We bought it earlier this year. We balked at spending the money - considered writing our own security front-end - but in the end we bought it to accelerate our Sarbanes-Oxley compliance effort. It's a nice product and saves lots of time. We created some nice reports for the auditors that cut down on their billable time.
XE Update 6,SP22,Win2003,SQL2K,Citrix XP