Jamf Protect vs. Kandji

If the environment is predominantly Apple based then Jamf Protect is a strong solution for providing EDR capabilities to endpoints. The detection capabilities are up to par with other leading EDR tools and it integrates well with Jamf MDM. Additionally, the compliance, telemetry, log forwarding, and USB device management being included as part of Jamf Protect provide good ROI.

Incentivized

Kandji is well-suited for the following: - Onboarding remote employees (we are a remote company). Kandji offers zero-touch deployment via Apple Business Manager, making it incredibly easy to configure our Macs. -Maintaining security and compliance for Apple devices -Managing a fleet of iOS devices in the field. Where it's less appropriate: -When there is a mixed OS environment -If you have a highly custom or script-heavy environment.

Incentivized

• Low resource use Protected Agent - stops tampering with agent and is not a resource hog
• Managed and custom Analytics - along with the out of the box Analytics provided by JAMF, admins can also set up their own to focus on areas of concern eg NISTcompliance items
• Vendor support - support is very responsive and knowledgeable

Incentivized

• Pushing custom scripts
• New device deployment
• App updates

Incentivized

• Jamf scoping can be a but of a pain sometimes
• For none security specialists it can be a little hard to navigate the portal
• It can be hard at times to understand the alerts and what is causing them

Incentivized

• Problem after problem after problem with employees getting locked out of their laptops, (which was the whole reason we switched to Kandji - to prevent that from happening), employees ultimately having to factory reset their laptops to get back in, pop-ups that never go away, and continuous password sync issues.

Incentivized

Jamf Protect is easy to manage. It is a separate interface from Jamf MDM which is nice for Security Operations teams. It allows Security teams to manage only the Security aspects without having to dig through all of the MDM configurations. For exception uses cases, Jamf Protect does provide options to customize settings where needed.

Incentivized

I gave it an 8/10 because overall, it offers a spotless and intuitive interface that makes routine device management easy. Features such as onboarding, app deployment, and compliance enforcement are handy, thanks to the various blueprints we can set up. The only reason I didn't give it a 10 is that it lacks some advanced configurations, and the reporting aspect is not as customizable.

Incentivized

In some aspects, Jamf Protect was far superior to the others mentioned above. The only downside I can see is that it is only macOS which could be a problem for hybrid environments.

Incentivized

With Intune, they aren’t friendly with Macs. We had to add each app individually and constantly update the packages for updates. Even when we do everything right, it still doesn’t work all the time

Incentivized

• Reduced helpdesk tickets for admin tasks; reduces overall IT costs
• Reduced lost time due to malware
• Reduced lost data due to infected computers needing a wipe and purge of any malware

Incentivized

• They promised us we could add devices as needed. I even had that written in an email. However, they rescinded that promise and required us to add devices in buckets of 50. That means, since we had 55 users, we had to pay for 100 licenses.
• Password issues were made much worse by using Kandji instead of our old MDM (Hexnode).
• Overall, Kandji created major headaches with laptop instead of improving.

Incentivized