reply

[-]

abstractraj@reddit

We’ve used ManageEngine successfully for ages. Maybe because we only rarely need support? Corporate has decided to spring for Tanium so that’s going to be a no brainer

Reply

[-]

Real_Admin@reddit

Previous NinjaRMM user, now at different org using Manage Engine. Only thing I like over Ninja is the Self Service portal that allows admins to add packages that end users can install as needed. Everything else is hit or miss, mostly miss.

Reply

[-]

scotty269@reddit

Ninja is pretty good for small business situations, or places where you otherwise can't roll Intune. You still need to know a fair amount of scripting and registry work to manipulate settings to the way you want. What are your main requirements that you're looking to achieve?

Reply

[-]

sryan2k1@reddit

I went to a Tanium event a week ago or so and after talking with the SE it seems like some solid kit.  Like others here, Manage Engine no.

Reply

[-]

axi0n@reddit

My main beef with ME.. Slow... Java... and to this very day.. an odd cobbling of actual .bat files and other dos era scripts.. Like WTF.. They would need devs pushing 60 as well as new blood to keep the dev furnaces stoked...

Reply

[-]

thenotterb@reddit

I've used both. I found Ninja to be a much better tool for hands-on management. The ability to open a remote terminal and take action with Powershell, push a script with 1-2 clicks, install an application, or kick off remote access with one click make it a great tool for day-to-day management. It's also just super easy to use, which means the whole team could use it. I also find that the automation capabilities of Ninja are much stronger, particularly with conditions and custom fields. ManageEngine does have a broader portfolio, though.

Reply

[-]

Spicy_Rabbit@reddit

Have not used NO but we are moving away from all things ManagEngine. Patch notes are filled with too many security bugs. Apps use their own build of Java, which I guess is better then the insanely out of date oracle versions they once used. The apps I have used have no real road map. When you submit a feature enhancement they make it seem like they care, but most necroed forum posts are nine years old asking “what they status?” Support is shit all around. What they do well, pricing. They are priced very well and are open about it. We have grown so tired of their support, costs of a new solution comes fifth on importance to replace them

Reply

[-]

IRideZs@reddit

We tested automox, manage engine and PDQ for a patch management solution and ended up with manage engine, we’ve had no issues with it this far after being 4 months in 1700 devices. Price and ease of use were our governing factors, automox was nearly 6x manage engine, PDQ we utilize in network but needed something cloud ready and ME did that without an issue

Reply

[-]

eeleete@reddit

PDQ connect

Reply

[-]

Patchewski@reddit (OP)

That’s our next demo. What do you like about it. Anything you don’t like?

Reply

[-]

Patchewski@reddit (OP)

Thanks.

Reply

[-]

progenyofeniac@reddit

I haven’t used NO, but I do use ME. I think it’s pretty flexible, including working well for remote user machines. Compared to PDQ, it’s very flexible and offers a lot of options for user notification and time-based deployment, as well as remote access into machines. I haven’t found much it can’t do, or doesn’t do well. Probably my biggest dislike is the need to run an agent on workstations, but it’s far from the only program which requires that.

Reply

Reply to Post

63 Comments