Check Point Harmony Mobile vs. Jamf Protect vs. Trend Vision One Endpoint Security

It immediately tells you when an app is malicious, its always scanning the device. The policies you can enforce on the device allows you to know that the device can remain secure. I have a hard time describing scenarios where is it less appropriate because Harmony Mobile was made to secure mobile devices.

Incentivized

If the environment is predominantly Apple based then Jamf Protect is a strong solution for providing EDR capabilities to endpoints. The detection capabilities are up to par with other leading EDR tools and it integrates well with Jamf MDM. Additionally, the compliance, telemetry, log forwarding, and USB device management being included as part of Jamf Protect provide good ROI.

Incentivized

Before Trend Micro OfficeScan we used Symantec Endpoint Protection and although it was very easy to deploy and to update agents it couldn't find a virus if you pointed it out with a neon sign. We were always getting hit with different viruses but since we migrated to Trend we no longer have that problem. Trend has definitely been preventing those kind of outbreaks successfully.

Incentivized

• Blocks Smishing Attacks
• Blocks specific categories of content e.g. Pornography
• Ability to Scan Applications to determine their integrity

Incentivized

• Low resource use Protected Agent - stops tampering with agent and is not a resource hog
• Managed and custom Analytics - along with the out of the box Analytics provided by JAMF, admins can also set up their own to focus on areas of concern eg NISTcompliance items
• Vendor support - support is very responsive and knowledgeable

Incentivized

• The product has two important aspects, centralized console and an agent which is typically installed on every machine. When the product is installed on a dedicated server then all computers can readily get updated while in the same network (provided the agent is installed on every machine). This helps the machine to avoid any kind of virus attacks.
• Even if the machines are not in the same network where the console is being run it can directly get all updates from the Trend Micro server directly and the machine is still protected. Hence, it is not necessary that users have to visit the office or internal network to get the update, once the agent is installed on the machine then they can get the update from anywhere as long as the machine has access to the Internet.
• Once the agent is installed on the machine the users can themselves do a full scan and even check the logs themselves.

Incentivized

• I think the ability to scan a Wi-Fi network prior to joining can be an excellent addition
• On demand application scanning
• Alert users when an application becomes malicious

Incentivized

• Jamf scoping can be a but of a pain sometimes
• For none security specialists it can be a little hard to navigate the portal
• It can be hard at times to understand the alerts and what is causing them

Incentivized

• Only thing I would have to say that's negative is the reporting aspect. Basic reporting is good but still lacks some details. This is a problem with many of the software vendors I have encountered in the past as well. Reporting is still much better than most.

Incentivized

It is very easy to stick with a vendor year after year, and it is also easy to see the faults in a product and want to change. This is the first time I have renewed with an antiviurs provider as others have been less than ideal and caused issues where there were none before, so while it isn't perfect, it is the best of the bunch currently and I am hopeful that it will continue to improve in future versions.

Incentivized

Jamf Protect is easy to manage. It is a separate interface from Jamf MDM which is nice for Security Operations teams. It allows Security teams to manage only the Security aspects without having to dig through all of the MDM configurations. For exception uses cases, Jamf Protect does provide options to customize settings where needed.

Incentivized

The dashboard is user-friendly and allows for an IT admin to quickly deploy the software. The users do not even notice the program running in the background. From the dashboard the IT department can monitor all the workstations for issues and maintain good health of the network.

Incentivized

It has been difficult at sometimes, the support people at one point told me that they couldn't tell me information about OfficeScan because it was knowledge that was passed down from engineer to engineer. The issue was that if you used the msi for the install any further installs would require the msi to have the same exact name or else the install fails and corrupts the install. This information is not listed anywhere on trends website. Support kept trying to get me to use the exe for installs instead, but we use SCCM and msi's work better. We had to write a script to come up with a solution so that we could uninstall the software and install the new software. Trend did provide the technical expertise to help with the script and had us work with one of the developers in order to resolve that issue. So they did fix their screw up but it took a while and several complaints.

Incentivized

Harmony Mobile is really a cut above the rest because it really is the first application of its kind, the first Mobile Threat Defense tool that is designed for just that. Detecting and preventing threats. It should be the baseline used to develop other MTD applications because of its already high standards and quality.

Incentivized

In some aspects, Jamf Protect was far superior to the others mentioned above. The only downside I can see is that it is only macOS which could be a problem for hybrid environments.

Incentivized

For me, Trend Micro Apex One with its low performance is the best option at the time to buy a solution like this, with its flexibility through on-premises or saas deployment options you can choose the option that best fix to you, has an advanced automated threat detection and response against an ever-growing variety of threats.

• Secure phones means less possibility for breaches
• Only safe apps can be installed
• Savings from the reduction in the possibility of breaches

Incentivized

• Reduced helpdesk tickets for admin tasks; reduces overall IT costs
• Reduced lost time due to malware
• Reduced lost data due to infected computers needing a wipe and purge of any malware

Incentivized

• Since the product is a full suite of protection rolled into a single product, we've seen ROI through cost reduction and simplified management. And while we haven't measured performance, one would logically assume that systems will perform better with a single product installed vs several.
• While we haven't measured performance, one would logically assume that systems will perform better with a single product installed vs several.

Incentivized