What is our primary use case?
Samsung Knox is a console which helps Samsung devices, such as tablets and phones. Samsung Knox is a console which does not have granularity support similar to other MDM platforms, but it is mainly used to update Samsung devices or for zero-touch enrollment procedures.
When working for an organization or purchasing devices for employees, licenses can be purchased in Samsung Knox. For security purposes, Samsung Knox is effective. Through Samsung Knox, a reseller can be added. When the reseller purchases any device, they will directly add those serial numbers into Samsung Knox. Once that serial number is entered into Samsung Knox, those serial numbers can be configured in such a way that users and employees who try to enroll the device will have a seamless zero-touch experience.
Users don't have to select multiple options in the device to enroll. For this feature, Samsung Knox can be used. When looking for high-end customization, app deployment, or enhanced security, MDM consoles such as AirWatch, InTune, MDM MobileIron, or multiple tools available in the market may be needed.
What is most valuable?
Samsung Knox is doing excellent work with its current offerings. For instance, Samsung Knox can be directly integrated with the MDM console. Additionally, users can seamlessly monitor security patch updates and push the patches. The status of a device can be known instantly, including information about how many devices are using which OS and which need updates. Campaigns can be run to update those OS patches.
All the features Samsung Knox provides work seamlessly. The zero-touch feature also works seamlessly. While other consoles perform these functions for their particular products, Samsung Knox is performing exceptionally well in the market.
What needs improvement?
Profile customization needs improvement. Samsung Knox currently has some intelligence features, but there are limitations in this console. It can only work with Samsung devices because the granular support is lacking and needs time to incorporate all these features.
For instance, it does not support Windows or several other devices. This limitation exists because Samsung Knox is specifically designed for Samsung devices. The future plans are uncertain. However, what Samsung Knox currently offers is good, and other consoles can support the features that Samsung Knox lacks.
For how long have I used the solution?
The solution has been in use for three years.
What do I think about the stability of the solution?
There is no downtime with Samsung Knox.
How are customer service and support?
The support service rates six out of ten because when personally reaching out to support, they are not quick enough. It is necessary to reach out to their TAM, who is their manager and point of contact, to get an answer. The response rate from the Samsung team is very slow.
When planning to buy Samsung Knox, this should be discussed with them to get better support through licenses. With more licenses, they may acknowledge requests and provide better support. Otherwise, they are very slow in nature.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
The reviewer has worked with InTune and Workspace ONE AirWatch.
How was the initial setup?
Integration is required first. Samsung Knox needs to be configured initially. Once configured for the first time, the process becomes simplified. For example, in our client's case, they ship Samsung Galaxy devices directly to employees.
When the end user receives the device, they simply open the box and attempt to enroll by entering their username and password. No additional steps are required beyond that. There are very few questions asked. Once authentication is completed, the user can proceed without selecting many options.
The system directly logs in, and the user receives apps pushed by the console. It is also integrated from the MDM. Certain apps are pushed to employees for their use. This ensures the work profile remains secure.
What about the implementation team?
For example, MDM was used as Workspace ONE. Through the EMM console, Samsung Knox was integrated with the API key and password account. Once integrated, it becomes a one-time process. Annually, the password may need to be changed and updated in Samsung Knox. Otherwise, it remains a one-time process.
After integration with MDM, all devices get synced with MDM and vice versa. MDM devices also sync with Samsung Knox. The integration proceeds this way, and profiles can be created for processes such as zero-touch enrollment. Zero touch is implemented when clients need to enroll their employees seamlessly. Multiple other enrollment methods are also available.
One client uses industrial devices, which requires a completely different enrollment process. These devices enroll through MDM without syncing with Samsung Knox, but patches are pushed through Samsung Knox. Apps are pushed through MDM, such as EFOTA to update patches. The integration is very good without issues. If issues arise, the support team in the backend can be contacted through a ticket system, and they will respond.
What was our ROI?
Cost savings are evident. This console is dependent on other MDMs as well. Regarding Samsung Knox specifically, it saves time in terms of patching and similar tasks. It provides good dashboards for understanding and quality metrics.
The return on investment is approximately 80%. The remaining 20% represents limitations because certain features are not available in Samsung Knox, which other consoles capitalize on in their marketing.
What's my experience with pricing, setup cost, and licensing?
The pricing information is unavailable as the client handled the purchasing of licenses directly. It appears to be relatively economical, which may have influenced the client's decision to purchase it.
Which other solutions did I evaluate?
There are significant differences between Workspace ONE and Samsung EFOTA. Workspace ONE has been established in the market for an extended period. Its best feature is the ability to support multiple device types without limitations.
It supports Windows, Linux, iOS, Mac, and various Android brands. Workspace ONE has no limitations regarding the types of devices it can manage. Additionally, InTune offers conditional access and co-management. Both AirWatch and MDM have MAM policy capabilities. Apps can be pushed without enrolling a device in Workspace ONE. These are the primary features, with multiple sublayers of features available. The complete documentation should be consulted as EMM includes various policies and enrollment types.
What other advice do I have?
The majority of clients use cloud-based solutions, though some utilize on-premises technology. Some clients also use Workspace ONE for on-premises deployment.
For customers planning to use Samsung devices, Samsung Knox is the necessary choice. With different types of Android devices, other consoles should be considered. Zero Touch is another option to examine.
For clients exclusively using Samsung devices, Samsung Knox is the optimal tool rather than Zero Touch. For devices such as Honeywell, Zebra, or other Android brands such as Xiaomi, Lenovo, or HCL, other market tools are available, including Zero Touch. It is advisable to evaluate other consoles before making a decision, as they might offer more benefits for certain brands.
On a scale of 1-10, this solution rates a 9.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?