Comparing features between the WAPT Enterprise and Community versions¶
Current feature list as of 2023-01-10¶
Feature |
Enterprise |
Community |
|---|---|---|
Deploy, update and remove software on hosts running
|
|
|
The repository is hosted on infrastructure under your control and not under the control of a large MegaCorp, Inc. that will prioritize its own interests over yours |
|
|
Deploy and update configurations in SYSTEM context |
|
|
Deploy and update configurations in USER context |
|
|
Get a comprehensive inventory of hardware, software and applied WAPT packages |
|
|
Benefit from the differenciated self-service (authorized users may install authorized software from authorized WAPT package stores) |
|
|
Benefit from simplified Windows Updates that work much better than a standard WSUS (only the required KBs are dowloaded from Microsoft) |
|
|
Simplify and structure your administrative workload by applying WAPT packages to an OU |
|
|
Configure and manage easily WAPT store relays to preserve bandwidth in multi-site environments |
|
|
Get access to ready-to-deploy WAPT packages for common free-to-use software |
|
|
Work with easily verifiable python recipes for installing, updating and removing software and configuration, recipes may embedd Powershell code or scripts made with other languages (ex: for personalizing a software using a LDAP directory) |
|
|
Benefit from hundreds of Helpers for simplifying your software packaging |
|
|
Encrypt your sensitive data for transport (software license keys, login, password, server FQDN, API informations for registering software with the vendor, etc) |
|
|
Automate the auditing of your configurations for an easy, automated and always up-to-date compliance |
|
|
Benefit from the power of SQL integrated with the WAPT console to make the reports that you need for your daily sysadmin work or that your organisational requires for budgeting decisions |
|
|
Authenticate your WAPT Administrator against an Active Directory or LDAP |
|
|
Benefit from differenciated roles between software packagers and package deployers so you can delegate your WAPT powers to the most adequate people (packagers know security implications, deployers know user needs) |
|
|
Licensed under |
Proprietary |
GPLv3 |
Verified and approved by national cybersecurity agency |
|
|
Professional phone support with Tranquil IT |
|
Features coming soon¶
Below is a list of features that we have identified as being really useful to WAPT and WAPT’s user community and that we have already started to work on. No timeline is promised, stay tuned, we are only promising you that we are working very hard to achieve these objectives.
Feature |
Enterprise |
Community |
|---|---|---|
Multi-tenant, multi-client mode with ACL for MSPs and large multi-departmental or international organisations using an internal PKI based mecanism |
|
|
Simple to use screensharing for user support, built with the same level of security and privacy as WAPT |
|
|
History of actions done via WAPT for a complete reporting of a host`s software maintenance lifecycle |
|
|
Authentication of WAPT Administrators using cryptographic tokens (ex: smartcards) |
|
|
Access to ready-to-deploy WAPT packages or recipes for licensed business software (common business software for industry, medical, office, public collectivities, cybersecurity, etc) |
|
|
Access to ready-to-deploy WAPT package extensions for simplifying desktop armoring using Applocker or equivalent |
|
|
Continued support for Windows XP in WAPT for factory machine tools, Hospital medical equipment, expensive research instruments, etc |
|
|
Operating system image deployment tool integrated within WAPT |
|
|
Integration of useful subset of WAPT inventory with popular ITSM tools and triggering of actions from the users ITSM console |
|
|
Summary of operating principles in WAPT¶
WAPT is agent based to allow no inbound open port in hosts` firewalls that initiate a secured bi-directional websocket with the server for allowing real-time reporting and actions;
Can work with Trusted Data Gateways using simple task scheduling;
Works on the principle of smoothly pulling updates and then applying upgrades at convenient time (works with low / intermittent bandwidth, high latency, high jitter);
Does not require an AD (works with Windows Home edition too), but will show the host in its Active Directory tree if the host is joined to an AD;
Methods for deploying WAPT agent:
using a GPO or an Ansible script;
manually after having downloaded the agent from the WAPT server or using SSH;
Methods for registering hosts with the WAPT server:
automatically using the host`s kerberos account;
manually with the WAPT Superadmin login and password;
Upgrades may be triggered:
upon shutdown of the host, the standard mode;
by an authorized WAPT Administrator in an emergency (ex: critical vulnerabilities running in the wild);
by the user at a time she chooses (ex: 24/7 nursing cart unused during lunch break with a simple click);
via a scheduled task running at a predetermined time (best for servers);
Security is insured with:
signing of WAPT packages using asymetric cryptography;
authentication of hosts against the WAPT server using symetric cryptography on registering;
confidentiality of the WAPT server using WAPT deployed client certificates;
Footnotes
- 1
The Enterprise version embeds more SetupHelper functions than the Community version.
- 2
In the Community version, the WAPT SuperAdmin password is shared between individuals that manage the WAPT server.
- 3
A minimal volume of licences must be subscribed in order to benefit from Tranquil IT’s telephone support for the daily operation of the software. Additional paid support is available to help you with your WAPT packaging needs.
- 4
Windows XP does not work with Python > 2.7. So a special branch of WAPT will be frozen with the last build of the WAPT agent running with 2.7. This version of the agent will of course be excluded from the target of evaluation in future security certifications.