Endpoint Management Challenges

Much has changed in endpoint management over the last few years. What do you think are now the greatest challenges to enterprise UEM, particularly when using automated solutions like Microsoft Intune, Omnissa Workspace One, Tanium, and Ivanti Neurons? What are the biggest issues?

Fragmentation is probably the biggest hurdle. And this can be different OS versions (Windows 10/11), different OS vendors (Apple, MS), different models (5+ models of laptops, and now talks about new vendor), different deployment models (some Intune joined, some imaged). The list goes on. Always have to keep that in mind when doing a simple deployment or planning some big infra changes.

Smaller pet peeves currently is connectivity. Some people live under a rock in the middle of a jungle with 1G internet (somehow providing value to the company), so many updates fail. Recently we have another problem related to VPN. Before recently VPN was mandatory for everything. But now you can still reach Outlook/Teams/browse without it. So, people just do not login to it. But it is still set to auto start. So, it shows login prompt every minute or so, tries to setup a tunnel and resets the network and any update PC is trying to download at that time. Seeing lots of errors coming from home IPs. Not that many. Maybe 5% or so of all targets for a push. But still annoying when pushing patch for a vulnerability and not able to get higher coverage. Should improve when we finally get rid of Ivanti and go ZTNA route.

Oh, very interesting! I presume you’re using Ivanti Connect Secure (the legacy Pulse Secure VPN). Are you planning to use Ivanti Zero Trust Access for ZTNA or looking at something else?

Definitely not Ivanti. Management wants to get rid of it yesterday after this year’s vulnerability fiasco. We had Netskope already for internet traffic, so now they are turning it into ZTNA. But it’s in security ownership.