Check Point Harmony Endpoint vs. Jamf Protect

Check Point Endpoint Media Encryption and Port Protection (Pointsec) is well suited for Microsoft Windows environment. While, for MacOS it is less appropriate.

Incentivized

If the environment is predominantly Apple based then Jamf Protect is a strong solution for providing EDR capabilities to endpoints. The detection capabilities are up to par with other leading EDR tools and it integrates well with Jamf MDM. Additionally, the compliance, telemetry, log forwarding, and USB device management being included as part of Jamf Protect provide good ROI.

Incentivized

• Requires authorized passwords and logins from end users.
• Utilizes voiceprint recognition to validate users.
• Allows for a one time login from end users working remotely away from their desks.

Incentivized

• Low resource use Protected Agent - stops tampering with agent and is not a resource hog
• Managed and custom Analytics - along with the out of the box Analytics provided by JAMF, admins can also set up their own to focus on areas of concern eg NISTcompliance items
• Vendor support - support is very responsive and knowledgeable

Incentivized

• Types of devices to control needs to be added like McAfee and GFI Endpoint Security.
• Device whitelisting needs more granular level like by Vendor ID, Serial Number, Device ID etc.
• Device Control and Media Protection on MacOS to be added.

Incentivized

• Jamf scoping can be a but of a pain sometimes
• For none security specialists it can be a little hard to navigate the portal
• It can be hard at times to understand the alerts and what is causing them

Incentivized

Jamf Protect is easy to manage. It is a separate interface from Jamf MDM which is nice for Security Operations teams. It allows Security teams to manage only the Security aspects without having to dig through all of the MDM configurations. For exception uses cases, Jamf Protect does provide options to customize settings where needed.

Incentivized

Symantec Encryption, a few management points led me to evaluate and not go with it.

Incentivized

In some aspects, Jamf Protect was far superior to the others mentioned above. The only downside I can see is that it is only macOS which could be a problem for hybrid environments.

Incentivized

• Stops Ransomware attacks
• Easy to manage
• Easy to deploy

Incentivized

• Reduced helpdesk tickets for admin tasks; reduces overall IT costs
• Reduced lost time due to malware
• Reduced lost data due to infected computers needing a wipe and purge of any malware

Incentivized