Jamf Protect vs. Kandji

The main reason we went with Jamf Protect was because we wanted a dedicated macOS security endpoint. Is was easy to implement and migrate over from our previous endpoint provider. As a university we have lab macOS devices that multiple users use. So we have Jamf Protect profiles that block the use of external drives and other other profiles that allow it. We different user accounts requiring different access this can get a bit messy when deploying the config profiles at login for each user that signs in.

Incentivized

Kandji would be excellent for a company that has Mac fleets and is currently using Intune or Jamf as their MDM. Kandji is cheaper than Jamf and way easy to configure than Intune.

Incentivized

• Security--it scans processes for 'bad stuff'
• Notifies admins of any issues or potential issues; entirely customizable and we create many custom notifications and groups.
• Integrates with Jamf Pro
• Monitor CIS benchmarks via a clean and nice looking dashboard

Incentivized

• Automate device provisioning.
• Robust security and compliance enforcement.
• Seamless app and patch management.

Incentivized

• We also have JAMF Safe internet for iPads. I would love to see this same simple idea in Jamf Protect for the iMacs

Incentivized

• Security features
• BYOD controls
• Containerization

Incentivized

Jamf Protect is easy to manage. It is a separate interface from Jamf MDM which is nice for Security Operations teams. It allows Security teams to manage only the Security aspects without having to dig through all of the MDM configurations. For exception uses cases, Jamf Protect does provide options to customize settings where needed.

Incentivized

Switching from our old MDM to Kandji: "We'll set you right up with an integration specialist" and it'll be "so easy." Greatly incorrect. The change took months and was a disaster at best. So many things I had to figure out that they never mentioned, or I had to keep going back to them to get more information. "Oh, we forgot to mention that!" - said about a dozen times. Also, I had to go to our former MDM to ask them how to do it because "Kandji can only help on the Kandji side of things - not the other MDM side." Well yes, but then don't make it sound like you can and will do that part in the first place!

Incentivized

I find that all of the products have the same features; however, Jamf Protect is stronger if managing macOS devices. Also, it is one license so what you pay covers all of the features and does not require additional licenses for features like USB device control. The CIS compliance aspects generally look better in in Jamf as compared to Crowdstrike.

Incentivized

Overall, my organization is an iOS-heavy company, and Kandji struck a good balance of user experience and good automations.

Incentivized

• Better detection of malware reducing downtime and risk to network
• Easy to implement
• Can be a bit of a steep learning curve in general

Incentivized

• They promised us we could add devices as needed. I even had that written in an email. However, they rescinded that promise and required us to add devices in buckets of 50. That means, since we had 55 users, we had to pay for 100 licenses.
• Password issues were made much worse by using Kandji instead of our old MDM (Hexnode).
• Overall, Kandji created major headaches with laptop instead of improving.

Incentivized