Try our new research platform with insights from 80,000+ expert users

AWS Config vs BigFix comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Configuration Management
2nd
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
334
Ranking in other categories
Remote Access (2nd), Enterprise Mobility Management (EMM) (1st), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
AWS Config
Ranking in Configuration Management
18th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
5
Ranking in other categories
No ranking in other categories
BigFix
Ranking in Configuration Management
9th
Average Rating
8.6
Reviews Sentiment
6.3
Number of Reviews
99
Ranking in other categories
Endpoint Protection Platform (EPP) (33rd), Patch Management (8th), Unified Endpoint Management (UEM) (9th)
 

Mindshare comparison

As of March 2026, in the Configuration Management category, the mindshare of Microsoft Intune is 6.9%, down from 10.1% compared to the previous year. The mindshare of AWS Config is 2.3%, up from 1.5% compared to the previous year. The mindshare of BigFix is 5.5%, down from 9.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Configuration Management Mindshare Distribution
ProductMindshare (%)
Microsoft Intune6.9%
BigFix5.5%
AWS Config2.3%
Other85.3%
Configuration Management
 

Featured Reviews

AkashKamble - PeerSpot reviewer
Sr MacOS specialist engineer at Cyber24
Enables management of multiple operating systems with a single license
The best feature is that it's a Microsoft product, so if anything goes wrong, we get quick support for anything required. Remote system functionality allows us to sit anywhere and take control of any device via remote management. We can enhance security for clients' laptops with built-in Microsoft Defender, which is available with the Microsoft Intune license. We use it for reporting purposes through endpoint analytics. When pushing scripting, there are two types available: remediation script and reservation script. Through endpoint analytics, you can push defender policies to clients. It helps with reporting, inventory updates, and monitoring tenant status health.
Dineshkumar Thulasiraman - PeerSpot reviewer
Cloud Engineer at cloudifyops
Useful for vulnerability scanning and data encryption
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS Config integrates with the existing security infrastructure of our company, and it is an easy process that is not at all complicated. AWS Config is a security product. The tool protects its users' resources and data from unauthorized access, security breaches, and threats. The product helps with data encryption. You can have your data on AWS KMS, which helps with data encryption. For areas like SSL/TLS encryption, the tool offers data protection between AWS services and endpoints. As I need to learn the components of the product, I rate the overall tool a seven out of ten.
AM
RPA Developer at Hexaware Technologies Limited
Successfully manage endpoint security and compliance while facing integration challenges
I have not come across any difficulties. I integrated it with ILMT (IBM License Metric Tool). It lets us identify all software being used in my organization with BigFix. It provides input of all types of software being used, including details and information about hardware specifications. I am more involved in software licensing and procurement, so I utilize this tool for procuring more licenses if needed for our company. After integration, we get different dashboards showcasing our IBM infrastructure, highlighting various issues in our environment that we can mitigate. I recommend BigFix to others. I rate BigFix a seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I can see that the patch management process is much improved with the bundled patch management option available in Microsoft Intune compared to the KPI deployment required by the other deployment solutions."
"Microsoft Tech Support is good, providing solid support."
"The Autopilot feature is fantastic. It is a Microsoft product, so it deals best with Microsoft operating systems, but it can integrate with iOS, Mac OS, Linux, and Android."
"What I like the most about Microsoft Intune is its ability to manage mobile devices. Through integration with System Center, it can also manage desktops and laptops."
"The reporting and analytics features in Microsoft Intune have been a lifesaver."
"This product works very well for companies already using the full Microsoft suite."
"The feature that we need occasionally but is really important is the ability to remotely wipe a device, control it, and perform similar functions."
"For Windows services, there are multiple options within Intune to modernize it to be more internet-facing and dynamic."
"Installing the instances and performing upgrades is smooth and clean."
"AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources."
"The tool protects its users' resources and data from unauthorized access, security breaches, and threats."
"The initial setup is super easy, it takes like two minutes. Literally a one-click deployment."
"The solution is scalable and provides over 100 rules."
"The scalability is a ten out of ten."
"The technical support for BigFix is really amazing."
"It allows for visibility into the OT, the industrial environments, that didn't exist before which is a big piece and has benefited my organization. Second, the speed at which people can patch is night and day versus SCCM scan or another similar solution."
"We are able to use BigFix through API connections to automate and reduce resources and time. The product's been great for us. It's increased the security posture ten-fold and it's increased our visibility across our endpoints enormously."
"We've had no issues with stability."
"It is user-friendly."
"The most valuable features are patch management, software installation, and asset management."
"Vulnerability scanning and patch automation."
"Between the user groups, the community, the AVP support, the direct access via technical route and the PMR support, half the time I don't even need to do a formal PMR because the solutions from the community resolve whatever issues we're having. It's the best community and support based system I've ever used."
 

Cons

"Reporting in Microsoft solutions is pathetic. With Intune, I'm getting a free inventory tool, but I don't get a reporting tool. When I go to Intune, I can see one machine's entire data in terms of the hardware and the software running on it, but I cannot generate a report for all the machines in the organization. The reporting is the only feature holding back the functionality that is already there."
"In terms of the admin experience, it is straightforward, but the Windows enrollment experience could be improved. Sometimes, for enrollment, we have to reset devices and re-enroll them. Just configuring Windows, Azure, or Active Directory doesn't enroll the devices. We need easy enrollment for Windows."
"Due to the abundance of features, there's a lot to organize, which makes managing and setting up the solution challenging. The setup is immense, and it would be good to see improvement in this area."
"Manually syncing devices to enforce policies is cumbersome."
"The UI is not user-friendly and has room for improvement."
"The interface is not as modern as some competitors in terms of single pane of glass visibility across the entire landscape. It has a very Azure vibe and may not be as graphically appealing as other products."
"Back in 2020, there were significant problems with report accuracy, particularly regarding web patching."
"I wish Microsoft would keep up with their documentation. They make changes so quickly to these platforms that they do not update the documentation properly in a timely manner."
"The solution is missing a configuration that can assist us when writing our programming languages."
"There is room for improvement in built-in tools, they are not up to the mark."
"Improvements are needed as per customer requirements."
"The reboot process for AWS instances could be improved. Microsoft Azure does not have this problem, so AWS could consider making their instances more robust. You would not need to reboot your instances frequently to replace the hardware and stuff. They can look for a better approach or mechanism to improve in the future. The concern is that you need to plan for the outage when you reboot an instance. You need to have a maintenance window where you can properly reboot the instance without affecting your application. When Amazon announces that you need to reboot an instance and are not ready, this becomes a problem."
"I would like to see more emphasis on using the web console, to have the same power as the full fat client console that they do they now. It's a lighter way to log in and it would be faster for our operators to do their work. The console tends to take a long time for a large number of clients."
"I'd like to see better API integration with BigFix. We have some tremendous API capability inside of CyFIR and the ability to take textual search results, for example, and bring that back into the BigFix dashboard. This would be of extreme interest to us and our customers."
"In order to derive maximum benefit from BigFix, it is essential that we configure all of its features and implement them effectively. If the automation could be improved we would be able to mitigate the risks associated with zero-day threats."
"I would request them to build a robots, or an easier way for integration with the other tools, like ITSM tools."
"The only thing that I don't like about BigFix is that it does not support other devices such as printer firmware, router firmware, and things like that. I will be happy if I can control everything and get everything else in there, even if it is just a line item. They can do some enhancements to the Web UI. I am trying to get customers to be able to manage their environment by using Web UI, and it would be good if we can delete endpoints by using Web UI. We should also be able to generate Excel content or data tables from the Web UI without having to go to the console. It is small stuff, and it drives me crazy that I have to go to another console to do these things."
"Its pricing should be improved. It is too costly."
"The tool should be more friendly in terms of Web UI and should be having better vulnerability scanning mechanisms so a third-party application is not required to fulfill that aspect."
"In-place and OS upgrades can be improved."
 

Pricing and Cost Advice

"There are licenses required for this solution. We enable licenses on the devices we need to manage."
"It's affordable. It's cheaper if you have an Office 365, E5, or E3 subscription because everything is there."
"Microsoft Intune is a cost effective choice. It is less expensive than other products on the market."
"I rate Intune an eight out of ten for affordability. It's bundled with the 365 licensing, which is competitive overall."
"Microsoft Intune is more expensive than other solutions, but it offers a wider range of features and control."
"It's reasonable. They're not giving it away, but it's reasonable."
"Intune is linked with Microsoft. We can deploy the Microsoft E365 license to users by Intune. There are different types of licenses, such as device administrator licenses, E5 licenses for device enrollment manually, and P1 and p2 licenses for device enrollment automatically. These are the licenses required for the administration."
"Existing E5 license holders for M365, Intune, and Azure, receive a free license."
"It is a very expensive tool. AWS pricing for Config is not fixed and depends on your organization's size and complexity."
"The solution charges us per hour. There's no license."
"It might be about $23 a client."
"The tool's price continues to go up. The cost per endpoint can vary, ranging from approximately 30 to 80 dollars per year. Compared to other products, pricing is in the middle. You need to buy an additional database license, but most users already have it."
"You are charged per server and per workstation when using BigFix. ManageEngine is a lot cheaper than BigFix. There are some additional costs, such as support."
"The price is reasonable, but our customers find it expensive."
"So, the pricing is slightly more expensive than the others. I have to keep buying licenses every time I add a new device."
"The price of BigFix is better than the solutions. You are able to pay monthly or annually. There are not any hidden costs with BigFix. There is an additional cost for the SQL database."
"The license is subscription-based."
"There's not much big cost. We only have to pay the agents' cost for the server, and for the systems."
report
Use our free recommendation engine to learn which Configuration Management solutions are best for your needs.
884,732 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
10%
Computer Software Company
10%
Financial Services Firm
9%
Government
8%
Financial Services Firm
20%
Comms Service Provider
11%
Photography Company
6%
Manufacturing Company
6%
Financial Services Firm
13%
Manufacturing Company
10%
Government
9%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business124
Midsize Enterprise53
Large Enterprise167
No data available
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise67
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What needs improvement with AWS Config?
Improvements are needed as per customer requirements.
What is your primary use case for AWS Config?
I use the solution in my company to check the vulnerabilities for all the resources, including tools like S3, EC2 Ins...
What advice do you have for others considering AWS Config?
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS ...
What do you like most about BigFix?
The most valuable features of the solution are Windows patching and the hardware and software inventory.
What is your experience regarding pricing and costs for BigFix?
The pricing is pretty good and now follows a subscription model similar to other major software solutions, making it ...
What needs improvement with BigFix?
I have concerns about BigFix's pricing, which I find to be slightly on the higher side. While it may not be the most ...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
Tivoli Endpoint Manager
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Flatiron, Prezi, iZettle, British Gas, Burt, Autodesk, FanDuel
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Find out what your peers are saying about AWS Config vs. BigFix and other solutions. Updated: March 2026.
884,732 professionals have used our research since 2012.