HCL BigFix vs. Microsoft Enterprise Mobility + Security

BigFix is well suited for patch review and deployment, but there are key features that can definitely be improved. An example is that if a specific patch is deployed, but a cumulative update that contains that patch is not deployed, the system still shows the patch as outstanding or not implemented. Another area for improvement is the customization of BigFix. The tool has many uses and can be extremely helpful, but the amount of knowledge required to customize the solution is significant and customized scripts or "fixlets" need to be created. If common things could be pre-packaged and provided to the customer community, it would allow for an easier deployment and use of the tool.

Incentivized

Overall it is well suited to a mid size Enviromint with a limited staff. If you have a limited amount of time you can dedicate to solutions then having one that is by default already included in the system and can be managed well then it makes for fast integration with low overhead

Incentivized

• Custom patch packages are easy to set up and allows for use with a repository.
• Asset management by use of agents is simple and allows for user assignment by the device.
• Reporting has a large variety of templates.

Incentivized

• Azure AD Single Sign-On -- this is my favorite feature of EMS + Security. It is easy to setup and MS has simple instructions for most popular cloud services.
• InTune -- the changeover from the old InTune Client/Silverlight Portal has been painful, but once you get Win10 devices setup with InTune, management is a breeze.

Incentivized

• No console for macOS
• No easy setup UI for macOS users
• Patching can be complicated if you don't understand relevance
• Patching can be complicated it you don't understand scripting
• Could be better in helping with CIS Benchmarks

Incentivized

• Licensing - All Microsoft licensing is unclear
• Admin center organization - things are not all in an expected place
• Clear reporting

Incentivized

most features are pretty point and click simple. Some areas that are move detailed require some specialized training and knowledge to be able to navigate and get anything useful out of it. With some basic understanding you can gather tremendous amounts of data and have it available

Incentivized

While some support calls are quickly responded to, many times our engineers have been pointed to collaborative web sites such as Bigfix.me for solutions or the option of engaging professional services has been proposed. While this may seem like a good way to drive business, it is not seen as efficient a support process as could be provided to the customer base.

Incentivized

We have significantly enhanced our ability to patch desktops, including laptops, desktop, cloud, virtual machines and other mobile devices used by end-users. BigFix's endpoint management functionality allows us to seamlessly patch a wide range of operating systems, such as Windows, MacOS, ChromeOS, and Linux systems, ensuring comprehensive patch management across IT infrastructures. We have established a track record of delivering secure and hassle-free patching solutions to our clients

Microsoft Enterprise Mobility + Security is better than any of the products I have used that do similar things. There is a huge convenience to all the things Microsoft Enterprise Mobility + Security brings together in one place. Also, the speed and streamlining nature of Intune helps with the management and set up of devices.

Incentivized

• Overall, the product helps achieve the security posture mandated by HIPAA for our organization.
• It is a decent inventory management solution, and provides IT leaders with useful information for decision making.

Incentivized

• Increased productivity, including service requests for our customers
• Reduced operational costs, and threat/risk of cyber-attacks

Incentivized