Most Helpful Review
Find out what your peers are saying about BeyondTrust Endpoint Privilege Management vs. Symantec Privileged Access Manager and other solutions. Updated: March 2020.
406,312 professionals have used our research since 2012.
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
The most valuable feature is the asset discovery, which makes it very easy to locate and identify assets and pull them into the manager.
The asset discovery feature is the solution's most valuable aspect. It's very easy to pull assets into the database of the solution manager.
The implementation is quite easy because the documents are always online.
The privileged access management into sensitive systems is very valuable. That includes control from the endpoint all the way through to the managing of passwords and credentials that are used by the person to access the sensitive information. It's very useful, because nobody ever really maintains passwords for those endpoint systems. It's maintained in the Dropbox password file.
I would say session management on the go is the most valuable feature. When the session is going on, you can stop the session without terminating it for justification. You can cancel it. The recording takes very little space. Those are some things which the customers are worried about when they talk about session recording.
I'm a BeyondTrust partner and I have multiple deployments, four or five banks right now. The features that give us quite an edge compared to what our competitors are offering - like IBM or Thycotic - are the Session Management, that is quite a big one; also the recording of keystrokes. In addition, there is the password vaulting and state-of-the-art Password Management, which I haven't seen in other products.
It scales easily and the product is stable.
Reduces major vulnerabilities by removing local administrator privileges.
It reduces the viral attacks on my website. It also allows certain users access to see what happens daily.
We have received good support from the tech support team.
CA PAM is working well for us.
The DB clustering is a really good benefit of using CA PAM.
We can enforce complicated password policies and very important frequent password changes.
The product is very scalable in terms of concurrent sessions that it can handle at a time, number of device it can support, accounts that it can manage, or number of nodes that you can deploy in a cluster.
The help system should be improved to provide a quick help guide with each tab within the solution, which explains what each particular function does.
The deployment process should be clarified or made simpler. It would be helpful if the solution had in-app tutorials for users to look at as they progress through the system. Sometimes we get lost and need to go back to check what exactly the function was. There should be small hints around major key functions. It would go a long way in speeding up the deployment process.
The program updates are very rare and the frequency is too far apart to take care of bug fixes and adding the latest features.
The other area to improve is that they rely on MS SQL servers only. You cannot have any other database behind them. They have to be on MS SQL. If they can do something about these issues, this would be a better alternative for some customers.
It should support XWindows Remote Desktop Access protocol for Linux/Unix.
It only has limited support for Mac.
The setup is complex.
I would like this solution to be simpler. It should have a one-click access that works together with AWS.
An improvement for this solution is that it should not be constantly based on user name and password. There should be a condition to edit and update your username.
We experience stability issues after every patch upgrade. This is a place where CA needs to improve drastically.
The service account management functionality needs to be extended to application pools, SQL database, PowerShell scripts, service account discovery, etc.
Pricing and Cost Advice
This solution is expensive compared to its competitors.
What BeyondTrust was providing was user-based licensing which was a great benefit from the client point of view. Recently, I don't know why, the licensing model has been changed, and that is the reason that they have lost a bit of their edge when it comes to the PAM, against our competition. The asset-based licensing, from the user's point of view, is not beneficial. The licensing should be based on the users. The greater the number of users, the greater will be the load and the greater the scalability problems. I presume that is why the licensing model has changed.
PowerBroker for a Mac client is three times the price of the Windows version.
It is reasonably priced.
It is more expensive than other solutions on the market.
I would prefer better licensing options for the 20-100 users we have at a given time.
Pricing is fair compared to other top vendors.
The licensing is simple and scalable.
out of 30 in Privileged Access Management
Average Words per Review
out of 30 in Privileged Access Management
Average Words per Review
Compared 55% of the time.
Compared 11% of the time.
Compared 5% of the time.
Compared 36% of the time.
Compared 25% of the time.
Compared 7% of the time.
Also Known As
|BeyondTrust PowerBroker, PowerBroker||CA PAM, Xceedium Xsuite, CA Privileged Access Manager|
The BeyondTrust PowerBroker Privileged Access Management Platform is an integrated solution that provides visibility and control over all privileged accounts and users. By uniting capabilities that many alternative providers offer as disjointed tools, the platform simplifies deployments, reduces costs, improves system security, and reduces privilege risks.
CA Privileged Access Manager is a simple-to-deploy, automated, proven solution for privileged access management in physical, virtual and cloud environments. It enhances security by protecting sensitive administrative credentials such as root and administrator passwords, controlling privileged user access, proactively enforcing policies and monitoring and recording privileged user activity across all IT resources. It includes CA PAM Server Control (previously CA Privileged Identity Manager) for fine-grained protection of critical servers
Learn more about BeyondTrust Endpoint Privilege Management
Learn more about Symantec Privileged Access Manager
|Aera Energy LLC, Care New England, James Madison University||NEOVERA, Telesis, eSoft|
Software R&D Company30%
Comms Service Provider28%
Financial Services Firm7%
Financial Services Firm24%
Comms Service Provider12%
Software R&D Company26%
Financial Services Firm19%
Comms Service Provider16%