Ivanti IT Asset Management

Basic Information

• Model: Ivanti IT Asset Management (ITAM) is a suite of solutions, often integrated with Ivanti Neurons for ITAM.
• Version: Ivanti Neurons for ITAM is the current iteration. Specific version numbers vary by component and release cycle. For instance, Ivanti Neurons for ITSM has seen versions like 2023.4.
• Release Date: Ivanti, as a company, was founded in 1985. The IT Asset Management Suite has evolved over time, with Ivanti Neurons for ITAM being a more recent platform.
• Minimum Requirements:
  • Processor: Minimum 2 processor cores, 2GHz or faster.
  • Memory (RAM): Minimum 2GB.
  • Disk Space: 500 MB for the application. For patch programs, free space equal to five times the size of patches being deployed.
  • Operating System: Windows 10 (v1607 or later recommended, WMF 5.1 required for earlier versions), Windows 11 family. Server components support Microsoft Windows Server 2012 R2, 2012, 2008 R2 x64 SP1/SP2, and Microsoft IIS Release 7.5, 8.0, 8.5 (recommended), 10 (Windows 2016).
  • Database: Microsoft SQL Server 2014 or later for new installations (SQL Server 2012 supported for existing installations). SQL Server Express Edition is an option during prerequisite installation if no existing SQL Server is present.
• Supported Operating Systems: Windows 10, Windows 11, various Windows Server versions for server components. Ivanti solutions generally support a wide range of corporate and personal devices, including Windows, Mac, Android, and iOS for endpoint management.
• Latest Stable Version: Specific version numbers are continuously updated. Ivanti Neurons for ITAM is the current platform.
• End of Support Date: Varies by specific product and version. Ivanti provides security updates and patches for supported versions. For example, Ivanti Endpoint Manager versions before 2024 SU3 and 2022 SU8 Security Update 1 have known vulnerabilities, indicating earlier versions may be out of active support for critical patches.
• End of Life Date: Not explicitly stated as a single date for the entire ITAM product line; typically follows a lifecycle policy for individual product versions.
• License Type: Pricing is often based on the number of nodes or assets supported. Licensing models can include subscription-based services.
• Deployment Model: Primarily on-premise installation, though Ivanti Neurons for ITAM also offers cloud-hosted options.

Technical Requirements

• RAM: Minimum 2GB for console machines. Application servers recommend 8GB minimum, with more for heavy transaction rates. Database servers recommend 16GB minimum, with more for high transaction rates and complex workflows.
• Processor: Minimum 2 processor cores, 2GHz or faster for console machines. Application servers recommend 2 cores minimum, 4 cores recommended for heavy transaction rates. Database servers recommend 4 cores minimum, with more for heavy transaction rates.
• Storage: 500 MB for application files. For patch programs, free space equal to five times the size of patches being deployed. Database requires 100 GB minimum free space, with separate volumes recommended for database and transaction logs. Transaction logs require 60 GB minimum free space.
• Display: Minimum 1024 x 768 screen resolution.
• Ports: Requires specific web URLs to be added to firewall, proxy, and web filter exception lists for content downloads.
• Operating System: Windows 10 (v1607+), Windows 11 for console. Windows Server 2012 R2/2012/2008 R2 for server components. Microsoft .NET Framework 4.6 or 4.6.2 is required.

Analysis of Technical Requirements: Ivanti IT Asset Management, particularly its on-premise components, demands substantial server and database resources, indicating its suitability for enterprise-level deployments. The requirements for processor, RAM, and storage are scalable, suggesting that organizations with larger asset inventories and higher transaction volumes need to allocate significantly more resources. The reliance on Microsoft SQL Server and Windows Server operating systems highlights its integration within a Windows-centric IT environment. The need for specific firewall exceptions points to network connectivity requirements for updates and content delivery.

Support & Compatibility

• Latest Version: Ivanti Neurons for ITAM.
• OS Support: Wide support for Windows, Mac, Android, and iOS devices for endpoint management. Server components support various Windows Server versions.
• End of Support Date: Varies by product and version. Ivanti regularly releases security updates and patches for supported versions.
• Localization: Ivanti Neurons for ITAM supports multiple languages, including English, German, French, Italian, Japanese, Dutch, Polish, Portuguese, Russian, Spanish, and Chinese (Simplified). Ivanti Core supports languages like Chinese (Simplified/Traditional), English, French (France), German (Germany), Japanese, Korean, Portuguese (Brazilian), Russian, and Spanish (Latin American) for client apps on Windows devices. Ivanti Neurons for ITSM provides full translations for some languages (e.g., Dutch, English variants, French) and supports others where translations can be added.
• Available Drivers: Not directly applicable for ITAM software, but Ivanti solutions integrate with various IT systems and tools, implying compatibility with standard drivers for discovered hardware.

Analysis of Overall Support & Compatibility Status: Ivanti IT Asset Management offers broad compatibility across various operating systems and devices, reflecting its role in managing diverse IT environments. The extensive language support, particularly for Ivanti Neurons for ITAM and ITSM, caters to a global user base. Ivanti provides multiple technical support options, including phone, online self-service, web portal, and technical account managers. Integrations with other Ivanti products and third-party solutions are a key aspect of its compatibility.

Security Status

• Security Features: Ivanti solutions focus on managing and securing IT assets and endpoints. Features include risk-based patching, automation tools, single-pane endpoint dashboards, and fine-tuned role-based access. It helps organizations manage information security risks and protect against threats like data breaches and malicious software.
• Known Vulnerabilities: Ivanti products have experienced high-severity vulnerabilities. Recent examples include:
  • CVE-2025-6995 & CVE-2025-6996: Improper encryption in Ivanti Endpoint Manager (EPM) agent, allowing local authenticated attackers to decrypt user passwords (CVSS 8.4 High).
  • CVE-2025-7037: SQL Injection in Ivanti EPM, allowing remote authenticated attackers with admin privileges to read arbitrary database data (CVSS 7.2 High).
  • CVE-2024-8191: SQL injection in Ivanti EPM management console, allowing remote unauthenticated attackers to achieve remote code execution.
  • CVE-2024-32840: Unspecified SQL injection in Ivanti EPM, allowing remote authenticated attackers with admin privileges to achieve remote code execution.
  • CVE-2024-7569: Information disclosure in Ivanti ITSM on-prem and Neurons for ITSM (versions 2023.4 and earlier), allowing unauthenticated attackers to obtain OIDC client secrets via debug information.
  • CVE-2024-7570: Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM (versions 2023.4 and earlier), allowing remote attackers in a MITM position to craft tokens for unauthorized access.
• Blacklist Status: No general blacklist status, but specific vulnerabilities have led to security advisories and urgent patch recommendations.
• Certifications: Ivanti holds certifications such as ISO/IEC 27001 (Information Security Management System) and SOC2 (Service Organization Control 2) compliance. Ivanti also offers certifications for its products, such as Ivanti Connect Secure Administrator Certification and Ivanti Security Controls Administrator Certification.
• Encryption Support: Supports encryption, though improper implementation has led to vulnerabilities in some products.
• Authentication Methods: Integrates with various authentication methods, including OIDC (OpenID Connect), though vulnerabilities related to OIDC client secret disclosure have been identified.
• General Recommendations: Organizations are strongly advised to apply security updates and patches immediately for affected versions. Regular monitoring of Ivanti security advisories is crucial.

Analysis on the Overall Security Rating: Ivanti IT Asset Management and its related products incorporate robust security features, including risk-based patching and access controls, and the company maintains industry-standard certifications like ISO/IEC 27001 and SOC2. However, the platform has a history of high-severity vulnerabilities, particularly in its Endpoint Manager and ITSM components, which could lead to credential theft, data exfiltration, or remote code execution. While Ivanti actively addresses these issues with patches, the recurring nature of such vulnerabilities necessitates continuous vigilance and prompt application of updates by users. The overall security status is strong when kept up-to-date, but the presence of critical vulnerabilities highlights the importance of diligent patch management and adherence to security best practices.

Performance & Benchmarks

• Benchmark Scores: Specific, publicly available benchmark scores for Ivanti IT Asset Management are not readily available. Performance is generally discussed in terms of scalability and efficiency.
• Real-World Performance Metrics:
  • Scalability: Designed for large enterprises and complex IT environments, managing over 40,000 customers. It handles a wide range of corporate and personal devices.
  • Efficiency: Aims to improve efficiency, save time, and reduce resources dedicated to asset management. It offers real-time discovery, automated reconciliation, and normalization of asset data.
  • Response Times: User reviews suggest that some aspects, like scheduling reports, can be less straightforward than competitors.
• Power Consumption: Not directly applicable to software; depends on the underlying infrastructure where the software is deployed.
• Carbon Footprint: Not directly applicable to software; depends on the underlying infrastructure.
• Comparison with Similar Assets:
  • Strengths vs. Competitors: Reviewers rate Ivanti higher than some competitors (e.g., Broadcom, Cireson) in service and support, ease of integration and deployment, and evaluation/contracting. It offers comprehensive, highly customizable solutions for various ITIL processes and advanced asset management features.
  • Weaknesses vs. Competitors: Some users find Ivanti complex to use, especially for small to midsize businesses (SMBs) and novice users. It has been criticized for a potentially outdated user experience, lengthy rollout cycles, high total cost of ownership, rigid automation setup, and limited analytics compared to newer platforms. Competitors like ServiceNow, Flexera, Broadcom, Microsoft, ManageEngine, and OpenText are often considered.

Analysis of the Overall Performance Status: Ivanti IT Asset Management is a powerful, feature-rich solution designed for enterprise-scale operations, demonstrating strong scalability to manage extensive IT environments and a large customer base. Its real-world performance emphasizes efficiency through automated discovery and data reconciliation. However, some user feedback indicates potential complexity and a learning curve, which might impact perceived performance for smaller organizations or those seeking simpler, cloud-native solutions. While it excels in comprehensive features and support compared to some rivals, it faces competition from platforms that offer more modern UX, faster implementation, and advanced analytics.

User Reviews & Feedback

User reviews for Ivanti IT Asset Management, particularly Ivanti Neurons for ITAM, highlight several strengths and weaknesses.

• Strengths:
  • Comprehensive Asset Tracking: Users appreciate its ability to track, configure, optimize, and strategically manage assets through their full lifecycle, providing visibility into hardware, software, and non-IT assets.
  • Accuracy and Reliability: The system is noted for accurate tracking and dependable performance in software asset management.
  • Customization and Flexibility: The configurable design allows users to define workflows or implement out-of-the-box processes, offering flexibility.
  • Integration Capabilities: It integrates well with service management CMDBs and other Ivanti solutions, enhancing overall IT operations.
  • Cost Optimization: Helps in optimizing costs, curbing overspend, and improving efficiency by providing an accurate picture of the IT environment.
  • Support for ITIL Best Practices: Complies with ITIL best practices, offering robust features for configuration management, incident management, and remote troubleshooting.
• Weaknesses:
  • Complexity and Learning Curve: Many users, especially SMBs and novice users, find the system complex and report a steep learning curve.
  • Implementation and Configuration: The setup process can be hardware-heavy and lengthy. Customization often requires technical expertise, limiting flexibility for non-technical teams.
  • User Interface (UX): Some feedback suggests an outdated or clunky interface compared to newer alternatives, leading to lower adoption. The self-service portal can be limited and not user-friendly.
  • API Limitations: APIs for integrations can be lacking, sometimes requiring daily feeds instead of real-time integrations.
  • Cost: Described as "very expensive," with significant licensing fees, setup costs, and maintenance.
  • Support Quality: While many support options exist, some users report inexperienced support and slow development in addressing issues.
• Recommended Use Cases:
  • Large enterprises and organizations with complex IT environments requiring comprehensive asset lifecycle management, software licensing, and compliance.
  • Companies needing robust reporting and custom workflows for IT asset management.
  • Organizations that prioritize on-site software installation and deep integration within a Windows-centric infrastructure.
  • Teams focused on gaining visibility of hardware, software, and non-IT assets to optimize costs and improve efficiencies.

Summary

Ivanti IT Asset Management (ITAM), particularly through its Ivanti Neurons for ITAM platform, presents a comprehensive and powerful solution for managing an organization's IT assets. It excels in providing total visibility of hardware, software, and non-IT assets, enabling strategic tracking, configuration, and optimization throughout their lifecycle. The system's strengths lie in its robust feature set, including real-time discovery, automated reconciliation, and extensive reporting capabilities, which contribute to improved efficiency and cost savings by preventing overspend and ensuring compliance. Its adherence to ITIL best practices and broad compatibility across various operating systems and devices, coupled with extensive language support, makes it suitable for large, global enterprises with complex IT environments.

However, the platform is not without its drawbacks. A recurring theme in user feedback is its complexity and a steep learning curve, making it potentially challenging for small to midsize businesses or less experienced users. The implementation process can be lengthy and resource-intensive, and some users find the user interface less intuitive or modern compared to newer competitors. Concerns about the cost of ownership, including licensing and customization, are also noted. While Ivanti maintains strong security certifications, the presence of high-severity vulnerabilities in some of its products necessitates constant vigilance and prompt patching by users to maintain a secure posture.

In essence, Ivanti IT Asset Management is a feature-rich, scalable solution best suited for large organizations that require deep customization, comprehensive asset lifecycle management, and are prepared to invest in the necessary resources for implementation and ongoing management. Its strengths in asset visibility, cost optimization, and compliance are significant. However, potential users should be aware of the learning curve, implementation complexity, and the critical need for diligent security patch management. For organizations prioritizing ease of use, rapid deployment, or a lower total cost of ownership, exploring alternatives might be beneficial.

Information provided is based on publicly available data and may vary depending on specific device configurations. For up-to-date information, please consult official manufacturer resources.