Check Point Harmony Mobile vs. Jamf Protect

It immediately tells you when an app is malicious, its always scanning the device. The policies you can enforce on the device allows you to know that the device can remain secure. I have a hard time describing scenarios where is it less appropriate because Harmony Mobile was made to secure mobile devices.

Incentivized

The main reason we went with Jamf Protect was because we wanted a dedicated macOS security endpoint. Is was easy to implement and migrate over from our previous endpoint provider. As a university we have lab macOS devices that multiple users use. So we have Jamf Protect profiles that block the use of external drives and other other profiles that allow it. We different user accounts requiring different access this can get a bit messy when deploying the config profiles at login for each user that signs in.

Incentivized

• Blocks Smishing Attacks
• Blocks specific categories of content e.g. Pornography
• Ability to Scan Applications to determine their integrity

Incentivized

• Security--it scans processes for 'bad stuff'
• Notifies admins of any issues or potential issues; entirely customizable and we create many custom notifications and groups.
• Integrates with Jamf Pro
• Monitor CIS benchmarks via a clean and nice looking dashboard

Incentivized

• I think the ability to scan a Wi-Fi network prior to joining can be an excellent addition
• On demand application scanning
• Alert users when an application becomes malicious

Incentivized

• We also have JAMF Safe internet for iPads. I would love to see this same simple idea in Jamf Protect for the iMacs

Incentivized

Jamf Protect is easy to manage. It is a separate interface from Jamf MDM which is nice for Security Operations teams. It allows Security teams to manage only the Security aspects without having to dig through all of the MDM configurations. For exception uses cases, Jamf Protect does provide options to customize settings where needed.

Incentivized

Harmony Mobile is really a cut above the rest because it really is the first application of its kind, the first Mobile Threat Defense tool that is designed for just that. Detecting and preventing threats. It should be the baseline used to develop other MTD applications because of its already high standards and quality.

Incentivized

I find that all of the products have the same features; however, Jamf Protect is stronger if managing macOS devices. Also, it is one license so what you pay covers all of the features and does not require additional licenses for features like USB device control. The CIS compliance aspects generally look better in in Jamf as compared to Crowdstrike.

Incentivized

• Secure phones means less possibility for breaches
• Only safe apps can be installed
• Savings from the reduction in the possibility of breaches

Incentivized

• Better detection of malware reducing downtime and risk to network
• Easy to implement
• Can be a bit of a steep learning curve in general

Incentivized