No more typing reviews! Try our Samantha, our new voice AI agent.

AWS Config vs BigFix comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Configuration Management
2nd
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
359
Ranking in other categories
Remote Access (2nd), Enterprise Mobility Management (EMM) (1st), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
AWS Config
Ranking in Configuration Management
18th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
5
Ranking in other categories
No ranking in other categories
BigFix
Ranking in Configuration Management
9th
Average Rating
8.6
Reviews Sentiment
6.3
Number of Reviews
99
Ranking in other categories
Endpoint Protection Platform (EPP) (29th), Patch Management (8th), Unified Endpoint Management (UEM) (9th)
 

Mindshare comparison

As of May 2026, in the Configuration Management category, the mindshare of Microsoft Intune is 5.4%, down from 10.3% compared to the previous year. The mindshare of AWS Config is 2.1%, up from 1.9% compared to the previous year. The mindshare of BigFix is 5.2%, down from 9.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Configuration Management Mindshare Distribution
ProductMindshare (%)
Microsoft Intune5.4%
BigFix5.2%
AWS Config2.1%
Other87.3%
Configuration Management
 

Featured Reviews

Varun Mehra - PeerSpot reviewer
collaboration support engineer at a retailer with 11-50 employees
Centralized device management has transformed security and streamlined remote provisioning
One area where Microsoft Intune can improve is the user interface. Sometimes the portal feels a bit complex and not very intuitive, especially for new users, and it can take time to find specific settings. Another point is troubleshooting. While logs are available, the diagnostic policies and sync issues can still be time-consuming and not very straightforward. I also feel that reporting could be more detailed and customizable. The built-in reports are helpful, but for deeper insights, I often need to rely on additional tools. Overall, it is a strong solution, but improving usability and troubleshooting experience would make it even better. While Microsoft Intune works very well within the Microsoft ecosystem, the integration of some third-party tools could be smoother and require less customization. Support is another area that could improve, as sometimes response times can be slow, and resolving complex issues may take longer than expected. In terms of features, I think more advanced automation and built-in remediation options would be helpful since common issues can be fixed automatically without manual intervention.
Dineshkumar Thulasiraman - PeerSpot reviewer
Cloud Engineer at cloudifyops
Useful for vulnerability scanning and data encryption
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS Config integrates with the existing security infrastructure of our company, and it is an easy process that is not at all complicated. AWS Config is a security product. The tool protects its users' resources and data from unauthorized access, security breaches, and threats. The product helps with data encryption. You can have your data on AWS KMS, which helps with data encryption. For areas like SSL/TLS encryption, the tool offers data protection between AWS services and endpoints. As I need to learn the components of the product, I rate the overall tool a seven out of ten.
Ravi Khanchandani - PeerSpot reviewer
Founder Director at Techsa Services
Long-term partnership improves customer satisfaction and delivers efficient endpoint management
BigFix supports something known as Patch Policies, which allows users to define that whenever critical patches are released, they should get evaluated against machines and automatically deploy them. Their software distribution is very efficient because they use a pull mechanism rather than a push mechanism, allowing each machine to download from the closest repository and install themselves. The same assessment mechanism applies for real-time vulnerability remediation, allowing identification, evaluation, and automatic remediation across machines. Compliance metrics typically measure the patch percentages deployed against the number of endpoints, which could be various device types including virtual machines and mobile devices. Measurements are taken against each device type, looking into compliance percentages for browsers such as Chrome and Edge based on their versions.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Conditional access has helped us tailor and enforce our security policies in the mobile space."
"Its protection policies are most valuable, it protects mobile devices as well as individual apps, it is pretty scalable, and its documentation is also pretty good."
"For our customer, it meant no on-premise systems configuration infrastructure or identity management services were required."
"Microsoft Intune is brilliant for scalability and is excellent for scaling purposes."
"We have definitely seen a good return on investment, as it has saved a good amount of time in device setup and support, reducing manual effort by around forty to fifty percent and also fewer on-site interventions since most issues are handled remotely."
"The ability to switch between Affinity and non-Affinity enrollment is great."
"Intune makes our organization more secure and flexible. We can onboard new employees faster and more securely. We are a governmental organization with strict regulations, and Intune helps us comply with those requirements."
"It is absolutely a positive investment."
"The solution is scalable and provides over 100 rules."
"The initial setup is super easy, it takes like two minutes. Literally a one-click deployment."
"The scalability is a ten out of ten."
"AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources."
"The tracking, history logs, and security alert features are valuable because they are critical features that assist us."
"The tool protects its users' resources and data from unauthorized access, security breaches, and threats."
"Installing the instances and performing upgrades is smooth and clean."
"All the vendor patches are synchronized automatically, which is something you don't find in other tools."
"We did a proof of concept, looked at the other competitors and after scaling all of them on a matrix, IBM ended up being the best option for us."
"Our services are easy to manage with BigFix."
"It has plugins development options, which are great."
"My company provides support services to a lot of customers and companies. We have reduced a huge amount of man-effort. Along with the man-effort, we have reduced the timeline to fix the compliance and security gaps. We have an unbroken record. The documentation clearly says that we have done the patching of newly released patches, including Microsoft and third-party patches, in up to 80% of the computers, within 72 hours of the release of the production. That was a very massive benefit that we have seen. When I talk about the 80% endpoints, it is 100 or 200. I am talking about 25,000 endpoints."
"This solution is giving us the results that it's meant for."
"Some of my clients have gone from it taking months to be able to get through a patch cycle or to discover what's out there, down to days."
"Patch management, because it very much improved the patch compliance and has the capability to manage Windows and non-Windows clients."
 

Cons

"From a new user's perspective, it may be a little overwhelming because there are quite a few things to look at in the console, however, once you are sort of acclimated and are familiar with your core functions, it's fairly simple and straightforward."
"Its integration with Mac and Linux devices can be better. They should provide more features similar to Windows. We should be able to manage policies within Linux and Mac machines. If we can have more granular controls for these two operating systems, it will be really helpful."
"Its configuration is fairly complicated. You have to do quite a bit of discovery to be able to deploy it for a customer."
"There can be some added features, such as an improved dashboard."
"There are a lot of updates coming from Microsoft that suddenly affect our security policies."
"When Microsoft Intune is used with different android devices it does not always work as it is supposed to."
"The reports that are generated aren't so great; they don't give a lot of meaning so far."
"They can improve their MAM policies a little bit more and make them more granular. They should include more granular group policies. They are there, but they need to be more granular. Its stability should also be improved. It is not very stable. Sometimes, it shows some inconsistencies across tenants."
"The solution is missing a configuration that can assist us when writing our programming languages."
"Improvements are needed as per customer requirements."
"The solution is missing a configuration that can assist us when writing our programming languages."
"The reboot process for AWS instances could be improved. Microsoft Azure does not have this problem, so AWS could consider making their instances more robust. You would not need to reboot your instances frequently to replace the hardware and stuff. They can look for a better approach or mechanism to improve in the future. The concern is that you need to plan for the outage when you reboot an instance. You need to have a maintenance window where you can properly reboot the instance without affecting your application. When Amazon announces that you need to reboot an instance and are not ready, this becomes a problem."
"There is room for improvement in built-in tools, they are not up to the mark."
"The stability is generally pretty good. The one thing that we came across is the battle between load on endpoints and load on our servers and relays versus how quickly, effectively and reliably actions can be taken. I'd like to not have to take an action on a system while I'm working with someone and then have to say whether something will happen between five seconds or thirty minutes from that point."
"I would like to see improvements in the Web UI program and also a BigFix console for Mac OS."
"Relay selection and availability needs improvement as an incorrect relay selected can cause network chokes."
"I would like to see for it to be a little easier for new users to be able to learn and create relevant statements."
"Be careful. It's a super powerful tool. It can be unforgiving, i.e., if you do some of the things wrong, it can be a nightmare."
"The new EDR (Endpoint Detection and Response) feature, Detect, is new and still needs a few updates."
"I would eventually like to see a SaaS offering, a cloud-hosted BigFix instance where we only have to put a relay in our environment."
"Technical support has sometimes been very good, and sometimes it's been not so good."
 

Pricing and Cost Advice

"I have no comment on pricing of the solution."
"The purchase of the product was handled by someone else."
"Our enterprise agreement includes Microsoft Intune at no additional cost."
"The product is offered as part of a Microsoft standard bundle. The pricing can be competitive to Airwatch, and Maas360."
"Every customer used to purchase licenses based on their needs."
"Microsoft Intune costs about $7 per user per month, which is somewhat on the pricier end. That said, it's a reliable product, so it's fair."
"It is not expensive."
"Microsoft Intune is included in the E5 license at no additional cost."
"The solution charges us per hour. There's no license."
"It is a very expensive tool. AWS pricing for Config is not fixed and depends on your organization's size and complexity."
"The price is reasonable, but our customers find it expensive."
"The license is subscription-based."
"The cost is slightly high."
"The price is very fair."
"It might be about $23 a client."
"I would stay with the Managed Virtual Server license model, which is a 1-to-1 license per OS whether it is virtual or physical."
"So, the pricing is slightly more expensive than the others. I have to keep buying licenses every time I add a new device."
"You are charged per server and per workstation when using BigFix. ManageEngine is a lot cheaper than BigFix. There are some additional costs, such as support."
report
Use our free recommendation engine to learn which Configuration Management solutions are best for your needs.
894,998 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Manufacturing Company
9%
Computer Software Company
9%
Government
7%
Financial Services Firm
23%
Comms Service Provider
10%
Manufacturing Company
7%
Construction Company
6%
Financial Services Firm
13%
Manufacturing Company
9%
Government
8%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business158
Midsize Enterprise59
Large Enterprise181
No data available
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise67
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What needs improvement with AWS Config?
Improvements are needed as per customer requirements.
What is your primary use case for AWS Config?
I use the solution in my company to check the vulnerabilities for all the resources, including tools like S3, EC2 Ins...
What advice do you have for others considering AWS Config?
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS ...
What is your experience regarding pricing and costs for BigFix?
The pricing is pretty good and now follows a subscription model similar to other major software solutions, making it ...
What needs improvement with BigFix?
I have concerns about BigFix's pricing, which I find to be slightly on the higher side. While it may not be the most ...
What is your primary use case for BigFix?
I have been working at Tech Data for the last 12 plus years.
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
Tivoli Endpoint Manager
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Flatiron, Prezi, iZettle, British Gas, Burt, Autodesk, FanDuel
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Find out what your peers are saying about AWS Config vs. BigFix and other solutions. Updated: April 2026.
894,998 professionals have used our research since 2012.