Try our new research platform with insights from 80,000+ expert users

BigFix vs Check Point Harmony Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

BigFix
Ranking in Endpoint Protection Platform (EPP)
14th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
95
Ranking in other categories
Configuration Management (5th), Patch Management (2nd), Unified Endpoint Management (UEM) (4th)
Check Point Harmony Endpoint
Ranking in Endpoint Protection Platform (EPP)
7th
Average Rating
8.8
Reviews Sentiment
8.0
Number of Reviews
112
Ranking in other categories
Endpoint Detection and Response (EDR) (9th)
 

Mindshare comparison

As of January 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of BigFix is 1.0%, up from 0.8% compared to the previous year. The mindshare of Check Point Harmony Endpoint is 2.6%, up from 2.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP)
 

Featured Reviews

Bella Yakoby - PeerSpot reviewer
Offers third-party patching feature, good scalability, and enhance endpoint management capabilities
From the perspective of the team that's handling the environment, it's not so user-friendly compared to other solutions, the competitors. We hire new teams from time to time, and they are complaining, look, although BigFix is very robust and cross-platform, it's not so fun to work with. The user interface for the technical teams is not so advanced. It's not so intuitive compared to SCCM, compared to ManageEngine. And this is the fact that they have, with the teams, because they have the rejection. The look and feel of the system are old-fashioned. For new employees, it's less easy to find someone I don't need to educate on how to work with BigFix. Although it's easy, it's not as intuitive as the other solutions, and the functionality of the other solutions is less advanced. Let's summarize: The user interface has to be changed from the perspective of the teams that are managing the product. It's old school.
Alejandro Flores. - PeerSpot reviewer
Good visibility with cloud centralized management and several layers of security
There are some "weak points" that have to be mentioned, including: 1) If the IT department is used to "cloning" endpoints (making images) you are going to have a hard time trying to install the product and you are going to end up reading a lot of Check Point documents. 2) If you are used to the granularity of roles features in Check Point Quantums products you are going to be a little bit disappointed. You can't set customized roles with customized read/write permissions. 3) You need a mature security team to manage this solution in order to get the most value from it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The use of fast query has been extremely valuable providing insight in real time of the endpoints."
"The most valuable aspect of BigFix is its ability to patch desktops. While we have complete control over servers and can easily push patches to them, desktops pose a greater risk for leaks and vulnerabilities if patches are not installed in a timely manner. By using BigFix, we have significantly improved our ability to patch desktops, whether they are laptops, desktops, or other mobile devices used by end-users."
"All the vendor patches are synchronized automatically."
"In terms of vulnerability management, it gives tough competition by providing a single management console with multiple benefits."
"It has improved my organization because we can automate a lot of tasks. We went from manually patching machines or doing our best and having very little visibility into it to us being able to set it and forget it and getting really good results on first-pass patching."
"The most valuable features are patch management, software installation, and asset management."
"The technical support for BigFix is really amazing."
"Being able to intelligently create reports, gather data, export CSVs and give that to the leadership of some of the client groups that my team supports has helped my organization."
"One of the coolest features is that it provides an HTML report on the laptop and the endpoint console for the administrator."
"We had a ransomware attack and the SandBlast agent automatically picked up the ransomware."
"The most valuable feature of Check Point Harmony Endpoint is centralized management."
"The most useful feature so far has been having a functioning and up-to-date anti-malware scanner."
"This comprehensive approach can safeguard your organization from a wider range of threats, including ransomware, malware, phishing attacks, and zero-day exploits."
"SandBlast Agent is always working in the background collecting sensitive data, forensics, and notifying users whenever there is a chance of a brute-force attack into our systems. Otherwise, it has been protecting our data at various geographies along with the endpoints that we set up on the cloud. They have been able to filter out or thwart any attacks from the very word, "Go," and make our work very safe and smooth."
"The end-user facilities for managing the tool are good."
"The initial setup is very easy."
 

Cons

"It could use better integration with Hypervisor products like VMware."
"BigFix is actually a little bit on the expensive side in Turkey because of the dollar's exchange rate in our currency."
"The solution’s pricing could be improved."
"I would like to see for it to be a little easier for new users to be able to learn and create relevant statements. In my opinion, that's the hardest part for bringing on new people that haven't had BigFix experience. Being able to have easier ways to build relevance in ActionScript would be the biggest improvement I'd like to see."
"License management isn't quite as easy as it should be to deal with the licensing. You need to take the server down to import the new licenses which I find to be annoying."
"Around the scalability concern, I would like to see the ability to run teamed, clustered, or hierarchical root servers, in order to provide a more robust, high availability system. The single monolithic root server model does somewhat bother me."
"The product should become cloud-based. Also, the peer nesting ability of the product is a little backward."
"Its pricing should be improved. It is too costly."
"Customization of UI should be a little better in terms of application UI and messages that are displayed when something is blocked or non-compliant."
"The network monitoring features must be improved."
"The only thing that our customers want, is lower prices."
"The solution can be made lightweight in order to keep the systems more effective during the background operations of the scanning and security checks."
"Sometimes, with a lot of clients (1,000) the UI is a bit sluggish."
"There was a learning curve for our general population of employees (the user)."
"The product updates are a manual process for my administrator and can take several hours out of his day."
"The drawback associated with the product is related to macOS since some features in it don't work."
 

Pricing and Cost Advice

"You get what we call the Platform Edition, which you get for free. The patch service is maybe $0.50 per workstation per month. Then there's the basic server cost, which is about $1.50 per server per month. You also get into Lifecycle which does power management, OSD remote control, and those types of things, and that might be about 10 times the price - which works out to about $13 per server and, maybe $5 per workstation per month."
"The tool's price continues to go up. The cost per endpoint can vary, ranging from approximately 30 to 80 dollars per year. Compared to other products, pricing is in the middle. You need to buy an additional database license, but most users already have it."
"The price of the solution is high. There are not any additional fees from the standard license."
"I would stay with the Managed Virtual Server license model, which is a 1-to-1 license per OS whether it is virtual or physical."
"You are charged per server and per workstation when using BigFix. ManageEngine is a lot cheaper than BigFix. There are some additional costs, such as support."
"Compliance, inventory, and licensing are really pricey. They should lower the price. It discourages users from getting onboard."
"On a scale from one to ten, where one is expensive and ten is cheap, I rate the solution's pricing one out of ten."
"We have a subscription-based contract with BigFix."
"The pricing is reasonable."
"The solution is reasonable, but there are cheaper solutions out there."
"Licensing comes free in that first year or is included in the base package. From a commercial point of view, it really just is the renewal cost, rather than a one-time fixed cost or buy-in."
"The price of Check Point Harmony Endpoint is comparable to SonicWall. The price could be a bit lower."
"We pay on an annual basis. There are no additional fees, they mostly tell us what we have to pay. We have budgeted for it."
"Check Point Harmony Endpoint's pricing is more competitive than any other vendor."
"In addition to the standard licensing fees, there is a cost for support."
"Initial monies replacing all AVs with a single product is about £10k."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
831,020 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
51%
Financial Services Firm
8%
Government
6%
Computer Software Company
6%
Computer Software Company
17%
Government
8%
Manufacturing Company
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about BigFix?
The most valuable features of the solution are Windows patching and the hardware and software inventory.
What is your experience regarding pricing and costs for BigFix?
The pricing is competitive, but not the most competitive.
What needs improvement with BigFix?
BigFix could improve its asset management capabilities to discover assets, including hardware. More improvements could be made in asset management.
What do you like most about Check Point Harmony Endpoint?
The platform's most valuable features are the ability to build API, which meets our business requirements, and the VPN client, which provides VPN access from a single client.
What is your experience regarding pricing and costs for Check Point Harmony Endpoint?
Pricing is a bit expensive but justified by the product’s features, capabilities, and scalability. It is suitable for enterprises but can be challenging to position for small to medium customers.
What needs improvement with Check Point Harmony Endpoint?
Support needs improvement. Currently, support is primarily via email, which leads to longer response times. Fine-tuning for applications and better support from Harmony would be helpful, especially...
 

Also Known As

Tivoli Endpoint Manager
Check Point Endpoint Security, Endpoint Security, Check Point SandBlast Agent
 

Overview

 

Sample Customers

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Boston Properties, Independence Care System, Melbourne Convention and Exhibition Centre (MCEC), Courtagen Life Sciences, Carmel Partners
Find out what your peers are saying about BigFix vs. Check Point Harmony Endpoint and other solutions. Updated: January 2025.
831,020 professionals have used our research since 2012.