Other product variants may be available, please contact us or request a call back if you cannot see what you are looking for.

Product Information

GFI LanGuard is an award-winning network security scanner that scans your network and ports to detect, assess and correct security vulnerabilities with minimal administrative effort. GFI LanGuard also provides comprehensive patch management capabilities, on-demand or fully automated, with detection, downloading and deployment of missing patches for both Microsoft and non-Microsoft applications. Plus you can take advantage of both network auditing and asset inventory functionality to get a picture of exactly what's happening on your systems - see what USB and other portable devices are connected; what software has been installed, the number of open shares, open ports, weak passwords in use and more.

Documents & Downloads

Features

Integrated vulnerability management solution

GFI LanGuard is an award-winning solution that addresses the three pillars of vulnerability management: security scanning, patch management and network auditing through a single, integrated console. By scanning the entire network, it identifies all possible security issues and, using its extensive reporting functionality, provides you with the tools you need to detect, assess, report and remediate any threats.

Vulnerability scanning

During security audits, over 45,000 vulnerability assessments are made and networks are scanned IP by IP. GFI LanGuard gives you:

• The capability to perform multi-platform scans (Windows, Mac OS, Linux) across all environments, including virtual machines
• The ability to analyse your network’s security health from a single source of data
• The facility to set-up your own custom vulnerability checks through simple wizard-assisted set-up screens
• The ability to create different types of scans and tests with ease
• A graphical threat level indicator that provides an intuitive, weighted assessment of the vulnerability status of a scanned computer or group of computers
• An extensive, industrial strength vulnerabilities database incorporating OVAL (5,000+ checks) and SANS Top 20 standards
• The ability to check that supported security applications are updated with the latest definition files and are functioning correctly.

Patch management and remediation across different Microsoft OSs and products

GFI LanGuard performs a scan of your network and gives you all the functionality and tools you need to effectively install and manage patches on all machines across different Microsoft operating systems and products in all languages supported by the vendor. GFI LanGuard also allows auto-downloads of missing patches as well as patch roll-back and custom software can be deployed, resulting in a consistently configured environment that is secure against vulnerabilities.

Patch management for other applications

GFI LanGuard also offers patch management support for other (non-Microsoft) software, enabling administrators to detect, download and deploy missing patches for supported applications in the same way as is done for Microsoft updates. GFI LanGuard offers patch management support for many popular applications like Apple Quicktime, Adobe Acrobat, Adobe Flash Player, Adobe Reader, Adobe Shockwave Player, Mozilla Firefox, Mozilla Thunderbird, Java Runtime and more.

With GFI LanGuard, it is possible not just to patch third party applications, but also to upgrade to their latest versions (i.e., if an old version of Adobe Flash is detected, GFI LanGuard will provide an option to either upgrade to the latest version or to apply all patches for that version). GFI LanGuard also automates patching for all major web browsers running on Windows systems, including Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Apple Safari and Opera Browser.

Deploys custom and third party software and patches network-wide

Besides deploying patches and service packs, GFI LanGuard also enables you to easily deploy third party software or patches network-wide. You can use this feature to deploy client software, and update software, virus updates and more; practically any application that can run silently can be pushed in the network using GFI LanGuard.

Network and software auditing

Once you have scanned for vulnerabilities and patched your systems, you can use the GFI LanGuard auditing function to learn everything about your network’s security status, including what USB and other portable devices are connected; what software has been installed – both authorised and unauthorised; extended hardware auditing facility; the number of open shares, open ports, weak passwords in use; users or groups no longer in use; and the security health status of Linux systems on your network.

Hardware auditing

GFI LanGuard shows detailed information about the hardware configuration of all the scanned machines on your network. All devices from the Device Manager tool from Windows operating systems are retrieved, including motherboard, processors, memory, storage devices, display adapters and much more. Using network history view, you can now check whether any hardware was added or removed since the last scan.

And much more...

Licensing

Licensing

The product is licensed by IP Address. The first year of support is included in the product license price and support renewals are available in 1, 2 or 3 year terms. Renewal of the Software Maintenance Agreement (SMA) is recommended and includes updates to new releases, patches, web chat, email support, phone support and access to GFI's electronic knowledge base and forums.

Upgrades

A product version upgrade is required when you want a new version of the product and do not currently have SMA. There is a 30 day grace period from date of SMA expiration before a product version upgrade is required.

Returns policy

There is a no-returns policy on all GFI products.

System Req.

Hardware

• 1 - 10 scan targets: 2 GHz dual core processor, 2GB RAM, 5GB storage, 1544 kbps network bandwidth usage
• 10 - 500 scan targets: 2.8 GHz dual core processor, 4GB RAM, 10GB storage, 1544 kbps network bandwidth usage
• 500 - 1500 scan targets: 3GHz quad-core processor, 8GB RAM, 20GB storage, 1544 kbps network bandwidth usage.

Supported operating systems (x86 or x64)

• Microsoft Windows Server 2008 Standard/Enterprise
• Microsoft Windows Server 2003 Standard/Enterprise
• Microsoft Windows 2000 Professional/Server/Advanced Server (SP4 or higher)
• Microsoft Windows 7 Professional/Enterprise/Ultimate
• Microsoft Windows Vista Business/Enterprise/Ultimate
• Microsoft Windows XP Professional (SP2 or higher)
• Microsoft Small Business Server 2008 Standard
• Microsoft Small Business Server 2003 (SP1)
• Microsoft Small Business Server 2000 (SP2).

Supported databases

• Microsoft Access
• Microsoft SQL Server 2000 or later
• MSDE/SQL Server Express Edition.

Other server components

• Microsoft .NET Framework 2.0.

Target computer components

• Secure Shell (SSH) - Required for UNIX based scan targets
• Windows Management Instrumentation (WMI) - Required to scan Windows-based scan targets
• Enable File and Printer Sharing
• Enable Remote Registry.

GFI LanGuard Agent - Supported operating systems (x86 or x64)

• Microsoft Windows Server 2008 Standard/Enterprise
• Microsoft Windows Server 2003 Standard/Enterprise
• Microsoft Windows 7 Professional/Enterprise/Ultimate/Home Premium
• Microsoft Windows Vista Business/Enterprise/Ultimate/Home
• Microsoft Windows XP Professional (SP2 or higher)
• Microsoft Small Business Server 2008 Standard
• Microsoft Small Business Server 2003 (SP1)
• Microsoft Small Business Server 2000 (SP2)
• Microsoft Windows 2000 Professional/Server/Advanced - SP4, Internet Explorer 6 SP1 or higher, Windows Installer 3.1 or higher.

GFI LanGuard Agent - Footprint

• RAM: 25MB
• Agent disk space: 350MB.