BeyondTrust Endpoint Privilege Management vs. Jamf Protect

It is an absolute must in all organizations where security is taken seriously. For organizations where there is a tendency among the users' end to abuse access privileges, this tool comes in handy. It has features that would enable the administrator to look through video logs to see what was done by a specific user. Also has the capability to terminate or lock users/ user sessions.

Incentivized

If the environment is predominantly Apple based then Jamf Protect is a strong solution for providing EDR capabilities to endpoints. The detection capabilities are up to par with other leading EDR tools and it integrates well with Jamf MDM. Additionally, the compliance, telemetry, log forwarding, and USB device management being included as part of Jamf Protect provide good ROI.

Incentivized

• Reporting capabilities for user activities, including complete session recordings
• Integration with SAML for SSO and secure LDAP authentication
• Jump point servers for central isolated access from outside the network

• Low resource use Protected Agent - stops tampering with agent and is not a resource hog
• Managed and custom Analytics - along with the out of the box Analytics provided by JAMF, admins can also set up their own to focus on areas of concern eg NISTcompliance items
• Vendor support - support is very responsive and knowledgeable

Incentivized

• Better communication to customers on new release compatibility
• Crowd-sourced rule logic for specific applications would be nice (I hear underway)
• Technical support processes could be a bit improved

Incentivized

• Jamf scoping can be a but of a pain sometimes
• For none security specialists it can be a little hard to navigate the portal
• It can be hard at times to understand the alerts and what is causing them

Incentivized

BeyondTrust Endpoint Privilege Management is really usable thanks to the Cloud platform that provide central management, analytics, updates and policy definitions. For policies, quickstart covers around 80% of the overall configuration and we just have to define home made applications and dedicated use cases. From the user perspective, messages can be customized so it's easy to understand for user and they have an endpoint application to follow workflows approval.

Incentivized

Jamf Protect is easy to manage. It is a separate interface from Jamf MDM which is nice for Security Operations teams. It allows Security teams to manage only the Security aspects without having to dig through all of the MDM configurations. For exception uses cases, Jamf Protect does provide options to customize settings where needed.

Incentivized

We've had no availability issues.

Incentivized

We've had no performance issues.

Incentivized

The product performed to the level of our requirements.

The in person training was great. Very informative and the trainer was great. I would highly recommend this option if you're hesitant. Any questions can then be directed to support. Support is great as well, and will definitely help answer any questions. I would definitely
recommend adding some type of training as it was very helpful for our
staff.

Incentivized

It was informative and very helpful. They provide a lot of courses that give you exactly what is needed to manage the product. Any questions can then be directed to support. I would definitely recommend adding some type of training as it was very helpful for our staff. The online training sufficed for us.

Incentivized

BeyondTrust was super helpful with implementation and it only took a few weeks to get it up and running.

Incentivized

BeyondTrust Endpoint Privilege Management has more features than CyberArk and more detailed options for configurations. BeyondTrust Endpoint Privilege Management is more focused on setting up access-related endpoints, which requires some fine tuning and understanding for use cases where a single endpoint has to be shared with multiple vendors. CyberArk's setup is more geared to users' accounts and then endpoint management under the user accounts.

In some aspects, Jamf Protect was far superior to the others mentioned above. The only downside I can see is that it is only macOS which could be a problem for hybrid environments.

Incentivized

It's very easy to deploy with minimal interruption.

Incentivized

The integration team was great.

Incentivized

• We are able to securely monitor activity from vendors accessing our network.
• This meets our cybersecurity objectives of securing our OT networks.
• The benefits far outweigh the initial cost of the software.

• Reduced helpdesk tickets for admin tasks; reduces overall IT costs
• Reduced lost time due to malware
• Reduced lost data due to infected computers needing a wipe and purge of any malware

Incentivized