Jamf Connect vs. WatchGuard AuthPoint

Jamf Connect is a nice and customizable tool for password change or password sync and account creation during an enrollment process. The configuration is not very easy to understand at the start. Especially if an iDP comes into play and you don't have an idea with Azure or similar services. With Jamf Connect ad bind is dead on macs.

We use multiple authenticators at my company. We use WatchGuard AuthPoint just for our VPN for security purposes. The app works very well and over the past year we've only had a handful of issues with the authentication service, and these were resolved relatively quickly. We do have to remind people to enable push notifications from the app, or have the app open when they need to use it to authenticate, otherwise they won't get the push to approve. The biggest issue I've found is that people will forget to do this and then say that the VPN isn't working - the VPN is working, it's just that they didn't get/approve the push from AuthPoint in time.

Incentivized

• password sync works very well
• regular updates to Jamf Connect with improvements
• small and simple tool
• Account creation is now on next level after we don't need AD Bind

• Works well with the free Authpoint client and the OpenVPN clinet.
• Token management is simple and hosted completely in the cloud to reduce overall complexity
• Setup was simple and and staighforward
• Suppports several authentication methods we have used both RADIUS and SAML effectively, but ADFS, IDP, RDWeb, and RESTful API, and other custom apps are supported.
• Geofencing for RDP has been very useful as it is independant of our firewall geofencing. This is quite useful for organizations like us who do not Geofence at at the firewall level so as to provide global access to resources on the DMZ.

Incentivized

• the Jamf configuration app for the config profiles looks not really Jamf-like
• Why are under "Jamf Connect Deployment and Update Settings" in Jamf Pro all possible configuration profiles listed? We have some and I don't think there had to list every!?
• how the Jamf Connect updates work under "Jamf Connect Deployment and Update Settings" is very unclear. i.e. for troubleshooting

• Email support is SLOW unless I want to allow a stranger to access my production firewall. That is never allowed here, so our hands are tied in terms of being able to get support in less than 48 hours.
• Again, support takes far too long because you refuse to employ any staff that works in US time zones during normal business hours.
• There has to be another option besides: 1) you take full control of my systems or 2) I wait on SLOW email support that isn't that great.

Incentivized

It is almost a certainty that we will continue to use Jamf Connect, even with Apple coming out with Platform Single Sign On. Jamf Connect provides several features that PSSO does not, such as "just in time" local account creation and automatic synchronization of enterprise credentials. It is unlikely that we would investigate other options at this time or in the near future.

Incentivized

We are very happy with Authpoint and see no reason to make any change to it. If only there was a policy to set minimum password strength requirements and to force users change their password every xx days, then it would be a 10!!!

Incentivized

Jamf Connect is quite easy to use and has the necessary options on the login screen (such as WiFi network connection) for getting connected and authenticated. It has a simple to use menulet that allows password changes and resets as well as temporary elevation, all with very clear workflows. It also allows us to assign field staff to their client users' computers so that they can provide support without having to resort to LAPS accounts.

Incentivized

After initial setup, it practically runs itself. Onboarding new users is fast and easy as it should be. The AuthPoint mobile app is small and simple to use. The only reason I do not give it a 10 is that I frequently get complaints from end users that the AuthPoint app is "constantly downloading". In fact, it's not downloading anything and that what the users are seeing in the app is a timer for the 6-digit code that changes every minute.

Incentivized

Has rarely been unable to use; if that were the case, it was operator error

Incentivized

No apparent problem besides a couple of times that systems weren't working

Incentivized

WatchGuard support is always quick and reliable. They have urgency levels that you are able to select when creating your support ticket, and they respond in accordance to the severity that you have set. I have never had an issue with getting someone on the phone in the same business day, even for very low priority issues.

Incentivized

It was an Onsite demo at the ditributor with the benefits of Watchguard Authpoint. Was very nice to see the abilities of the product. This Demo was a few years back, since then Authpoint changed allot. It is very nice for partners that you can get this demo without any aditional cost.

Incentivized

We use the online training for all our employees. There are both sales and technical trainings available and there even is a technical certification. You can use this for the Watchguard Partner Program which can give you aditional benefits. Every now and then you have a webinar that discusses multiple Watchguard products.

Incentivized

the first time it takes more effort. It is helpful to already understand how each authentication type works. Then it's much easier to understand the MFA solution that you implement. It is useful to check the release notes from time to time and update the key parts of the Watchguard Authpoint. Authpoint Gateway, Logon App, RDWeb... Also, it's useful to set up notifications when something goes wrong or sometimes check the statistics of how many requests are being approved/denied, etc.

Incentivized

The only other product we evaluated was Xcreds from TwoCanoes software, which is essentially a one person shop. We already were Jamf Pro customers, and Jamf Connect fulfilled all of the requirements for this function along with providing professional customer support. Since we already had a relationship with Jamf, it made perfect sense to add this product to our toolkit, and keep technical support contained within one organization.

Incentivized

I chose Watchguard for the bundle of features and customer support, not to mention the transparency you get with a paid program versus an open-source version. Mainly, I liked having so many of the solutions I needed in one place without having to find separate programs.

Incentivized

We are a medium-sized company. We don't need rapid scaling.

Incentivized

• we need more time to understand how Jamf Connect and the configuration "really" works

• We currently have 300 users on Authpoint, and most of them use insecure passwords. Authpoint gives us peace of mind that we don't have to police individual employee passwords.
• In line with the comment above, with so many people in our organization using insecure passwords, I'm sure that Authpoint has already saved us from many potential security breaches.
• Security breaches can cost a lot of money. Preventing them saves the company money and helps to achieve our bottom line.

Incentivized