


BigFix and AWS CloudFormation are dominant solutions in endpoint management and infrastructure-as-code, respectively. BigFix leads in endpoint management with excellent compliance and inventory features, while AWS CloudFormation offers significant advantages in AWS-specific automation and configuration management.
Features: BigFix is known for robust patch management across multiple platforms, comprehensive reporting, and extensive API integration that allows efficient management of diverse environments. AWS CloudFormation excels in automation and configuration management within AWS environments, featuring infrastructure as code capabilities, excellent scalability, and efficient version control.
Room for Improvement: Users seek enhancements in BigFix's web UI and integration, with suggestions for improved speed and cloud integration. AWS CloudFormation users cite the need for better template customization and cross-platform flexibility, with calls for an improved user interface and better support for multi-cloud environments.
Ease of Deployment and Customer Service: BigFix is primarily deployed on-premises, receiving praise for its technical support despite varying experiences based on support tiers. AWS CloudFormation is known for its straightforward cloud-based deployment but faces criticism for its steep learning curve, despite offering robust support.
Pricing and ROI: BigFix offers flexible packages that are seen as costly but provide high ROI due to comprehensive feature sets, particularly in compliance and patch management. AWS CloudFormation is free to use, with costs based on resource usage, and is valued for its cost-effectiveness within AWS deployments, albeit without specific ROI figures.
Everything we've gained from it makes my job easier day after day, and I see value in it as an engineer.
Microsoft Intune not only saves costs by reducing the number of personnel needed but also offers a comprehensive solution for managing laptops, applications, security, individual access, and enrollment.
With Microsoft Intune, tasks such as device provisioning, policy deployment, application delivery, and compliance enforcement require less manual effort than in more traditional management models.
When a support ticket is submitted, it directly reaches someone with Intune support expertise.
When I contacted Microsoft, they had the same expertise, if not more, which is phenomenal because I felt heard and my problem was solved.
Sometimes, the support provided is excellent, and the representative is knowledgeable, while other times, the service needs improvement.
While this might be acceptable for some, it can be lengthy depending on the urgency of the issue.
Free support for AWS CloudFormation is not provided, and while some support is understandable due to its complexity, assistance for service-related issues should be accessible without a cost.
On a scale from one to ten, with ten being the highest quality, enterprise support provides timely responses, typically within four to eight hours.
Technical support from HCL is satisfactory unless there are customization requirements.
Whenever we need any kind of support, the BigFix team is present and available.
The scalability of Microsoft Intune is ten out of ten.
Ideally, we want to automatically segregate devices based on user properties like primary use, but currently, dynamic groups seem limited to device properties.
It supports organizations with 200 endpoints and those with more than 15,000 endpoints.
Splitting CloudFormation into multiple formations results in changes to resources like API gateway URLs and Cognito pools, which causes issues, especially when trying to maintain consistency across resources.
Adjusting capacity and functionality is a fundamental use.
BigFix requires some minimum configuration requirements.
We have not experienced downtime, bugs, or glitches.
It appears Microsoft Intune undergoes changes without informing customers.
In my experience, Microsoft Intune is a stable platform as it is a cloud-based service, and updates are regularly delivered by Microsoft.
It has been reliable and efficient in all my deployments.
Data loss can occur when splitting or scaling applications due to changes in resources.
It's a service that has been around for years, and it handles large complex deployments and updates with very good consistency.
Features like unlocking devices sometimes fail, and the support offered for other operating systems is insufficient.
There are communication issues, so you might start working with a feature without knowing if it will be deprecated six months from now.
Many third-party companies offer single-pane-of-glass reporting that shows you what your update environment looks like, how your patch is doing, application status, etc., but Intune's reporting is not intuitive.
It presents challenges for users unfamiliar with coding, posing as a barrier to fully utilizing CloudFormation.
Creating microservices and connecting multiple APIs into a single API gateway can be challenging; documentation should address specific needs.
Managing the correct order of resource creation and some updates can be tricky, especially with interdependent resources.
Building a management console is quick and simple, taking only one to two hours for setup.
The problem was related to the hardware configuration and hardware specifications.
In addition to reporting improvements, there should be a feature for application control to allow or disallow certain applications from being executed on endpoints.
Introductory professional services, like a fast-track service, were included with our E5 membership, and there have been no additional costs.
The Intune suite and add-ons, such as batch management and remote help, are costly.
It costs approximately forty euros per user per month.
AWS CloudFormation is free.
The pricing is pretty good and now follows a subscription model similar to SolarWinds, making it easier for customers to subscribe and unsubscribe.
Intune excels in configuration and compliance management for Windows 10, ensuring devices receive timely updates and adhere to organizational standards.
Dynamic groups allow us to set conditions for automatic membership, eliminating the need for user intervention or manual review and ensuring a seamless workflow.
Windows Autopatch is the most valuable because it removes the burden of patch management.
I can see the entire infrastructure and its connections through code.
Managing, maintaining, and deploying become easier as it allows the creation of the same resources on multiple accounts, making it efficient for infrastructure management.
The BigFix features that have proven most effective include inventory, software delivery, software distribution, software catalog, and both software and hardware management.
I use this mainly to capture inventory for IBM products, and as BigFix was part of IBM, it gets easily integrated with IBM solutions.
BigFix supports something known as Patch Policies, which allows users to define that whenever critical patches are released, they should get evaluated against machines and automatically deploy them.
| Product | Mindshare (%) |
|---|---|
| Microsoft Intune | 5.4% |
| AWS CloudFormation | 4.4% |
| BigFix | 5.2% |
| Other | 85.0% |

| Company Size | Count |
|---|---|
| Small Business | 153 |
| Midsize Enterprise | 59 |
| Large Enterprise | 180 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 8 |
| Large Enterprise | 17 |
| Company Size | Count |
|---|---|
| Small Business | 30 |
| Midsize Enterprise | 12 |
| Large Enterprise | 67 |
Microsoft Intune is a cloud-based service designed for device management, security, and compliance. It supports automation and facilitates endpoint management for Windows, iOS, and Android devices, ensuring data protection and efficient policy enforcement.
Microsoft Intune offers seamless integration with tools like Windows Autopilot to automate device setup and deployment. Integrated with Azure Active Directory, it enhances policy management while providing robust reporting and analytics tools for compliance tracking. Despite its intuitive interface aimed at simplifying navigation and device security management, there are challenges such as compatibility issues with Linux and Mac, limited policy support for Android, and demands for better third-party integration. It's widely used for both corporate-owned devices and BYOD scenarios in dynamic IT environments.
What are the key features of Microsoft Intune?In industries such as finance and healthcare, Microsoft Intune is implemented to ensure data protection and compliance with regulatory standards. Manufacturing sectors utilize Intune for managing a distributed workforce across global locations, while educational institutions employ it to secure and manage devices in learning environments supporting both students and faculty.
AWS CloudFormation provides scalable automation for infrastructure management using infrastructure as code principles while supporting JSON/YAML templates, empowering teams to efficiently manage resources across multiple AWS regions.
Designed to enhance efficiency, AWS CloudFormation simplifies resource management through automation, versioning, and template creation. Its integration within AWS accelerates setup and management of infrastructure by facilitating modular design and parameter management. DevOps teams benefit from these capabilities, easing deployment across complex environments. Despite its strengths, it could improve by enhancing speed, better error handling, user interface improvements, documentation, and integrating new AWS services while addressing licensing costs. Multi-cloud compatibility remains absent, which has some opting for alternatives like Terraform for broader deployment scenarios.
What are the key features of AWS CloudFormation?In industries like finance and healthcare, AWS CloudFormation automates infrastructure deployment, managing resources such as VPCs and EC2 efficiently. DevOps teams use it to ensure consistency through templates, facilitating quick, reliable service deployments while reducing manual error risks and enhancing scalability.
HCL BigFix offers a Unified Endpoint Management platform that enhances security, reduces costs, and simplifies IT operations across hybrid, multi-cloud environments through a centralized control structure.
BigFix streamlines enterprise IT management by integrating infrastructure security, endpoint remediation, and employee experience automation within a single platform. It enables IT Operations and Security teams to function efficiently from a unified control plane, managing over 155 million endpoints. Its robust architecture supports continuous compliance and automated vulnerability remediation, closing the gap between detection and fix. It excels in digital employee experience by ensuring proactive monitoring and utilizing agentic AI for self-healing workflows and intelligent automation, thereby reducing manual efforts and enhancing productivity.
What are BigFix's key features?Industries such as telecom, finance, and industrial facilities leverage BigFix for comprehensive patch management, software deployment, and inventory solutions. They benefit from its capacity to support endpoint security, compliance, and diverse operational needs, using it for vulnerability assessment and custom content creation.
We monitor all Configuration Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.