Welcome to FASTiiS

If you would like to setup a member account
please Click Here

you can read more about the benefits of membership here

If you'd like to sign up to our news bulletins click here

ROI Login

Login here to download the ROI Tool.
To register for ROI Tool click here

Member Login

Please login to your account here to access all of the members only content.

Law Enforcement Login

Please login to your Law Enforcement portal account here.

Register

Address: Carlyle House
Ramsdell Road
Monk Sherborne
Tadley
Hampshire
RG26 5HS
Contact No: +44 (0) 845 2651265
Contact Email: sales@lanboss.com
Website: www.lanboss.com

To view more information regarding Lanboss Workstation Auditor/Lanboss Workstation Manager please see their Membership Details page.

Overview

Summary

Lanboss has created a feature rich SAM product that allows the management of just about every auditing process a business requires. In addition to the normal auditing and management functionality it includes many features that enable organisations to transition from one infrastructure to another. A unique UNC mapping system allows real-time remapping of UNC paths that facilitate a smooth transition between servers, applications and data. For consultants and executives, the Console and database files can be copied to a local machines for off-line use, again very simple to achieve and doesn’t require installation or other complications.

On the application monitoring front it provides some extra bells and whistles. Whilst providing real-time application control, using known license thresholds, it adds detail by enabling the operator to provide bespoke messages to staff using applications that are being monitored thus hand holding them through any important message(s) and even asking for feedback.

The company has developed the system in a modular fashion. For the review we have only detailed the SAM core (Workstation Manager). Other options including removable device management and Datacop; a centralised approach to optical disk access and control are available as modular plugins to the core product.

The Workstation Auditor version is available for free. This flexible approach allows organisations to both trial this component and build a picture of the software usage and license count prior to embarking on a full scale implementation of the Lanboss software.

Finally, the company pitches the product from 250 through 10,000 seats and above and can provide consulting and audit management services either directly or via its channel. Any organisation that requires SAM now with the potential to easily add device management and other options later, should consider the Lanboss solution.

Installation Narration

The Lanboss software is delivered via a single 88MB installer file. A very simple installer is used and asks no difficult questions throughout the process. It takes less than a minute to install the software. On starting the application for the first time the system creates the database tables it requires, this is a one-off process and is completed within a few minutes. The product gets top marks for the ease of installation process.

Running the Program

The system is comprised of several components including a proxy server, file server, discovery console and the main Lanboss console used for management and reporting. The system is inherently flexible and also installs a small version of the main database on each client PC. This is used for a unique delta process that enables the clients to gather data quickly without constant communication with the central server processes. Most of the components, other than the Lanboss console, run on a central server and once operational can be left to run. The console itself uses a proprietary interface, however, it is easy to use, although because of its thoroughness, will take some time to get to the bottom of all of the features available to the operator.

Setting up the System

All of the components are installed from a single setup installer. It is well devised and easy to install. Quite a few separate components need to run in the back end of the server though Lanboss provide a useful one click service manager application to fire them all up in the correct order, this can be automated from the start-up process of course. Installing a client is easy and the payload is small, amongst the smallest of any of the products reviewed, and this sets it up well for a low impact on the local area network and more importantly the wide area network if one is use across the business. Once the agents are installed they’ll take up to 30 minutes (depending on the drives and file volumes on the PC) to report back to the server. In the test the server had received hardware information with 2 minutes.

Ongoing Administration

Rolling out client agents is a snap. A powerful scanning feature of the Agent Distributor is the ability to segment scanning of devices, either individually or by subnet, range, computer name. It also provides a useful ability to sync agents at the click of a button. As with all of the products reviewed, it will take time to get used to the Lanboss way of doing things. The UI is well set out and after some hands on experience it is easy to use. The solution offers some really interesting abilities; being able to see what a user on a particular machine is running is a particular feature that sets it apart from others.

OS/Device/Software Support

At present Microsoft operating systems are supported but there are plans to expand this to others including Linux and OSX in the future. Lanboss offers a very granular level of detail when reporting peripheral devices and ports attached to a PC. The product also does well in the detail stakes providing a level of detail on applications in use and which user is logged in beyond many others in the market.

Auditing and Reporting

Lanboss have spent some time with the reporting functionality. A plethora of canned reports are available out of the box but not content with the stock reports the company has thrown in a full scripting language that enables the operator to construct almost limitless combinations of management and operational reports.

Support and Pricing

Purchasing product maintenance provides 90 days of direct telephonic and remote KVM support to users, limited to 3 incidents during that time. Thereafter, Lanboss provides email and client forum support.
For specialised requirements, additional incidents can be purchased. First year maintenance is included in full license purchase, the 2nd year onward is 33% for maintenance. The Lanboss definition of maintenance includes product support, with minor and major upgrade protection, which means that all maintained users automatically have rights to the latest version.

Workstation Auditor is free for any seat count, but this does not include any direct support or maintenance.
When purchasing maintenance for Auditor, a client becomes eligible to upgrade their license to Workstation Manager, which works out to be an extremely cost effective way for users to a) get the picture of what's going on out there and b) to be able to take action and do remediation (for a modest upgrade fee). At 1,000 seats, end user pricing is a little under £12.50 per seat for the Workstation Manager following the upgrade route.

Key Strengths – Technical

  • Slick interface and easy to learn and then use.
  • Uses own licensed database.

Key Weaknesses – Technical

  • Only manages Windows OS based machines at present.
  • Although the interface is nicely constructed it will require more time to get used to as opposed to an MMC interface.

Key Strengths – Commercial

  • Very cost effective when it comes to 3rd party requirements due to the use of its own SQL database which can support up to 10,000 users on a single system where the standard MS SQL approach stops at about 1500 thus saving on hardware costs.
  • One stop shop that can be enhanced with additional modules to provide a true single point solution.

Key Weaknesses – Commercial

  • At present only manages Windows OS based machines.

Go back to Product Reviews

Technical Report

How the tests are conducted:

The tool evaluations have been conducted using Windows 2000, Windows 2003 or Windows XP for the management console element. The vendor preferred OS for the database and backend server is also selected for the review. Functional testing has been conducted across the Microsoft Windows family of operating systems and where Linux is supported OpenSUSE has been used for testing. The testing takes place on a dedicated hardware environment and where VMWARE or Microsoft Virtual Terminal functionality is supported this is tested if time permits.

Installation Requirements
Operating System Lanboss Workstation Manager
Windows 2000/2003/2008
Client: 2000, XP, 32 and 64 bit
Microsoft .NET Framework v 2.0 (not necessary)
Processor INTEL / AMD
Memory 1024MB upwards
Storage 1GB Minimum
Display 1024x768
Network Ethernet card
Database Required No, SQL server included with product
Administration Client YES
Local Client YES

Product review – Testing Schedule – Lanboss V4.2.2
Vendor claimed functionality
YES or NO (..notes)
Software Discovery
The software will discover all installed software
YES
Software Usage Metering
The tool can measure software usage at either machine or user level
YES
Hardware Discovery
The software will discover hardware information
YES
Network Device discovery
The tool can discover all networked devices including routers, printers, laptops, workstations, servers etc
Laptops and Desktop PCs, Printers, IP Phones, Servers
Smartphone / PDA support
Can the tool automatically manage smart devices
NO
Asset Management
The product will hold an asset register on all hardware and software.
YES
Network Management
The software can complete network functions such as the remote install and uninstall of other software products
YES
Licence Management
The software can store software licence information.
YES
Reconciliation Management
The software can reconcile installed software to licences.
YES

Documentation/Evaluation Answer Notes
Is there an evaluation download, user manual, document available? NO Evaluation of the Lanboss products appears to be via qualified lead only There is an eval license, Audit itself is free and there is a full installation guide available.
How is the solution shipped? CD/DVD/ONLINE (Evaluations are shipped out on CD or online, and trial keys are sent via email, after qualification.)
Did you have to read to documentation at any point? NO Simple and effective installation routine
If so, what did you use it for, and did it meet your needs satisfactorily YES

Installation Experience Answer Notes
How long did it take to install Control Center / Server (combined time if separate components)? 15 Minutes Slick, simple and intuitive.
What are the SW & HW requirements (server, Microsoft components like .net)? Windows 2K servers and upwards No pre-requisites
Ease of install - intuitive, wizards etc. EASY
Were there any 3rd party components installed? YES Comes with its own 3rd party database
Are there any restrictions on hardware / OS etc? YES See requirements for minimum specifications.
What is the total install time? 45 Minutes Including one client.
Was there anything unusual / unexpected about the installation? YES Due to a workgroup PC being used it took longer than usual to install a client. Superb support from Lanboss helped through the process.

Agent deployment Answer Notes
What are the methods for agent deployment (push (direct connect), email, others etc)? Push/Script The system can be deployed from the Lanboss console, using scripts or discovery/push system, self fulfillment through delivery web page, DHCP tracked installation.
What other platforms is there an agent for (e.g. NT4, 2000, 2003, XP non NT based etc.)? MS Windows OS’s only currently
Time to deploy to 1, 10 and 50 PCs? Approx 5 minutes per PC This can be staggered at login time or overnight. (Using Active Directory Group Policy Deployment devices can be installed concurrently. The client agent installation takes less than a minute.)
Size of initial deployment per PC (and extrapolated to assess bandwidth overhead for 500 PC network) < 1MB Good, small deployment payload, additional client modules and functionalities are added by license on demand.
Any interruption to user experience? NO Silent installer
Requires reboot before full functionality is achieved? NO
Installation status report, so you can be re-assured that all PCs are covered? YES This can be checked via the Lanboss agent distributor component.
Information Collection capabilities
What media is supported?
Network / Removable media Uses network for data gathering

Creating User Groups Answer Notes
How easy is it to select users from existing AD / NT Domains? Users can be extracted from the AD The Discovery component can interface to the AD store and pull back machine information.
Does solution support local users (not in Group, only registered on local machine)? YES System can be configured with user/device combination rules
Does solution support NDS or LDAP work stations? YES
Overall experience GOOD Easily integrates with MS domain services.
Does solution allow you to control policy based on user and a specific machine? YES

Defining a policy/Setup/Usage Answer Notes
Time to create simple one user / AD user group policy N/A
Does the product incorporate software metering? YES Powerful system allows custom controls to be setup for virtually any executable piece of code that may run on a client PC
Does the product track the use of applications? YES
Does the product track the use of executables? YES
Does the product track the use of other files? NO Can track any file type. Other files can be tracked with optional modules available from Lanboss.
Can overuse of licenses be prevented? YES Through either real-time control or the monitoring process.
Can users be asked to quit an unused application? YES Excellent functionality here and it shows it’s been well thought through.
Policy creation experience GOOD
Can policy changes be instantly applied? YES
Is policy update automated or manual? YES The client agent checks for updates to the policy configuration at time of inventory upload.
Policy status report? Do all PCs have the latest policy? YES Distributor component can advise on machines not running the agent

Administration / Inventory Answer Notes
Are policy updates distributed automatically to PCs (check different OS and network setups)? YES (Schedules and file exclusions are configurable in the interface and are distributed automatically to the clients.)
If yes, is there an update schedule and is it configurable? YES Schedule can be controlled via the console.
What is the typical size of a policy update per PC? 5-12k Small payload for the client.
Can solution support offline user exemptions or non networked devices? If yes how? YES Each client has its own mini-database providing excellent offline cover and monitoring.
Does the product maintain itself, i.e. Auto update Agents? YES Console is able to force a sync of all devices with new config/client files. Agent is 100% auto healing and has tamper proof technologies built in.
SNMP MIB browsing support? NO
Does the tool leave client files on the devices? YES Small payload agent software. The local DB files can grow, especially when file scanning, suggest 20MB for a typical workstation.
Can the tool audit a single device on demand? YES Via the Distributor component.
Can the tool audit a defined group of devices on demand? YES
Can the tool do delta audits (changes only)? NO Penned for a future release.

Licensing & Reconciliation Answer Notes
Can the tool hold licence information? YES Through Application Explorer
Can the tool hold licence cost information? YES Yes, very copious in this area, a strong point Multiple licenses per application, with different anniversary dates for budgeting.
Can the tool hold Client Access Licence information? YES Yes, and can allocate management rules against the information in real-time.
Can the tool hold invoice information? YES Reconciles licenses to invoice numbers Multiple licenses per application, with different anniversary dates for budgeting.
Can the tool hold contract information? YES
Can the tool reconcile licenses to discovered software? YES Shows differentials and financial discrepancies too.

Security Answer Notes
If user has local admin rights, can agent be modified / deleted / de-activated? (is it easy to identify the service in task mgr) NO Very secure with bi-directional referencing in memory of components.
Does the agent appear in add remove programs dialog? YES But you can’t uninstall without permission at the Proxy.
Does the admin console have Username and Password protection? YES Has its own strong login process, one of the few that does.
Does the admin console have user profiling; i.e. Only specific people can amend policies, but everyone can view logs? YES Very capable in this area.
Can the client process be killed to bypass policy security? NO Excellent

Hardware Inventory Answer Notes
Does the tool utilise WMI information? YES The product has excellent, clear reporting on this information
Does the tool utilise SM Bios information? YES
Does the tool utilise DMI information? YES
Does the tool collect Manufacturer detail? YES
Does the tool collect the model number? YES
Can the tool identify the processor? YES
Can the tool identify the processor speed? YES
Can the tool identify the hard drive capacity? YES At partition level, for all partition types (including Linux), not just windows volumes.
Can the tool identify the remaining hard drive capacity? YES
Can the tool identify installed cards? YES
Can the tool identify devices connected via the serial port? NO Interrogates all known ports, but cannot detect the devices themselves.
Can the tool identify devices connected via the USB port? YES Hard disk drives for example and other USB devices. With the use of the removable device option the system can control them too.
Can the tool identify devices connected via the parallel port? YES
Can the tool identify devices connected via a firewire? YES Hard disk drives for example including other firewire device types, cameras for example.
Can the tool identify the LAN address? YES MAC Address
Can the tool identify the IP address? YES

Software Identification Answer Notes
Does the tool have an internal software recognition library? YES Software recognition of executables and other files.
Can the library be updated by the end user? Yes
Does the publisher/reseller supply updates to the library? YES
Does the tool supply paths for discovered files? YES
Does the tool discover unrecognised executables? NO Penned for the next version
Does the tool identify software suites? YES
Does the tool scan MSI packages for recognition purposes? NO
Does the tool collect Product ID or GUID ID for installed applications? YES Collects Microsoft Product IDs
Can it determine parent/child relationships within suites? YES
Can the tool discover renamed executables? NO Penned for the next version
Can the tool discover hidden executables? YES
Can the tool discover compressed executables (e.g. Zipped)? YES
Does the tool report on unrecognised executables? NO
Can the tool show when a file was last accessed? YES
What files types are identified out of the box? ALL File type decoders include interrogation of MP3, JPEG, Version Info for all applicable types including Fonts etc
Is File Size reported for all file types? YES
Is the full path for all file types reported? YES

Audit/Reporting Answer Notes
Are policy changes logged? NO
Are deployment changes logged? YES
Are temporary exceptions logged? NO
Does solution report on unauthorized connections? NO There is DHCP tracking so that MAC addresses can be tracked but this does not provide the functionality fully.
Does solution log file transfer movements? NO Penned for the next version
Is there a reporting function? YES
Does the reporting function contain sample reports? YES 120 or so
Are these reports customisable? YES Powerful scripting language allows virtually limitless reporting combinations.
Can additional reports be created? YES
Can asset information be imported? YES
Can asset information be exported? YES
Can license information be imported automatically YES From various sources and data structure types
Can consumption reports be imported automatically (Microsoft Claret report) NO
Does the tool use a third party reporting tool NO

Pricing Answer Notes
What are the pricing bands for the product? YES
How much does it cost to include maintenance/support? First year included in full license purchase, 2nd year onward is 33% for full maintenance and upgrade protection
Are there educational price bands? YES It is also worth mentioning that the products are priced per workstation, not per user, which is particularly important to education clients
Is there a bundling price with other products? NO, but periodic promotions are available

Support Answer Notes
Is the product supported directly or via a channel? BOTH
Are there escalation procedures? YES Via channel if purchased this way.
What does it cost? Email - always free, telephonic and remote KVM per incident
Is it included with the software maintenance fees? First 90 days included, thereafter per incident as above

Go back to Product Reviews