Jamf Protect vs. Trend Micro Worry-Free Services Suite

The main reason we went with Jamf Protect was because we wanted a dedicated macOS security endpoint. Is was easy to implement and migrate over from our previous endpoint provider. As a university we have lab macOS devices that multiple users use. So we have Jamf Protect profiles that block the use of external drives and other other profiles that allow it. We different user accounts requiring different access this can get a bit messy when deploying the config profiles at login for each user that signs in.

Incentivized

With around 80 users and 150 devices (including 6 server instances), this solution served us very well, with instant admin notifications and scheduled overall reports. Detection appears extremely reliable, and the memory and CPU footprint of the service seemed less intrusive than Panda, which we had issues running on Terminal Services instances, as it seems to hog excessive memory allocation. Rollout was smooth and we never had an instance of a corrupt installation.

Incentivized

• Security--it scans processes for 'bad stuff'
• Notifies admins of any issues or potential issues; entirely customizable and we create many custom notifications and groups.
• Integrates with Jamf Pro
• Monitor CIS benchmarks via a clean and nice looking dashboard

Incentivized

• Adds a second layer to office 365 filtering and often finds things that were missed.
• Built in XDR provides more details on a threat than you'd normally have.
• Overall Easy to use but still very powerfull.
• Built in web filtering is easy to use and helps when users are offsite.

Incentivized

• We also have JAMF Safe internet for iPads. I would love to see this same simple idea in Jamf Protect for the iMacs

Incentivized

• Apple Mac client is troublesome.
• Policies are clunky and difficult to understand.
• Security Agent dashboard lacks tools needed to remediate problems.
• Technical support was less than satisfactory.

Incentivized

Jamf Protect is easy to manage. It is a separate interface from Jamf MDM which is nice for Security Operations teams. It allows Security teams to manage only the Security aspects without having to dig through all of the MDM configurations. For exception uses cases, Jamf Protect does provide options to customize settings where needed.

Incentivized

Configuration and support resources provided gave us everything we needed to configure the environment out of the box to meet the various needs of the business.

Incentivized

The few times I needed to contact support I was fully satisfied. They worked all the way through the issue, no matter how long it took, and made sure I had a permanent solution. I was pleased with the professionalism, courteousness, and knowledge of the product they were supporting.

Incentivized

I find that all of the products have the same features; however, Jamf Protect is stronger if managing macOS devices. Also, it is one license so what you pay covers all of the features and does not require additional licenses for features like USB device control. The CIS compliance aspects generally look better in in Jamf as compared to Crowdstrike.

Incentivized

Trend Micro is a leader in Gartner Quadrant for endpoint protection, with the best awards and 3rd party certification about their readiness and capabilities with zero day threat and unknown attacks. The single feature that with the hosted solution you do not need internal resources to get the protection caught up better. Optimization for SMBs is a plus to consider, and as in the name of the solution, there should not be worries once you get things set up and running. It has been a great experience for sure.

Incentivized

• Better detection of malware reducing downtime and risk to network
• Easy to implement
• Can be a bit of a steep learning curve in general

Incentivized

• It was a step up from what we were using before and has been a solid tool.
• For the number of sites and malicious files blocked I'd say it is a good product at a good price.
• Managing the admin portal and devices has been a huge time saver. Deployment can be via .msi or .exe.

Incentivized