
I wish BeyondTrust packages the whole solution in one and includes the MySQL database so that when you deploy it, it deploys everything for you. Standardized documentation would be the one thing I would suggest." "When we deploy BeyondTrust, we have to deploy our own database on a SQL server. For example, when BeyondTrust updated one of their admin guides, they left out the information on the discovery account requirements, and then over a period of time, we ended up having to search multiple different documents to put together a string of information for a specific topic, which was problematic. They should keep the documentation consistent. For example, if something is not correct and I open the error notification, the dialogue box simply says, "This is an error." It would be great if they could provide some valuable comments about how to fix the errors." "If there was one thing, it would be having the documentation standardized. "The only feature they could improve is the banners because they aren't informative. After gaining it, how they're using it, where they're using it, etc." We need to ensure that accounts are securely stored and there is the right type of accountability around who is gaining the access. BeyondTrust can help you throw a rope around it very rapidly." "One of the most valuable features is that this is a product designed with enterprises in mind." "It provides integrated password and session management in one solution, which is important for us because, from an auditing standpoint, we are accountable for the type of access being used. As organizations grow or acquire other companies and merge, they lose track of what they have. It makes it very easy to determine what is what in your environment. If a server has Microsoft SQL installed, it gets put into a group based on a Smart Rule. For example, if you want to group all of your database servers together, you can do that by using discovery and Smart Rules. When they perform a discovery, you know everything there is about a server, including what software is installed. The discovery engine in BeyondTrust is off the charts. With other vendors, we have to create our own scripts, whereas, with BeyondTrust, we can just use the in-built Smart Rules." "Its number one feature is discovery. It is a nice feature in BeyondTrust that some of the other PAM vendors don't have. For example, you can do onboarding based on different AD attributes. With Smart Rules, you can do automatic onboarding of accounts. It is a unique feature that BeyondTrust has as compared to other vendors such as CyberArk. The system is recording when nobody's there, so we have a record of what's happening." "Session recording, password rotation, and password vaulting are the most valuable features." "Smart Rules is a nice feature in BeyondTrust. You can pull up a report, and the UI is fantastic.
