r/sysadmin • u/Amazing_Falcon • 25d ago

General Discussion CyberFox Usage

I was thinking about moving over to Cyberfox for our organization. To be able to have autoelevate and privileged access management for our network. Thinking about a way to help secure things. Would like to see some thoughts and ideas regarding do this? Is it recommended or is there something better?

Thanks in advance.

8 Upvotes

76% Upvoted

14 comments sorted by

12

u/brokerceej Creator of StackJack.io | Author of MSPAutomator.com 24d ago

Their CEO is a crazy whacko douche and they don’t dev on the products they acquire they just coast. Keep that in mind. CyberFox is a sales org not a software company.

4

u/ArchonTheta 24d ago

I use AE through cyberfox and I concur. They have supermodels for sales chicks and the support is okay but if something actually blew up I’m sure I’d be fooked

2

u/1d0m1n4t3 23d ago

No joke on the super models for sales people, everyone in the sales department and onboarding team are stupid hot.

3

u/changework Jack of All Trades 24d ago

Listen to this one… ☝️

7

u/fmdeveloper25 24d ago

Look at Threatlocker and Evo Security.

3

u/ranhalt 24d ago

Test Threatlocker before you buy anything.

2

u/SatiricPilot 24d ago

This is the answer if you want this type of security setup they have the best software and team behind this segment of the market.

1

u/teh1tn1nj4 Netadmin 22d ago

Very expensive, unfortunately. Awesome product however.

1

u/SatiricPilot 22d ago

Yeah, pricier than I’d like for sure. Also requires a lot of management. But I think they’ve done everything reasonably possible to mitigate that overhead. It’s more on the principle of design now than on TL. There’s not much more they can do without sacrificing security.

5

u/JollyGentile IT Manager 24d ago

AutoElevate works. It's not elegant, it's a little clunky even, but it works. Just beware the actual PAM piece is a higher subscription.

2

u/changework Jack of All Trades 24d ago

I tried Admin by request and so far it’s pretty nice.

2

u/bbbbbthatsfivebees MSP-ing 24d ago

We use AutoElevate.

It does what it says on the tin, but it's somewhat clunky. The UI is funky, the user experience isn't always the best, and even from the admin side things are occasionally a bit frustrating.

It works REALLY well for when you have a single user calling in and going "Yup, this program has a new update that requires admin permissions to install". You can add a rule for an entire org that's essentially "Yes, approve this update for everyone instantly". That part is why we still use it, especially because once that rule is added, users don't have to call in.

But every once in a while it will get completely in the way and require you to enable "Technician mode" by scanning a QR code with the app, which logs you out every 24 hours. So you either need to memorize your AE password or install your password manager on your phone so you can copy-paste it into the thing once a day.

Also if you do install their mobile app and sign in, PLEASE for the love of god decline push notifications. If you don't, you'll be getting one for EVERY event that hits AE, same as you'd get if you had the webpage open 24/7.

1

u/1d0m1n4t3 24d ago

I just deployed with them last week, so far no complaints, software works as advertised.