| Address: | Carlyle House Ramsdell Road Monk Sherborne Tadley Hampshire RG26 5HS |
| Contact No: | +44 (0) 845 2651265 |
| Contact Email: | sales@lanboss.com |
| Website: | www.lanboss.com |
To view more information regarding Lanboss Workstation Auditor/Lanboss Workstation Manager please see their Membership Details page.
Overview
- Summary
- Installation Narration
- Running the Program
- Setting up the System
- Ongoing Administration
- OS/Device/Software Support
- Auditing and Reporting
- Support and Pricing
- Key Strengths - Technical
- Key Weaknesses - Technical
- Key Strengths - Commercial
- Key Weaknesses - Commercial
Summary
Lanboss has created a feature rich SAM product that allows the management of just about every auditing process a business requires. In addition to the normal auditing and management functionality it includes many features that enable organisations to transition from one infrastructure to another. A unique UNC mapping system allows real-time remapping of UNC paths that facilitate a smooth transition between servers, applications and data. For consultants and executives, the Console and database files can be copied to a local machines for off-line use, again very simple to achieve and doesn’t require installation or other complications.
On the application monitoring front it provides some extra bells and whistles. Whilst providing real-time application control, using known license thresholds, it adds detail by enabling the operator to provide bespoke messages to staff using applications that are being monitored thus hand holding them through any important message(s) and even asking for feedback.
The company has developed the system in a modular fashion. For the review we have only detailed the SAM core (Workstation Manager). Other options including removable device management and Datacop; a centralised approach to optical disk access and control are available as modular plugins to the core product.
The Workstation Auditor version is available for free. This flexible approach allows organisations to both trial this component and build a picture of the software usage and license count prior to embarking on a full scale implementation of the Lanboss software.
Finally, the company pitches the product from 250 through 10,000 seats and above and can provide consulting and audit management services either directly or via its channel. Any organisation that requires SAM now with the potential to easily add device management and other options later, should consider the Lanboss solution.
Installation Narration
The Lanboss software is delivered via a single 88MB installer file. A very simple installer is used and asks no difficult questions throughout the process. It takes less than a minute to install the software. On starting the application for the first time the system creates the database tables it requires, this is a one-off process and is completed within a few minutes. The product gets top marks for the ease of installation process.
Running the Program
The system is comprised of several components including a proxy server, file server, discovery console and the main Lanboss console used for management and reporting. The system is inherently flexible and also installs a small version of the main database on each client PC. This is used for a unique delta process that enables the clients to gather data quickly without constant communication with the central server processes. Most of the components, other than the Lanboss console, run on a central server and once operational can be left to run. The console itself uses a proprietary interface, however, it is easy to use, although because of its thoroughness, will take some time to get to the bottom of all of the features available to the operator.
Setting up the System
All of the components are installed from a single setup installer. It is well devised and easy to install. Quite a few separate components need to run in the back end of the server though Lanboss provide a useful one click service manager application to fire them all up in the correct order, this can be automated from the start-up process of course. Installing a client is easy and the payload is small, amongst the smallest of any of the products reviewed, and this sets it up well for a low impact on the local area network and more importantly the wide area network if one is use across the business. Once the agents are installed they’ll take up to 30 minutes (depending on the drives and file volumes on the PC) to report back to the server. In the test the server had received hardware information with 2 minutes.
Ongoing Administration
Rolling out client agents is a snap. A powerful scanning feature of the Agent Distributor is the ability to segment scanning of devices, either individually or by subnet, range, computer name. It also provides a useful ability to sync agents at the click of a button. As with all of the products reviewed, it will take time to get used to the Lanboss way of doing things. The UI is well set out and after some hands on experience it is easy to use. The solution offers some really interesting abilities; being able to see what a user on a particular machine is running is a particular feature that sets it apart from others.
OS/Device/Software Support
At present Microsoft operating systems are supported but there are plans to expand this to others including Linux and OSX in the future. Lanboss offers a very granular level of detail when reporting peripheral devices and ports attached to a PC. The product also does well in the detail stakes providing a level of detail on applications in use and which user is logged in beyond many others in the market.
Auditing and Reporting
Lanboss have spent some time with the reporting functionality. A plethora of canned reports are available out of the box but not content with the stock reports the company has thrown in a full scripting language that enables the operator to construct almost limitless combinations of management and operational reports.
Support and Pricing
Purchasing product maintenance provides 90 days of direct telephonic and remote KVM support to users, limited to 3 incidents during that time. Thereafter, Lanboss provides email and client forum support.
For specialised requirements, additional incidents can be purchased. First year maintenance is included in full license purchase, the 2nd year onward is 33% for maintenance. The Lanboss definition of maintenance includes product support, with minor and major upgrade protection, which means that all maintained users automatically have rights to the latest version.
Workstation Auditor is free for any seat count, but this does not include any direct support or maintenance.
When purchasing maintenance for Auditor, a client becomes eligible to upgrade their license to Workstation Manager, which works out to be an extremely cost effective way for users to a) get the picture of what's going on out there and b) to be able to take action and do remediation (for a modest upgrade fee). At 1,000 seats, end user pricing is a little under £12.50 per seat for the Workstation Manager following the upgrade route.
Key Strengths – Technical
- Slick interface and easy to learn and then use.
- Uses own licensed database.
Key Weaknesses – Technical
- Only manages Windows OS based machines at present.
- Although the interface is nicely constructed it will require more time to get used to as opposed to an MMC interface.
Key Strengths – Commercial
- Very cost effective when it comes to 3rd party requirements due to the use of its own SQL database which can support up to 10,000 users on a single system where the standard MS SQL approach stops at about 1500 thus saving on hardware costs.
- One stop shop that can be enhanced with additional modules to provide a true single point solution.
Key Weaknesses – Commercial
- At present only manages Windows OS based machines.
Technical Report
- How the tests are conducted
- Installation Requirements
- Product Review Testing Schedule
- Documentation/Evaluation
- Installation Experience
- Agent deployment
- Creating User Groups
- Defining a Policy, Setup and Usage
- Administration / Inventory
- Licensing & Reconciliation
- Security
- Hardware Inventory
- Software Identification
- Audit/Reporting
- Pricing
- Support
How the tests are conducted:
The tool evaluations have been conducted using Windows 2000, Windows 2003 or Windows XP for the management console element. The vendor preferred OS for the database and backend server is also selected for the review. Functional testing has been conducted across the Microsoft Windows family of operating systems and where Linux is supported OpenSUSE has been used for testing. The testing takes place on a dedicated hardware environment and where VMWARE or Microsoft Virtual Terminal functionality is supported this is tested if time permits.
| Installation Requirements | |
|---|---|
| Operating System | Lanboss Workstation Manager Windows 2000/2003/2008 Client: 2000, XP, 32 and 64 bit Microsoft .NET Framework v 2.0 (not necessary) |
| Processor | INTEL / AMD |
| Memory | 1024MB upwards |
| Storage | 1GB Minimum |
| Display | 1024x768 |
| Network | Ethernet card |
| Database Required | No, SQL server included with product |
| Administration Client | YES |
| Local Client | YES |
| Product review – Testing Schedule – Lanboss V4.2.2 Vendor claimed functionality |
|
|---|---|
| YES or NO (..notes) | |
| Software Discovery The software will discover all installed software |
YES |
| Software Usage Metering The tool can measure software usage at either machine or user level |
YES |
| Hardware Discovery The software will discover hardware information |
YES |
| Network Device discovery The tool can discover all networked devices including routers, printers, laptops, workstations, servers etc |
Laptops and Desktop PCs, Printers, IP Phones, Servers |
| Smartphone / PDA support Can the tool automatically manage smart devices |
NO |
| Asset Management The product will hold an asset register on all hardware and software. |
YES |
| Network Management The software can complete network functions such as the remote install and uninstall of other software products |
YES |
| Licence Management The software can store software licence information. |
YES |
| Reconciliation Management The software can reconcile installed software to licences. |
YES |
| Documentation/Evaluation | Answer | Notes |
|---|---|---|
| Is there an evaluation download, user manual, document available? | NO | Evaluation of the Lanboss products appears to be via qualified lead only There is an eval license, Audit itself is free and there is a full installation guide available. |
| How is the solution shipped? | CD/DVD/ONLINE | (Evaluations are shipped out on CD or online, and trial keys are sent via email, after qualification.) |
| Did you have to read to documentation at any point? | NO | Simple and effective installation routine |
| If so, what did you use it for, and did it meet your needs satisfactorily | YES |
| Installation Experience | Answer | Notes |
|---|---|---|
| How long did it take to install Control Center / Server (combined time if separate components)? | 15 Minutes | Slick, simple and intuitive. |
| What are the SW & HW requirements (server, Microsoft components like .net)? | Windows 2K servers and upwards | No pre-requisites |
| Ease of install - intuitive, wizards etc. | EASY | |
| Were there any 3rd party components installed? | YES | Comes with its own 3rd party database |
| Are there any restrictions on hardware / OS etc? | YES | See requirements for minimum specifications. |
| What is the total install time? | 45 Minutes | Including one client. |
| Was there anything unusual / unexpected about the installation? | YES | Due to a workgroup PC being used it took longer than usual to install a client. Superb support from Lanboss helped through the process. |
| Agent deployment | Answer | Notes |
|---|---|---|
| What are the methods for agent deployment (push (direct connect), email, others etc)? | Push/Script | The system can be deployed from the Lanboss console, using scripts or discovery/push system, self fulfillment through delivery web page, DHCP tracked installation. |
| What other platforms is there an agent for (e.g. NT4, 2000, 2003, XP non NT based etc.)? | MS | Windows OS’s only currently |
| Time to deploy to 1, 10 and 50 PCs? | Approx 5 minutes per PC | This can be staggered at login time or overnight. (Using Active Directory Group Policy Deployment devices can be installed concurrently. The client agent installation takes less than a minute.) |
| Size of initial deployment per PC (and extrapolated to assess bandwidth overhead for 500 PC network) | < 1MB | Good, small deployment payload, additional client modules and functionalities are added by license on demand. |
| Any interruption to user experience? | NO | Silent installer |
| Requires reboot before full functionality is achieved? | NO | |
| Installation status report, so you can be re-assured that all PCs are covered? | YES | This can be checked via the Lanboss agent distributor component. |
| Information Collection capabilities What media is supported? |
Network / Removable media | Uses network for data gathering |
| Creating User Groups | Answer | Notes |
|---|---|---|
| How easy is it to select users from existing AD / NT Domains? | Users can be extracted from the AD | The Discovery component can interface to the AD store and pull back machine information. |
| Does solution support local users (not in Group, only registered on local machine)? | YES | System can be configured with user/device combination rules |
| Does solution support NDS or LDAP work stations? | YES | |
| Overall experience | GOOD | Easily integrates with MS domain services. |
| Does solution allow you to control policy based on user and a specific machine? | YES |
| Defining a policy/Setup/Usage | Answer | Notes |
|---|---|---|
| Time to create simple one user / AD user group policy | N/A | |
| Does the product incorporate software metering? | YES | Powerful system allows custom controls to be setup for virtually any executable piece of code that may run on a client PC |
| Does the product track the use of applications? | YES | |
| Does the product track the use of executables? | YES | |
| Does the product track the use of other files? | NO | Can track any file type. Other files can be tracked with optional modules available from Lanboss. |
| Can overuse of licenses be prevented? | YES | Through either real-time control or the monitoring process. |
| Can users be asked to quit an unused application? | YES | Excellent functionality here and it shows it’s been well thought through. |
| Policy creation experience | GOOD | |
| Can policy changes be instantly applied? | YES | |
| Is policy update automated or manual? | YES | The client agent checks for updates to the policy configuration at time of inventory upload. |
| Policy status report? Do all PCs have the latest policy? | YES | Distributor component can advise on machines not running the agent |
| Administration / Inventory | Answer | Notes |
|---|---|---|
| Are policy updates distributed automatically to PCs (check different OS and network setups)? | YES | (Schedules and file exclusions are configurable in the interface and are distributed automatically to the clients.) |
| If yes, is there an update schedule and is it configurable? | YES | Schedule can be controlled via the console. |
| What is the typical size of a policy update per PC? | 5-12k | Small payload for the client. |
| Can solution support offline user exemptions or non networked devices? If yes how? | YES | Each client has its own mini-database providing excellent offline cover and monitoring. |
| Does the product maintain itself, i.e. Auto update Agents? | YES | Console is able to force a sync of all devices with new config/client files. Agent is 100% auto healing and has tamper proof technologies built in. |
| SNMP MIB browsing support? | NO | |
| Does the tool leave client files on the devices? | YES | Small payload agent software. The local DB files can grow, especially when file scanning, suggest 20MB for a typical workstation. |
| Can the tool audit a single device on demand? | YES | Via the Distributor component. |
| Can the tool audit a defined group of devices on demand? | YES | |
| Can the tool do delta audits (changes only)? | NO | Penned for a future release. |
| Licensing & Reconciliation | Answer | Notes |
|---|---|---|
| Can the tool hold licence information? | YES | Through Application Explorer |
| Can the tool hold licence cost information? | YES | Yes, very copious in this area, a strong point Multiple licenses per application, with different anniversary dates for budgeting. |
| Can the tool hold Client Access Licence information? | YES | Yes, and can allocate management rules against the information in real-time. |
| Can the tool hold invoice information? | YES | Reconciles licenses to invoice numbers Multiple licenses per application, with different anniversary dates for budgeting. |
| Can the tool hold contract information? | YES | |
| Can the tool reconcile licenses to discovered software? | YES | Shows differentials and financial discrepancies too. |
| Security | Answer | Notes |
|---|---|---|
| If user has local admin rights, can agent be modified / deleted / de-activated? (is it easy to identify the service in task mgr) | NO | Very secure with bi-directional referencing in memory of components. |
| Does the agent appear in add remove programs dialog? | YES | But you can’t uninstall without permission at the Proxy. |
| Does the admin console have Username and Password protection? | YES | Has its own strong login process, one of the few that does. |
| Does the admin console have user profiling; i.e. Only specific people can amend policies, but everyone can view logs? | YES | Very capable in this area. |
| Can the client process be killed to bypass policy security? | NO | Excellent |
| Hardware Inventory | Answer | Notes |
|---|---|---|
| Does the tool utilise WMI information? | YES | The product has excellent, clear reporting on this information |
| Does the tool utilise SM Bios information? | YES | |
| Does the tool utilise DMI information? | YES | |
| Does the tool collect Manufacturer detail? | YES | |
| Does the tool collect the model number? | YES | |
| Can the tool identify the processor? | YES | |
| Can the tool identify the processor speed? | YES | |
| Can the tool identify the hard drive capacity? | YES | At partition level, for all partition types (including Linux), not just windows volumes. |
| Can the tool identify the remaining hard drive capacity? | YES | |
| Can the tool identify installed cards? | YES | |
| Can the tool identify devices connected via the serial port? | NO | Interrogates all known ports, but cannot detect the devices themselves. |
| Can the tool identify devices connected via the USB port? | YES | Hard disk drives for example and other USB devices. With the use of the removable device option the system can control them too. |
| Can the tool identify devices connected via the parallel port? | YES | |
| Can the tool identify devices connected via a firewire? | YES | Hard disk drives for example including other firewire device types, cameras for example. |
| Can the tool identify the LAN address? | YES | MAC Address |
| Can the tool identify the IP address? | YES |
| Software Identification | Answer | Notes |
|---|---|---|
| Does the tool have an internal software recognition library? | YES | Software recognition of executables and other files. |
| Can the library be updated by the end user? | Yes | |
| Does the publisher/reseller supply updates to the library? | YES | |
| Does the tool supply paths for discovered files? | YES | |
| Does the tool discover unrecognised executables? | NO | Penned for the next version |
| Does the tool identify software suites? | YES | |
| Does the tool scan MSI packages for recognition purposes? | NO | |
| Does the tool collect Product ID or GUID ID for installed applications? | YES | Collects Microsoft Product IDs |
| Can it determine parent/child relationships within suites? | YES | |
| Can the tool discover renamed executables? | NO | Penned for the next version |
| Can the tool discover hidden executables? | YES | |
| Can the tool discover compressed executables (e.g. Zipped)? | YES | |
| Does the tool report on unrecognised executables? | NO | |
| Can the tool show when a file was last accessed? | YES | |
| What files types are identified out of the box? | ALL | File type decoders include interrogation of MP3, JPEG, Version Info for all applicable types including Fonts etc |
| Is File Size reported for all file types? | YES | |
| Is the full path for all file types reported? | YES |
| Audit/Reporting | Answer | Notes |
|---|---|---|
| Are policy changes logged? | NO | |
| Are deployment changes logged? | YES | |
| Are temporary exceptions logged? | NO | |
| Does solution report on unauthorized connections? | NO | There is DHCP tracking so that MAC addresses can be tracked but this does not provide the functionality fully. |
| Does solution log file transfer movements? | NO | Penned for the next version |
| Is there a reporting function? | YES | |
| Does the reporting function contain sample reports? | YES | 120 or so |
| Are these reports customisable? | YES | Powerful scripting language allows virtually limitless reporting combinations. |
| Can additional reports be created? | YES | |
| Can asset information be imported? | YES | |
| Can asset information be exported? | YES | |
| Can license information be imported automatically | YES | From various sources and data structure types |
| Can consumption reports be imported automatically (Microsoft Claret report) | NO | |
| Does the tool use a third party reporting tool | NO |
| Pricing | Answer | Notes |
|---|---|---|
| What are the pricing bands for the product? | YES | |
| How much does it cost to include maintenance/support? | First year included in full license purchase, 2nd year onward is 33% for full maintenance and upgrade protection | |
| Are there educational price bands? | YES | It is also worth mentioning that the products are priced per workstation, not per user, which is particularly important to education clients |
| Is there a bundling price with other products? | NO, but periodic promotions are available |
| Support | Answer | Notes |
|---|---|---|
| Is the product supported directly or via a channel? | BOTH | |
| Are there escalation procedures? | YES | Via channel if purchased this way. |
| What does it cost? | Email - always free, telephonic and remote KVM per incident | |
| Is it included with the software maintenance fees? | First 90 days included, thereafter per incident as above |


