Jamf Protect vs. Sophos Intercept X for Server

If the environment is predominantly Apple based then Jamf Protect is a strong solution for providing EDR capabilities to endpoints. The detection capabilities are up to par with other leading EDR tools and it integrates well with Jamf MDM. Additionally, the compliance, telemetry, log forwarding, and USB device management being included as part of Jamf Protect provide good ROI.

Incentivized

Licensing is incredibly easy to renew - and to adjust based on usage. The interface of cloud-based management is fantastic and easy to navigate as well. Syncs up with Active Directory to get users/security groups and such for easily differentiating policies to various users. Being able to pinpoint exactly where a threat infiltrated a system (what it talked to once it did so) is a massive feature in responding to online threats. Depending on deployment size - the cost could be an issue for some smaller organizations.

Incentivized

• Low resource use Protected Agent - stops tampering with agent and is not a resource hog
• Managed and custom Analytics - along with the out of the box Analytics provided by JAMF, admins can also set up their own to focus on areas of concern eg NISTcompliance items
• Vendor support - support is very responsive and knowledgeable

Incentivized

• File protection and Recovery
• Blocks exploits to deny attackers
• Malware Detection

Incentivized

• Jamf scoping can be a but of a pain sometimes
• For none security specialists it can be a little hard to navigate the portal
• It can be hard at times to understand the alerts and what is causing them

Incentivized

• Takes time to deploy and keep updated
• Resource heavy application when running

Incentivized

Jamf Protect is easy to manage. It is a separate interface from Jamf MDM which is nice for Security Operations teams. It allows Security teams to manage only the Security aspects without having to dig through all of the MDM configurations. For exception uses cases, Jamf Protect does provide options to customize settings where needed.

Incentivized

In some aspects, Jamf Protect was far superior to the others mentioned above. The only downside I can see is that it is only macOS which could be a problem for hybrid environments.

Incentivized

Does a great job protecting our systems. Email security has more features and easy to manage. You don't have to have your own server to run the endpoint security. Auto updates the endpoint and servers. With a Managed detect response team that does human threat hunting. Overall an awesome product.

Incentivized

• Reduced helpdesk tickets for admin tasks; reduces overall IT costs
• Reduced lost time due to malware
• Reduced lost data due to infected computers needing a wipe and purge of any malware

Incentivized

• It has protected us from a ransomware attack.
• Centralized management has saved us time.
• It takes more time to install than others.

Incentivized