Try our new research platform with insights from 80,000+ expert users

BigFix vs Cisco Secure Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.2
BigFix delivers fast ROI with efficient patch management, improved security, and reduced labor, enhancing efficiency and financial savings.
Sentiment score
7.4
Cisco Secure Endpoint enhances productivity and reduces costs by streamlining threat detection, integrating tools, and minimizing manual intervention.
 

Customer Service

Sentiment score
6.5
BigFix provides excellent customer support, with minor first-level inconsistencies, improved overall quality, and valuable community resources.
Sentiment score
6.1
Cisco Secure Endpoint support is praised for responsiveness and expertise, providing quick issue resolution and valuable user guidance.
On a scale from one to ten, with ten being the highest quality, enterprise support provides timely responses, typically within four to eight hours.
Technical support from HCL is satisfactory unless there are customization requirements.
Cisco has good technical support, especially considering these are newer solutions compared to traditional routing and switching products.
 

Scalability Issues

Sentiment score
5.7
BigFix excels in scalability, handling deployments from small to large seamlessly, supporting hundreds of thousands of devices efficiently.
Sentiment score
8.4
Cisco Secure Endpoint is scalable, integrates with SecureX for efficient management, and supports diverse industries without extra resources.
BigFix requires some minimum configuration requirements.
Cisco Secure Endpoint is definitely scalable.
 

Stability Issues

Sentiment score
5.9
BigFix is praised for its stability, requiring minimal intervention and maintaining performance during large-scale deployments and external challenges.
Sentiment score
6.5
Cisco Secure Endpoint is highly stable, reliable, and trusted for performance, earning high ratings from users in various enterprises.
We have not encountered any problems.
 

Room For Improvement

BigFix needs updated documentation, UI improvements, enhanced integration, better patch support, and improved automation and scalability.
Cisco Secure Endpoint requires better integration, reporting, and UI enhancements, alongside improved pricing, AI capabilities, and IoT support.
In addition to reporting improvements, there should be a feature for application control to allow or disallow certain applications from being executed on endpoints.
Building a management console is quick and simple, taking only one to two hours for setup.
BigFix requires some minimum configuration requirements.
The forensic capabilities need enhancement, especially for deep forensic data collection.
 

Setup Cost

BigFix offers flexible, competitive pricing options with various packages and potential discounts, despite additional costs like database licenses.
Cisco Secure Endpoint offers competitive and flexible pricing with value-rich features, despite some complexity in licensing.
The pricing is pretty good and now follows a subscription model similar to SolarWinds, making it easier for customers to subscribe and unsubscribe.
Cisco is aggressive in pricing, making it competitive and sometimes even cheaper than other good products like CrowdStrike, Microsoft Defender, or SentinelOne.
 

Valuable Features

BigFix is valued for ease, scalability, flexibility, real-time management, integration, single-console efficiency, and wide system adaptability.
Cisco Secure Endpoint provides advanced security features, cross-platform support, and ease of use with strong threat intelligence and support.
BigFix supports something known as Patch Policies, which allows users to define that whenever critical patches are released, they should get evaluated against machines and automatically deploy them.
I use this mainly to capture inventory for IBM products, and as BigFix was part of IBM, it gets easily integrated with IBM solutions.
The BigFix features that have proven most effective include inventory, software delivery, software distribution, software catalog, and both software and hardware management.
Cisco Secure Endpoint is very good in machine learning, which allows it to secure offline contents even if not connected to the internet.
 

Categories and Ranking

BigFix
Ranking in Endpoint Protection Platform (EPP)
27th
Average Rating
8.6
Reviews Sentiment
6.6
Number of Reviews
98
Ranking in other categories
Configuration Management (7th), Patch Management (4th), Unified Endpoint Management (UEM) (4th)
Cisco Secure Endpoint
Ranking in Endpoint Protection Platform (EPP)
26th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
49
Ranking in other categories
Endpoint Detection and Response (EDR) (20th), Cisco Security Portfolio (6th)
 

Mindshare comparison

As of September 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of BigFix is 1.2%, up from 0.8% compared to the previous year. The mindshare of Cisco Secure Endpoint is 1.5%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Market Share Distribution
ProductMarket Share (%)
Cisco Secure Endpoint1.5%
BigFix1.2%
Other97.3%
Endpoint Protection Platform (EPP)
 

Featured Reviews

Ravi Khanchandani - PeerSpot reviewer
Long-term partnership improves customer satisfaction and delivers efficient endpoint management
BigFix supports something known as Patch Policies, which allows users to define that whenever critical patches are released, they should get evaluated against machines and automatically deploy them. Their software distribution is very efficient because they use a pull mechanism rather than a push mechanism, allowing each machine to download from the closest repository and install themselves. The same assessment mechanism applies for real-time vulnerability remediation, allowing identification, evaluation, and automatic remediation across machines. Compliance metrics typically measure the patch percentages deployed against the number of endpoints, which could be various device types including virtual machines and mobile devices. Measurements are taken against each device type, looking into compliance percentages for browsers such as Chrome and Edge based on their versions.
Mark Broughton - PeerSpot reviewer
Tighter integration with Umbrella and Firepower gave us eye-opening information
We were using a third-party help desk. One of the ways that they were fixing problems was to delete the client and then add the client back if there was an issue where the client had stopped communicating. Any improvement in the client communicating back to the server would be good, particularly for machines that are offline for a couple of weeks. A lot of our guys were working on a rotation where the machine might be offline for that long. They were also terrible about rebooting their machines, so those network connections didn't necessarily get refreshed. So, anything that could improve that communication would be good. Also, an easier way to do deduplication of machines, or be alerted to the fact that there's more than one instance of a machine, would be useful. If you could say, "Okay, we've got these two machines. This one says it's not reporting and this one says it's been reporting. Obviously, somebody did a reinstall," it would help. That way you could get a more accurate device count, so you're not having an inflated number. Not that Cisco was going to come down on you and say, "Oh, you're using too many licenses," right away. But to have a much more accurate license usage count by being able to better dedupe the records would be good. I also sent over a couple of other ideas to our technical rep. A lot of that had to do with the reporting options. It would be really nice to be able to do a lot more in the reporting. You can't really drill down into the reports that are there. The reporting and the need for the documentation to be updated and current would be my two biggest areas of complaint. Also, there was one section when I was playing with the automation where it was asking for the endpoint type rather than the machine name. If I could have just put in the machine name, that would have been great. So there are some opportunities, when it comes to searching, to have more options. If I wanted to search, for example, by a Mac address because, for some reason, I thought there was a duplication and I didn't have the machine name, how could I pull it up with the Mac address? When you're getting to that level, you're really starting to get into the ticky tacky. I would definitely put the reporting and documentation way ahead of that.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
867,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Government
10%
Manufacturing Company
9%
Computer Software Company
8%
Computer Software Company
21%
Manufacturing Company
9%
Government
7%
University
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise66
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise14
Large Enterprise21
 

Questions from the Community

What do you like most about BigFix?
The most valuable features of the solution are Windows patching and the hardware and software inventory.
What is your experience regarding pricing and costs for BigFix?
The pricing is competitive, but not the most competitive.
What needs improvement with BigFix?
While performing integration, we face many issues with IBM solution. We need detailed information about those issues that can help users to mitigate them. The problem was related to the hardware co...
What do you like most about Cisco Secure Endpoint?
The product's initial setup phase was very simple.
What is your experience regarding pricing and costs for Cisco Secure Endpoint?
Cisco is aggressive in pricing, making it competitive and sometimes even cheaper than other good products like CrowdStrike, Microsoft Defender, or SentinelOne.
What needs improvement with Cisco Secure Endpoint?
Cisco Secure Endpoint lacks features like DLP which other vendors offer. XDR is new, so integration capabilities with third-party tools need improvement. The forensic capabilities need enhancement,...
 

Also Known As

Tivoli Endpoint Manager
Cisco AMP for Endpoints
 

Overview

 

Sample Customers

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank
Find out what your peers are saying about BigFix vs. Cisco Secure Endpoint and other solutions. Updated: July 2025.
867,341 professionals have used our research since 2012.