Try our new research platform with insights from 80,000+ expert users

BeyondTrust Endpoint Privilege Management vs Symantec Identity Governance and Administration comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

BeyondTrust Endpoint Privil...
Average Rating
8.0
Number of Reviews
28
Ranking in other categories
Privileged Access Management (PAM) (4th), Anti-Malware Tools (9th)
Symantec Identity Governanc...
Average Rating
7.6
Number of Reviews
66
Ranking in other categories
User Provisioning Software (12th), Identity Management (IM) (28th)
 

Mindshare comparison

While both are Identity and Access Management solutions, they serve different purposes. BeyondTrust Endpoint Privilege Management is designed for Privileged Access Management (PAM) and holds a mindshare of 4.6%, down 6.0% compared to last year.
Symantec Identity Governance and Administration, on the other hand, focuses on Identity Management (IM), holds 1.8% mindshare, up 1.3% since last year.
Privileged Access Management (PAM)
Identity Management (IM)
 

Featured Reviews

Marlin B Pohlman - PeerSpot reviewer
Oct 24, 2022
Admin rights can be granted and revoked within minutes and that is what everything comes down to, for us
The most important factor is the ability to invoke least privilege, which is required under 27701 and GDPR. We have used the solution to remove users' administrative rights and instead provide on-demand, token-based administrative rights. The latter is an option for a single, temporary increase in privileges for a trusted user for a specific time. We use it in a medical environment for HIPAA compliance or medical compliance in a GDPR case. For example, if you have a clinician who needs access to a specific piece of medical information, or if there is an administrator who needs to have administrator rights to a particular database for a limited period of time, we can give it and then revoke it. That's another reason the tool is useful. Also, the fact that we are able to add events straight from event logs and/or the database is important for crisis management and rapid reaction. This ability helps us meet our SLA requirements. In addition, we can elevate approved applications and actions without broad administrative rights. We can temporarily increase privilege based on tasks. If someone puts in a ticket, we increase their privilege for that ticket. We then watch to see if that ticket has been resolved and then we decrease it. Another feature of the platform is instant risk reduction solutions. We can do a risk metric with it, and we do that as part of our risk evaluation. We can increase and decrease privilege and we can actually show that in the ISO 13485 risk metric. And it provides a single solution for managing endpoint security preferences. It does a good job of that.
Efrén Yanez - PeerSpot reviewer
Feb 9, 2017
It has increased our automation and maintenance of SLA security functions, although I would like to see the human resource onboarding/offboarding processes improved.
* The xPress technologies (connector xPress/Policy xPress/Config xPress) * Integration with API Management and other CA solutions * Facility to publish the web services of any task of Identity Manager * Ease of integration to leverage authentication processes managed by Identity Manager and called by external applications * You do not depend on the supplier to change screens and validate field, create notifications, etc. * True integration between CA Identity Manager and CA Identity Governance for better use of compliance approved roles, data exchange and improved customer experience * Availability to implement in the cloud * Take advantage of important features of Identity Manager and Identity Governance on the Portar offered by Identity Suite (best user experience) and less technicall knowlegde need What about Identity Governance and integration with Identity Manager? This solution makes a seamless integration, leveraging the power of Identity Manager connectors it import the data obtained to Identity Governance; in the opposite direction, the results campaigns from Governance have the ability to update in automatic way the information in Identity Manager, enabling materialization of privileges changes and fulfilling a RBAC model (It is the business strategy to the lowest level of privileges in applications) Through the implementation of "Identity Suite Virtual Appliance" have created a supremely quick and convenient way to install (Identity Manager / Governance / Portal) with even high availability. Multiple scenarios available on a single console.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution's technical support is good."
"It has some features that other products don't have yet, differentiation that sets it apart in the marketplace... Those features are a centralized dashboard and the ability to issue and revoke entitlements within minutes. That makes a difference."
"Technical support is good."
"Scalability is good. I would rate the scalability a nine out of ten."
"What I liked about this solution is that it can also integrate for tracking malicious use or sending analytics to a host that can process them. I don't know if CyberArk, Centrify, or Thycotic can do that. The analytics was something the client really wanted, and they already had BeyondTrust. It is very scalable. The agent on the workstation is very thin, and the processing power required on a server is nothing out of the ordinary. It is also very stable and easy to deploy."
"It is straightforward. It is a good technology, and it is made to do one single thing."
"It's relatively straightforward to set up, especially if you are deploying to the cloud."
"Reduces major vulnerabilities by removing local administrator privileges."
"The product is relatively easier to use than other identity management products."
"The solution is easy to scale."
"Out-of-the-box the product has a lot of opportunity for configuration and sophisticated identity management capability."
"It offers a nice price. It's mid-range."
"Governance."
"It's a very useful tool that has improved our client's security, from day one."
"The most valuable features are role-based access and identity provisioning, which allow a single point of user access to multiple places."
"The product’s most valuable feature is flexibility. It can be customized as per the customer’s requirements."
 

Cons

"There is room for improvement in having the solution align more with standards. We're always shoehorning the product into the standards. It's not that it doesn't work for standards, it does. But Quick Start Policies are pretty close to what we need. The vendor needs to keep looking at GDPR, 27001, and 27701. That's why our clients buy the product."
"It keeps on breaking every now and then. It is not yet mature. Every time something new comes up or we run into some new issues, the culprit is BeyondTrust because the agents and the adapter are not mature. The new development process goes on, and they're not able to handle things. It should be mature. It shouldn't break every now and then."
"Their technical support could be more responsive and helpful."
"A valuable enhancement could be the capability to deploy agents directly through the console."
"The weaknesses are related to the effort required to migrate from existing technologies or having no Privilege Access Management (PAM) at all to adopting technologies like BeyondTrust. It involves changes in processes and can take a significant amount of time, typically six to twelve months."
"The other area to improve is that they rely on MS SQL servers only. You cannot have any other database behind them. They have to be on MS SQL. If they can do something about these issues, this would be a better alternative for some customers."
"The initial setup was very difficult. Even if you are an expert in EPM, it is still very difficult."
"It only has limited support for Mac."
"Reporting could be improved."
"The support from Symantec Identity Governance and Administration could improve."
"A better information display for the approvals within the workflow would give them more information and the ability to comment back on a request as to why they're rejecting it. We've been telling them we'd like this improvement, and we hope to see it."
"The product's technical support could be better."
"We would like to see integration with analytics. Also, for them to be more efficient regarding discovering and implementing new rules."
"There are times that it takes too long to generate reports and to run the assessment tools to collect the information."
"I find the API boring. I also faced issues while integrating with CA SSO."
"They should easier and better integration with other software."
 

Pricing and Cost Advice

"Its pricing and licensing are okay. We were in the perpetual model when it was on-prem, and now, with the SaaS service, we have a subscription model. As a customer, I would always like to see a lower price, but it seems to be priced at the right model currently, and we are trying to get the maximum benefits out of it."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven out of ten."
"What BeyondTrust was providing was user-based licensing which was a great benefit from the client point of view. Recently, I don't know why, the licensing model has been changed, and that is the reason that they have lost a bit of their edge when it comes to the PAM, against our competition. The asset-based licensing, from the user's point of view, is not beneficial. The licensing should be based on the users. The greater the number of users, the greater will be the load and the greater the scalability problems. I presume that is why the licensing model has changed."
"PowerBroker for a Mac client is three times the price of the Windows version."
"It is relatively more cost-effective compared to the competing product."
"This solution is expensive compared to its competitors."
"Price-wise, it is very competitive. In our area, government entities and banks don't go for the monthly payment. It is a headache even for us in terms of finance and procurement to go for monthly payments. Quarterly might be more logical and reasonable, but the minimum that we go for is one year, and sometimes, we even try to compile and give one offering for three years."
"I'm sure everyone should have the cluster environment, which means more expensive, anyway, cheaper than the other solutions."
"Pricing and licensing models are adequate and reasonable."
"Compared to other options, CA products are not that expensive."
"The price is flexible for our existing customers."
"The price is based on the number of users."
"The connector is free, and bundled with the product."
"I do not recall the approximate prices or licensing models, although I do so that it was priced per user number."
"The product has a good price in competition with another product with the same solution."
"Symantec keeps increasing the price. I rate its pricing a seven on a scale of ten."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
13%
Manufacturing Company
11%
Government
8%
Computer Software Company
28%
Financial Services Firm
16%
Manufacturing Company
8%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...
What do you like most about BeyondTrust Endpoint Privilege Management?
The solution's least privilege enforcement has helped us ensure access is given to only the required people.
What do you like most about Symantec Identity Governance and Administration?
The product’s most valuable feature is flexibility. It can be customized as per the customer’s requirements.
What needs improvement with Symantec Identity Governance and Administration?
The product works slowly while accessing cloud-native solutions. They should work on their ability to integrate with third-party vendors. Additionally, cloud networking features and Azure, AWS, and...
 

Also Known As

BeyondTrust PowerBroker, BeyondTrust Endpoint Privilege Management for Windows, BeyondTrust Endpoint Privilege Management for Mac, BeyondTrust Endpoint Privilege Management for Linux, BeyondTrust Endpoint Privilege Management for Unix, Avecto Defendpoint
CA Identity Suite, Symantec IGA, Layer7 Identity Suite, CA Identity Manager (CA IDM), CA Identity Minder, CA IAM, CA Identity Manager (CA IDM), CA Identity Governance
 

Overview

 

Sample Customers

Aera Energy LLC, Care New England, James Madison University
Acciona, Core Blox, DBS
Find out what your peers are saying about CyberArk, Delinea, One Identity and others in Privileged Access Management (PAM). Updated: November 2024.
814,649 professionals have used our research since 2012.