Typically, we use this solution as a base to create and secure container images. Sometimes we use SELinux through RHEL and sometimes we only use RHEL. It is easier to apply STIG baselines to a RHEL system than other systems. We mainly use it for building and securing containers.
RHEL is different than any other Linux distribution folder. Folder locations are different and using this solution makes us more secure.
We are assured of added security because of the STIGs, automation and all the repositories that exist for securing Red Hat and SELinux. We have scripts that can automate the STIGing out of an RHEL machine, RHEL container or an RHEL BM.
It is also easy to troubleshoot using RHEL and follow the same process as other solutions such as Ubuntu, Debian, or Arch.
RHEL's effect on our organization's management and efficiency is noticeable because we check all the compliance boxes when we run STIG machines. It helps us because Red Hat is trusted in the governmental space. It also helps management save people's time by just having use of templated containers.
There's a lot more automation for STIGing out a Red Hat machine than there is in a Ubuntu or a Debian machine and this is one of the most valuable features.
Since it's based off Fedora, I don't like the DNF package manager.
I have been using this solution for six months.
It's very stable. I've never had any breaking issues when upgrading packages or versions.
We run this solution on a really small scale. We are a development group so we're not working on large-scale systems. We generate proof of concepts and then show that to the company for them to use so I can't really speak to how it scales.
Red Hat's tech support and customer service are really good. The Red Hat team are my favorite people to work with. They are easy to work with and genuinely care. I would rate them a nine out of ten.
The initial setup is mostly straightforward depending on the specific setup. We build our own containers and that is more complex but there are simplex supported setups. In both scenarios, maintenance only involves a few commands and is simple. It is maintained by two security engineers.
From an ROI perspective, this solution helps us win contracts. Contract values are negligible to what the RHEL licensing cost is. It has a really large effect on our contract deals because it gives our work and service credibility.
I would advise others to read up on the solution first. Try Fedora first before you get into Red Hat. There are some similarities and a lot of what you know about Linux transfers over.
I would rate this solution a nine out of ten.
?