Apple Business Essentials vs. Jamf Pro vs. Qualys TruRisk Platform

I would recommend Apple Business Essentials manager to any organization that orders and uses iPads or iPhones on a large scale and wishes to manage them. Even if you do not intend on applying an MDM to your corporate Apple devices, it is nice for asset management and corporate application purchasing from a central location. If you do not care about any of those features, this functionality is not for you.

Incentivized

Well suited for any organization that wants to manage apple products. It's extremely easy to integrate and has many connectors for existing enterprise infrastructure applications. Certificate management is a breeze. Not so suited for smaller businesses that only have 10-20 devices. Jamf has another product called JAMF Now that would suffice for those areas.

Qualys Cloud Platform is well suited for organizations that need additional tools to secure and bolster their security from end to end. The automated, real-time threat protection is very quick to notify an admin of potential vulnerabilities and risks, as well as recommending quick fixes to resolve/close the gap before an incident occurs. QCP excels at portraying all of these in a single pane of glass, and find that the Qualys reports are more detailed than competitor product lines. One of our big issues with QCP is that you do have to pay for each scanner, which can quickly add up to large costs. For this reason, I would rate Qualys at a ~7 due to great features and functionality, but overall value could be better for a large organization. I would also say that QCP may make more sense for smaller organizations due to this pricing model.

Incentivized

• Ease of use to manage. Some other solutions can be a little hard to navigate. Fleetsmith is intuitive.
• DEP Enrollment is really nice. If you are shipping a laptop out to the user you can set their password and when they turn on their computer they will have access.
• Adding software to be pushed out. Pretty easy to do.

Incentivized

• Jamf Pro's Self Service is a great mechanism for making software available to end uses as they need it.
• Jamf Pro is also great for creating plans called PreStage Enrollments that allow for computers to skip many of the setup screens, as well as automating account creation.
• Jamf Pro in combination with Apple Automated Device Enrollment (formerly DEP) allows for devices to supervised and managed, this combination allows for locking, remote wipe of devices, and finding locations of devices when put into lost mode.

• It really does well at vulnerability scanning, which it is well known for. It's accuracy at finding vulnerabilities is top notch, more so than a lot of other vulnerability tools out there. In an organization/company you want this kind of accuracy at finding vulnerabilities in your network/endpoints
• It is very good at managing endpoints on a consistent basis, meaning you can add endpoints to Qualys and have the platform scan/track/protect for vulnerabilities on an ongoing basis, without user intervention
• It does really well at separating out and identifying what levels of criticality each vulnerability should fall into. This way, an organization/company can attack the more critical vulnerabilities first

Incentivized

• We were told that this was in the works and it would be implemented at the beginning of the year 2019. That has still not happened and whenever we ask about this functionality we cannot get a good answer.
• Management of devices that are already in the field—we were told that in order to use Fleetsmith as we would like (pushing apps to devices) we would have to get each device and set them up from a Mac.
• Integration with Windows.

• Training options are terrific, but costly.
• Finding what you need in Jamf Pro can be tough at times. The interface is not what I would call friendly.
• You'll need static credentials for Jamf Pro. They don't integrate with the Jamf Account, and it doesn't offer 2FA. SSO is an option, but it's not simple to set up.

• This program is really complicated, the multiple functions that are presented to us are not very clear and in some cases, it is a matter of intuition to execute a function, it is not very informative.
• The interface of this program can be a real problem; for our taste, this program looks a bit messy, and the interface does not help or guide you to find the options you need.

Incentivized

We stepped away and are looking at different products that integrate with our entire fleet MDM solution rather than focusing specifically on Apple products. An all in one solution fits our needs better and is more cost-effective in the long run. Jamf Pro needs to improve some features and support but overall its a good product.

Incentivized

The installation steps are very easy and the UI for admin panel is user-friendly. Enrolment all based on Gmail accounts and the import function is there to fetch the user accounts. Navigating in Fleetsmith admin panel is simple and clean.

Incentivized

Jamf Pro has done pretty much anything we've needed with little setup headache. If we hit a wall, the Jamf user community and tech support departments both are more than willing to help solve problems. Tech support is excellent, but the surprising thing is the user base is by far the biggest resource. Jamf users love to help each other, by directly chatting about issues, posting best practices, or just posting info on the forums.

Again, the usability of Qualys has been a pinpoint for this entire review. It was easily the worst thing about the product and because of this, I would not recommend Qualys to anybody in my field. This should be something that Qualys strives to improve if they wish to stay in business.

Incentivized

Fantastic support. I have had a few queries on how to go about doing things in the best way and the support at Fleetsmith was always very quick to reply and with excellent advice and detail to solve the problem and lead is into our best use of their product.

Jamf Support is very responsive and usually assists in any challenge we are tackling. They are also very transparent when they are allowed to be. I personally love our Jamf Pro support rep and don't fear messaging their support team.

They had a support page within the WAS to report any concerns or seek help. But the UI of that is not smooth. Regardless support staff were pretty responsive and helpful. They scheduled calls to understand and address our problems. Email support is good as well.

Incentivized

They made me more comfortable using the product.

The training session was beneficial because it expanded my knowledge about Jamf products and really learn what I am capable of doing with Jamf Pro in terms of managing Apple computers and devices. Immediately after the training course, I was able to implement what I learn to our cloud instance.

Migration from an existing MDM requires device wipe and reenroll for full supervision of the device. It's somewhat painful. User enrollment makes things easier, but you miss out on full management.

The primary products we checked out were Mosyle, JAMF, and SimpleMDM. In the end it really came down to the simplicity of our needs and the simplicity of Fleetsmith's approach being in tight harmony. We kicked the tires, hard, for about a month and then dove all the way in.

Incentivized

Even thought we are using this solutions for different purposes (macOS device management VS mobile device management), I think at the end Jamf Pro is more focused or aimed for macOS management, and mobile device management is just a good addition to that. Same I can tell about Ivanty, is more about iOS/Android management rather than macOS

As described before Qualys is used to scan periodically the environment in order to check if there are some packages (Linux) or Applications (Windows) outdated, generating reports to the Service Owners, fulfilling what's is expected from us, attending all our expectations regarding the tool. That's why we'd choose Qualys to our organization.

Incentivized

• Lesser cost for managing device, instead of getting more manpower to do it manually.
• Lesser security threats (which will cause financial damage) as all devices are configured according the the company security policies, such as firewalls, media management, app security updates.

Incentivized

• Jamf Pro has allowed us to minimize the time it takes to deploy devices. We can use zero-touch deployment methodologies which allow devices to go directly to end users and allow end users to get up and running without needing IT's help.
• We have implemented both a third-party & macOS patching service, which allows us to ensure all apps and versions of macOS are updated and secure.

• Big time-saving tool vs. having to comb through several system reports which ultimately can still have you missing unapproved software.
• Quick snapshot via the dashboard provided a nice summary of where you're assets meet or do not meet your organization's policy requirements.

Incentivized