Cisco Secure Endpoint vs. Jamf Protect

Cisco Secure Endpoint is well suited for keeping track of the many different and points that we have in our organization. All of these devices can easily be monitored with Cisco Secure Endpoint. It can monitor our servers and our desktops and laptops in our environment. It isn’t as appropriate for our student devices. However, those aren’t as critical since they are just Chromebooks.

Incentivized

The main reason we went with Jamf Protect was because we wanted a dedicated macOS security endpoint. Is was easy to implement and migrate over from our previous endpoint provider. As a university we have lab macOS devices that multiple users use. So we have Jamf Protect profiles that block the use of external drives and other other profiles that allow it. We different user accounts requiring different access this can get a bit messy when deploying the config profiles at login for each user that signs in.

Incentivized

• Threat identification: it finds things we wouldn't have even been looking for.
• Integration with Secure Malware Analytics for automatic submission of suspicious files.
• In-depth and complex configuration options for finely tuned policies for different users and endpoints.
• Part of the Cisco Secure Client product for easier distribution and reduction of running agents on end-user devices
• Integrates with Secure-X for single-pane of glass view of dashboards.

Incentivized

• Security--it scans processes for 'bad stuff'
• Notifies admins of any issues or potential issues; entirely customizable and we create many custom notifications and groups.
• Integrates with Jamf Pro
• Monitor CIS benchmarks via a clean and nice looking dashboard

Incentivized

• The update mechanism of the client is not obvious and takes some finesse to learn
• The clients auto update signatures, but not agents which I have seen lead to mixed version levels as it is harder to keep up with
• It is generally a challenge to manage the licenses and if you let the license lapse, it is a very bad thing in my opinion.

Incentivized

• We also have JAMF Safe internet for iPads. I would love to see this same simple idea in Jamf Protect for the iMacs

Incentivized

the renewal must be studied with different factors

Incentivized

AMP is very difficult to use compared to other products we've seen. It's hard to understand why there are so many different logins for the various products that supposedly integrate with AMP. We had weekly phone calls for months to implement the product yet none of the IT department really enjoys using this product or feels comfortable with the accuracy of detections. The number of false positives is high.

Incentivized

Jamf Protect is easy to manage. It is a separate interface from Jamf MDM which is nice for Security Operations teams. It allows Security teams to manage only the Security aspects without having to dig through all of the MDM configurations. For exception uses cases, Jamf Protect does provide options to customize settings where needed.

Incentivized

no complain and no issue with availability

Incentivized

In terms of technical support for Cisco Secure Endpoint, the support has been pretty good. All the cases I submitted were solved in a reasonable time frame, and it was a good experience. However, I find that not as many vendors have the expertise I would expect.

Incentivized

no participation in implementation

Incentivized

Other products we use were, I think, well, nothing like Cisco Endpoint. There was Microsoft Defender. I think Sophos and CrowdStrike. I think the visibility and the security. We haven't had any issues with the system. Once it's been implemented, it works fine. The enhancements that come into play, we're benefiting from them. We're benefiting from the Telos threat intel, which is really good as well

Incentivized

I find that all of the products have the same features; however, Jamf Protect is stronger if managing macOS devices. Also, it is one license so what you pay covers all of the features and does not require additional licenses for features like USB device control. The CIS compliance aspects generally look better in in Jamf as compared to Crowdstrike.

Incentivized

• It ensures minimal spread of cyber threats in case of infiltration thanks to containment response capabilities.
• By keeping our endpoints threat-proof, our systems and devices run efficiently hence better productivity.
• It frees IT staff thanks to its automation and ability to keep threats away with minimal intervention.

Incentivized

• Better detection of malware reducing downtime and risk to network
• Easy to implement
• Can be a bit of a steep learning curve in general

Incentivized