AlienVault OSSIM (discontinued) vs. Apple Business Essentials vs. Jamf Pro

The most obvious scenario in which OSSIM is well suited is in a single office/home office (SOHO) or small business, in which budget is reduced but asset discovery and vulnerability management are greatly needed and appreciated. OSSIM is lightweight and free, so the real challenge to face is to hire or assign an administrator to manage and operate it, instead of any investment on an expensive appliance. Also, as resellers, promoting usage of OSSIM to customers charging for professional services for installation, administration, and maintenance (remember that OSSIM doesn't have official support from AlienVault) is a great asset for the organization.

Incentivized

Fleetsmith is well suited for companies with a lot of Macs, Mac minis, Apple tvs, etc., that are all over the place (different offices, states, countries, floors, remote employees, etc). It makes the management of these central where it would be almost impossible otherwise.

Incentivized

We run a technology lending program for students. Jamf Pro has been instrumental in allowing student staff to prepare the laptops in a systematic, consistent manner. The same can be said with iPads and deploying apps to the iPads is automated. Also, extra software titles are made available in Self Service (both for laptops and iPads). Additionally, putting policies in Self Service for IT student workers to deploy to sit-down machines to run as needed is quite useful as well. Less appropriate scenarios would be in cases where there are fewer than 10 to 20 machines. Looking at Jamf Now would probably be a better use of resources. Jamf Now is not as robust as Jamf Pro, but for smaller entities it would be a better fit and a better choice financially.

• Threat analysis. It can correlate different events happening to detect a pattern or an attack.
• Dashboard provides a clean, single location to see what is going on in our environment.
• Up to date open threat exchange means everything new popping up out there is included and watched for in our environment.

Incentivized

• Fleetsmith does a great job of being unobtrusive on managed devices. After initial deployment, one might never know it’s there except when it prompts to enforce a software update.
• Fleetsmith has sensible defaults and relatively few decisions for the administrator to make; for most applications and configurations, it’s sufficient to enforce a minimum version. For more complex use cases, I suggest falling back on Fleetsmith’s ability to install tools such as Puppet and run arbitrary shell commands.

Incentivized

• Custom Scripts mean you can accomplish almost anything you need.
• Extension Attributes gives you a way to report on anything.
• Extremely configurable. Just know that means it can be hard to find what you're looking for.
• Training and community resources are readily available.

• Creating custom rules is a bit complicated
• Reporting could be improved
• Agent has caused conflicts with a couple of our other applications

Incentivized

• We were told that this was in the works and it would be implemented at the beginning of the year 2019. That has still not happened and whenever we ask about this functionality we cannot get a good answer.
• Management of devices that are already in the field—we were told that in order to use Fleetsmith as we would like (pushing apps to devices) we would have to get each device and set them up from a Mac.
• Integration with Windows.

• While already in progress, the Configuration Profile editor is a little unwieldy
• User dialog messaging. While Jamf [Pro] helper is very useful, a more feature-rich utility with editor functions would be extremely welcomed to interact with the user while installing software.
• Policies: I would desperately like to see the ability to organize the order of packages and scripts within a policy without needing to use names, numbers, and 'priority'. Just let me drag items in a policy around in order.
• Policies: scripts can only be run before or after, please let me place them in between packages

We stepped away and are looking at different products that integrate with our entire fleet MDM solution rather than focusing specifically on Apple products. An all in one solution fits our needs better and is more cost-effective in the long run. Jamf Pro needs to improve some features and support but overall its a good product.

Incentivized

AlienVault OSSIM is far easy to use and manage - provided you know what you're doing. As any SIEM application, there is some background knowledge required in order to take advantage of the product's functionalities, such as the log correlation and analysis. Other than that, the application is quite usable and robust.

Incentivized

It's very simple to use. Sometimes a little too simple, so it can be tempting to fiddle around or tweaks settings that might have annoying downstream impacts. But it's easy to rollback or disable changes anyway. My only wish is that each option set should have its own deeper explanation about the impact of the options on real-world users or security concerns.

Jamf Pro has done pretty much anything we've needed with little setup headache. If we hit a wall, the Jamf user community and tech support departments both are more than willing to help solve problems. Tech support is excellent, but the surprising thing is the user base is by far the biggest resource. Jamf users love to help each other, by directly chatting about issues, posting best practices, or just posting info on the forums.

Everything is done through MSSP and installation pro services. Once those hours are burned up, then you're on your own without a lot of help. Typically the pro services hours aren't enough to get past 60 days and MSSP are hit and miss. We had a miss for installation helpers.

Incentivized

Fantastic support. I have had a few queries on how to go about doing things in the best way and the support at Fleetsmith was always very quick to reply and with excellent advice and detail to solve the problem and lead is into our best use of their product.

Jamf Support is very responsive and usually assists in any challenge we are tackling. They are also very transparent when they are allowed to be. I personally love our Jamf Pro support rep and don't fear messaging their support team.

They made me more comfortable using the product.

The training session was beneficial because it expanded my knowledge about Jamf products and really learn what I am capable of doing with Jamf Pro in terms of managing Apple computers and devices. Immediately after the training course, I was able to implement what I learn to our cloud instance.

Migration from an existing MDM requires device wipe and reenroll for full supervision of the device. It's somewhat painful. User enrollment makes things easier, but you miss out on full management.

AlienVault OSSIM as the first experience with a SIEM is very fine, especially if your company is an SMB. Every SIEM shares some features in common with other products, features such as log retrieval and normalization. So if you stick with principles, you can learn other SIEM products as well. If your environment is not of a minimum size, LogRhythm might be overkill for your network, same with McAfee Enterprise Security Manager.

Incentivized

I include Samsung Knox as a competitor in this field because you can have a similar setup with any Samsung devices purchased through a reseller as well. We have gone down this route for a few devices that have needed to be Android and the difference between the two platforms is night-and-day. Apple Business Essentials Manager is much easier to use and manage.

Incentivized

Even thought we are using this solutions for different purposes (macOS device management VS mobile device management), I think at the end Jamf Pro is more focused or aimed for macOS management, and mobile device management is just a good addition to that. Same I can tell about Ivanty, is more about iOS/Android management rather than macOS

• OSSIM and the installers didn't really help us optimize at installation. OSSIM went without optimization for almost two years before that fact was noticed. I think this decreased ROI.
• Finding and researching incidents is much faster with all data available. Sometimes too much data, though.

Incentivized

• Lesser cost for managing device, instead of getting more manpower to do it manually.
• Lesser security threats (which will cause financial damage) as all devices are configured according the the company security policies, such as firewalls, media management, app security updates.

Incentivized

• Jamf Pro has allowed us to minimize the time it takes to deploy devices. We can use zero-touch deployment methodologies which allow devices to go directly to end users and allow end users to get up and running without needing IT's help.
• We have implemented both a third-party & macOS patching service, which allows us to ensure all apps and versions of macOS are updated and secure.