Try our new research platform with insights from 80,000+ expert users

AWS Config vs BigFix comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Configuration Management
2nd
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
312
Ranking in other categories
Remote Access (2nd), Enterprise Mobility Management (EMM) (1st), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
AWS Config
Ranking in Configuration Management
17th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
5
Ranking in other categories
No ranking in other categories
BigFix
Ranking in Configuration Management
9th
Average Rating
8.6
Reviews Sentiment
6.6
Number of Reviews
98
Ranking in other categories
Endpoint Protection Platform (EPP) (35th), Patch Management (6th), Unified Endpoint Management (UEM) (9th)
 

Mindshare comparison

As of January 2026, in the Configuration Management category, the mindshare of Microsoft Intune is 8.2%, down from 10.1% compared to the previous year. The mindshare of AWS Config is 2.4%, up from 1.1% compared to the previous year. The mindshare of BigFix is 7.0%, down from 9.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Configuration Management Market Share Distribution
ProductMarket Share (%)
Microsoft Intune8.2%
BigFix7.0%
AWS Config2.4%
Other82.4%
Configuration Management
 

Featured Reviews

AkashKamble - PeerSpot reviewer
Sr MacOS specialist engineer at Cyber24
Enables management of multiple operating systems with a single license
The best feature is that it's a Microsoft product, so if anything goes wrong, we get quick support for anything required. Remote system functionality allows us to sit anywhere and take control of any device via remote management. We can enhance security for clients' laptops with built-in Microsoft Defender, which is available with the Microsoft Intune license. We use it for reporting purposes through endpoint analytics. When pushing scripting, there are two types available: remediation script and reservation script. Through endpoint analytics, you can push defender policies to clients. It helps with reporting, inventory updates, and monitoring tenant status health.
Dineshkumar Thulasiraman - PeerSpot reviewer
Cloud Engineer at cloudifyops
Useful for vulnerability scanning and data encryption
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS Config integrates with the existing security infrastructure of our company, and it is an easy process that is not at all complicated. AWS Config is a security product. The tool protects its users' resources and data from unauthorized access, security breaches, and threats. The product helps with data encryption. You can have your data on AWS KMS, which helps with data encryption. For areas like SSL/TLS encryption, the tool offers data protection between AWS services and endpoints. As I need to learn the components of the product, I rate the overall tool a seven out of ten.
JC
Technical Director at SYSTEX
Comprehensive client management and software distribution made efficient
Implementing a business solution with BigFix has some issues, primarily concerning the time required for distribution to clients if there are too many. Building a management console is quick and simple, taking only one to two hours for setup. However, a demo or trial may take over a week or two for completion.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Mobile device management is most valuable."
"I have seen a return on investment right from the start of the tool's usage."
"Internet-based access with security is what I have found to be most valuable. It is also a stable and scalable solution."
"Autopilot is a feature I really like."
"Intune does consolidate all endpoint and security management tools into one place, making everything easier to manage."
"Microsoft Intune has never crashed for me; it always works without fail."
"The best part of Intune is application deployment. We can deploy an application to several users with a single click. We can use conditional access, granting access to users based on certain conditions, such as location, platform, etc."
"The best features include the management, which is quite good, and endpoints."
"The initial setup is super easy, it takes like two minutes. Literally a one-click deployment."
"Installing the instances and performing upgrades is smooth and clean."
"The tool protects its users' resources and data from unauthorized access, security breaches, and threats."
"AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources."
"The scalability is a ten out of ten."
"The solution is scalable and provides over 100 rules."
"We've had no issues with stability."
"The tool's most valuable features are patching and integration with vulnerability scanners."
"It's good for reporting hardware and software."
"It has plugins development options, which are great."
"BigFix supports something known as Patch Policies, which allows users to define that whenever critical patches are released, they should get evaluated against machines and automatically deploy them."
"It's easy to use, not complicated."
"It allows for visibility into the OT, the industrial environments, that didn't exist before which is a big piece and has benefited my organization. Second, the speed at which people can patch is night and day versus SCCM scan or another similar solution."
"BigFix can manage lost devices, so you can wipe them remotely to ensure the IP doesn't get out in public. Unified endpoint security is a new perspective. I know that HCL is also collaborating with IBM, but I'm not sure if there is any cooperation between them and MaaS360 or other endpoint components."
 

Cons

"One thing I would suggest is that servers are not getting managed through Microsoft Intune."
"A new Intune feature allows application packaging, but it incurs additional licensing costs for a significant number of applications."
"For an existing customer who has an SCCM, it would need to be upgraded to an MECM first before I can introduce Microsoft Intune."
"Sometimes, the process is unsuccessful when we attempt to reset a device and wipe the data using Intune."
"There are items that require improvements. One is the controls from iOS."
"Currently, BitLocker does not support BYOD enrollment, which is a product limitation."
"There are a lot of updates happening on Microsoft."
"Intune does not provide real-time visibility."
"Improvements are needed as per customer requirements."
"There is room for improvement in built-in tools, they are not up to the mark."
"The reboot process for AWS instances could be improved. Microsoft Azure does not have this problem, so AWS could consider making their instances more robust. You would not need to reboot your instances frequently to replace the hardware and stuff. They can look for a better approach or mechanism to improve in the future. The concern is that you need to plan for the outage when you reboot an instance. You need to have a maintenance window where you can properly reboot the instance without affecting your application. When Amazon announces that you need to reboot an instance and are not ready, this becomes a problem."
"The solution is missing a configuration that can assist us when writing our programming languages."
"The scalability of the web UI product doesn't scale to the size that we need for our implementation so it needs to expand. I would also like to see the capability to develop on the back of the web UI capability. There are lots of web features and integrations that we could do with web UI that it would be nice to be able to put on top of what's already there, rather than waiting for IBM to develop what we need."
"BigFix is actually a little bit on the expensive side in Turkey because of the dollar's exchange rate in our currency."
"The deployment has room for improvement and can be more streamlined."
"The new EDR (Endpoint Detection and Response) feature, Detect, is new and still needs a few updates."
"IBM has not focused on the Web Reports capabilities."
"The self-service application seems to need some work to replace the client UI. There are a lot of pop-ups if you use a baseline as the object that you're setting to a workstation. Unless you're using web UI, the message is not customizable in the user notification."
"I would like to see for it to be a little easier for new users to be able to learn and create relevant statements. In my opinion, that's the hardest part for bringing on new people that haven't had BigFix experience. Being able to have easier ways to build relevance in ActionScript would be the biggest improvement I'd like to see."
"Needs to improve Network Access Protection (NAP) technologies to prevent computers with vulnerabilities from gaining access to networks."
 

Pricing and Cost Advice

"With our standard E5 agreement with Microsoft, there have been no pricing concerns. Introductory professional services, like a fast-track service, were included with our E5 membership, and there have been no additional costs."
"The cost of the license and the features are justified for myself as a technical person."
"My team members bundled it together with their Microsoft solutions, including Microsoft 365 and related products."
"It comes with the E5 plan. We bought the E5 plan from Microsoft."
"Intune comes with the licensing that is common for large organizations. However, Microsoft has recently released many add-ons that are very expensive, especially for large organizations or corporations."
"The pricing is good because customers are not complaining about it."
"Most of our clients come to us with licensing already in place. On average, it costs $6 per device per month to add Intune to an Office 365 subscription, but I am not sure."
"Microsoft Intune is more expensive than other solutions, but it offers a wider range of features and control."
"It is a very expensive tool. AWS pricing for Config is not fixed and depends on your organization's size and complexity."
"The solution charges us per hour. There's no license."
"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."
"There's not much big cost. We only have to pay the agents' cost for the server, and for the systems."
"The cost is slightly high."
"When purchasing, buying with other IBM tools provided us with a very good discount in pricing."
"It is too costly. It is one of the best tools, but because of pricing, not all clients support it. Its licensing is on a yearly basis."
"Compliance, inventory, and licensing are really pricey. They should lower the price. It discourages users from getting onboard."
"You are charged per server and per workstation when using BigFix. ManageEngine is a lot cheaper than BigFix. There are some additional costs, such as support."
"The price is reasonable, but our customers find it expensive."
report
Use our free recommendation engine to learn which Configuration Management solutions are best for your needs.
880,745 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Manufacturing Company
10%
Financial Services Firm
10%
Government
8%
Financial Services Firm
22%
Comms Service Provider
8%
Photography Company
7%
Manufacturing Company
7%
Financial Services Firm
15%
Manufacturing Company
9%
Government
9%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business121
Midsize Enterprise47
Large Enterprise154
No data available
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise66
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What do you like most about AWS Config?
The initial setup is super easy, it takes like two minutes. Literally a one-click deployment.
What needs improvement with AWS Config?
Improvements are needed as per customer requirements.
What is your primary use case for AWS Config?
I use the solution in my company to check the vulnerabilities for all the resources, including tools like S3, EC2 Ins...
What do you like most about BigFix?
The most valuable features of the solution are Windows patching and the hardware and software inventory.
What is your experience regarding pricing and costs for BigFix?
The pricing is pretty good and now follows a subscription model similar to other major software solutions, making it ...
What needs improvement with BigFix?
The reporting still needs improvement since customers want specific reporting, such as N-1 month patching reports. In...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
Tivoli Endpoint Manager
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Flatiron, Prezi, iZettle, British Gas, Burt, Autodesk, FanDuel
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Find out what your peers are saying about AWS Config vs. BigFix and other solutions. Updated: December 2025.
880,745 professionals have used our research since 2012.