Has anyone had a good experience with Ivanti products?

Device Control sounds like one of the stronger candidates. Once configured, it can give administrators detailed control over connected devices, including permissions tied to Active Directory groups and allowlisting by device identifier or serial number.

That said, getting a policy working is different from keeping it manageable across a client environment. I'd test the rules with actual users and devices before promising a particular setup.

Endpoint Manager gets a positive mention for doing its job well, even if the interface isn't especially polished. Application Control has also been described as functional. Neither is a blanket endorsement of the whole product range, though.

I'd be careful with the IT service management side until you've checked the client's actual requirements. One concern raised was limited reporting detail. Another involved a self-hosted setup where basic ticket features were hard to get, though it wasn't clear whether the product or the provider maintaining it was responsible.

Ask for a demonstration using the client's workflows, especially reporting and ticket notes. If a third party is doing the customization, make sure ownership of those changes and ongoing upkeep is clear.

The Neurons feedback was much less encouraging. Installation problems, questionable statistics and unreliable remote actions were all raised as concerns. I'd want to test those specific functions on a representative set of client devices rather than assume a demo covers them.

Security Controls has a long history under earlier names, including Shavlik. That's a reminder that Ivanti's products don't all have the same background, so a verdict on one tool doesn't necessarily tell you much about another.

For an MSP, the useful comparison is probably product by product, including the effort to deploy, upgrade and maintain each one. A lower purchase price, where applicable, doesn't settle that question on its own.