Try our new research platform with insights from 80,000+ expert users

BigFix vs Ivanti Endpoint Security for Endpoint Manager vs VMware Carbon Black Endpoint comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of August 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of BigFix is 1.2%, up from 0.8% compared to the previous year. The mindshare of Ivanti Endpoint Security for Endpoint Manager is 0.6%, down from 0.6% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 1.6%, down from 2.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP)
 

Featured Reviews

Bella Yakoby - PeerSpot reviewer
Offers third-party patching feature, good scalability, and enhance endpoint management capabilities
From the perspective of the team that's handling the environment, it's not so user-friendly compared to other solutions, the competitors. We hire new teams from time to time, and they are complaining, look, although BigFix is very robust and cross-platform, it's not so fun to work with. The user interface for the technical teams is not so advanced. It's not so intuitive compared to SCCM, compared to ManageEngine. And this is the fact that they have, with the teams, because they have the rejection. The look and feel of the system are old-fashioned. For new employees, it's less easy to find someone I don't need to educate on how to work with BigFix. Although it's easy, it's not as intuitive as the other solutions, and the functionality of the other solutions is less advanced. Let's summarize: The user interface has to be changed from the perspective of the teams that are managing the product. It's old school.
Chris Reece - PeerSpot reviewer
A security solution to manage devices with patching and remediation feature
The solution needs a complete overhaul or makeover. It gets stuck sometimes because they're focusing on the cloud UEM stuff rather than paying as much attention to that particular piece. The ease of use could be improved. It combines many different functionalities that you would need multiple servers like SCCM. If I wanted to train people, I’d move to a higher level from an Apache architect. There are five or six different products. So, training functional staff to use the product can be challenging because it can sometimes be cumbersome. Reporting is challenging. We use Avanti extraction to report off an endpoint. We don't use the reporting because of the need for more functionality, granularity, or customization.
Nikunj Kamboj - PeerSpot reviewer
Integrates well with our existing SIEM tool and helps in identifying suspicious activities
The solution's integration with our existing security infrastructure is good. Whenever we have any alert in VMware Carbon Black Endpoint, we can easily that alert in our SIEM tool and check logs from the SIEM tool itself. VMware Carbon Black Endpoint is just a secondary security tool for us, and we are just monitoring the alerts from it. The solution's behavioral analytics feature helps in identifying suspicious activities pretty well. Whenever we have even a small thing, we get an alert. The solution is deployed on the cloud in our organization. Performance-wise, the solution is doing great in terms of connecting to the host directly. Performing a malware scan usually takes a lot of time, more than 24 hours. A malware scan is something that we do only on Carbon Black for the old endpoint devices and servers. It used to take sometimes three days to perform. I would recommend the solution to other users. Overall, I rate the solution an eight out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"BigFix can manage lost devices, so you can wipe them remotely to ensure the IP doesn't get out in public. Unified endpoint security is a new perspective. I know that HCL is also collaborating with IBM, but I'm not sure if there is any cooperation between them and MaaS360 or other endpoint components."
"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."
"Patch Management for a variety of operating systems makes it valuable as we can rely on a single tool for obtaining patch compliance of the entire compute infrastructure."
"BigFix is incredibly fast and accurate in patching, reporting, and remediation."
"It's enabled us to have a highly successful endpoint patching program for the past decade. It's been enormously successful there. It's also become a core part of many of our business processes, from compliance monitoring of endpoints, encryption management, key escrow, and local administrator password escrow. It's built into our inventory. It's very much everywhere."
"The tool's most valuable features are patching and integration with vulnerability scanners."
"Vulnerability scanning and patch automation."
"The best feature of BigFix is its multi-platform support."
"The solution's most valuable features are its patch management functionality and provisioning."
"Patching and remediation are the strongest features."
"The most valuable feature of Ivanti Endpoint Security for Endpoint Manager, which my company mainly uses, is patching. Another valuable feature of Ivanti Endpoint Security for Endpoint Manager is that it allows you to view the inventory list of the different machines."
"The most valuable features of the solution are accessing the data through the mobiles and meeting with the compliance for security best practices."
"The best part about Ivanti and Matrix 42 is that they are low-code solution builders with drag-and-drop capabilities regarding service management."
"The key differentiator is that it manages mobile devices and laptops in the same console. Windows and Linux are on the same console. This is the only product that does this. It's really the best in the industry."
"Ivanti Endpoint Security for Endpoint Manager is cloud-based, which aids in deployment."
"The product has good stability."
"​Provides visibility into the chain of attack and threats that use valid operating system processes to execute attacks.​"
"The product is pretty strong in terms of security and their features are very good in that respect."
"It has the best live response feature."
"The solution is very useful and easy to handle. You don't need much intervention with this product."
"It is stable and easy to set up."
"Once the solution is installed and configured correctly it does not require a lot of hands-on attention until you need upgrading."
"Some of the valuable features I have found are the online documentation of the solution is well organized and thorough. I like the simplicity of bypass and the visualization of the active components."
"The product allows us to focus on endpoint and antivirus protection."
 

Cons

"I would eventually like to see a SaaS offering, a cloud-hosted BigFix instance where we only have to put a relay in our environment."
"I would like to see API connectivity, built-in API connectors to the standard toolsets, whether it's for your ServiceNow or your Qualys. More API connectivity to make it easier to integrate to other tools."
"I would like to see for it to be a little easier for new users to be able to learn and create relevant statements. In my opinion, that's the hardest part for bringing on new people that haven't had BigFix experience. Being able to have easier ways to build relevance in ActionScript would be the biggest improvement I'd like to see."
"Sometimes there is a lag time for our users."
"License management isn't quite as easy as it should be to deal with the licensing. You need to take the server down to import the new licenses which I find to be annoying."
"We're a partner, so we deliver technical support to customers. When we need to talk to the product support, traditionally, with the product over the last five years, I would not say support has been supportive. I hope that changes."
"The solution needs to improve console speed. I would like to see one console that does everything. It doesn't need to have a big client console."
"The deployment has room for improvement and can be more streamlined."
"One of the features that Ivanti could improve is patching for non-Windows settings, such as Linux and Ubuntu."
"Some of the GUI features need improvement. In particular, navigation could be better optimized for quick navigation by the user."
"An area for improvement in Ivanti Endpoint Security for Endpoint Manager is reporting. It's lacking. For example, Ivanti Endpoint Security for Endpoint Manager reports should tell you if the agent is up to date, if the security patch is updated, etc."
"It could benefit from faster integration with new technologies, such as quicker adaptation to Windows updates. Additionally, more advanced customization options would be valuable."
"When you open a new mobile, you automatically come onboard the mobile on the Ivanti platform but it needs some improvements."
"If I want to integrate the solution with any other solution, pushing the policies from the Ivanti side is a bit tough."
"The solution needs a complete overhaul or makeover. It gets stuck sometimes because they're focusing on the cloud UEM stuff rather than paying as much attention to that particular piece. The ease of use could be improved. It combines many different functionalities that you would need multiple servers like SCCM. If I wanted to train people, I’d move to a higher level from an Apache architect. There are five or six different products. So, training functional staff to use the product can be challenging because it can sometimes be cumbersome. Reporting is challenging. We use Avanti extraction to report off an endpoint. We don't use the reporting because of the need for more functionality, granularity, or customization."
"The product's blocking definition needs improvement."
"The local technical support is very poor, but the support from headquarters is very nice."
"At this point, we're test-bedding several other providers right now to see if there's anything that does equally or better and that comes at a better price point."
"The tech support communicates, but it's just not with movement."
"With the on-prem one, the bug has been reported by the community in early January or February, something like that, at the beginning of the year, and it's still not addressed. They have released two versions since then, and yet neither of them addresses this specific issue."
"I'm not sure as to the logic of how we've decided to customize it. We've only really used it since February and therefore there may be more to do on that front. That's why it's hard to say if something is missing or if we just aren't utilizing it."
"The directions for Splunk are spot on, but it is difficult to find anything on integration with AlienVault,"
"Needs improvement in the area of infrastructure for on-premise installation.​"
"Based on all the security roles and the release privilege, it could take time for an application to be whitelisted and approved for use."
 

Pricing and Cost Advice

"Compliance, inventory, and licensing are really pricey. They should lower the price. It discourages users from getting onboard."
"The price of BigFix could be lower. However, I am always seeking a lower price."
"It is too costly. It is one of the best tools, but because of pricing, not all clients support it. Its licensing is on a yearly basis."
"The price is reasonable, but our customers find it expensive."
"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."
"We have a subscription-based contract with BigFix."
"Its price is very reasonable."
"You get what we call the Platform Edition, which you get for free. The patch service is maybe $0.50 per workstation per month. Then there's the basic server cost, which is about $1.50 per server per month. You also get into Lifecycle which does power management, OSD remote control, and those types of things, and that might be about 10 times the price - which works out to about $13 per server and, maybe $5 per workstation per month."
"The pricing is relatively high compared to some competitors."
"On a scale from one to ten, where one is low and ten is high, I rate the solution's pricing ten out of ten."
"On a scale of one to ten, where ten is the highest, and one is the cheapest, I rate its pricing a five."
"Ivanti Endpoint Security for Endpoint Manager is more expensive than some of the products I've used. It follows module-based licensing, so it would be more costly if you had more modules. Your costs depend on what modules you need."
"The licensing is based on assets for MDM or EM, where you need one license per asset. The license is annual, and it is not very expensive."
"The solution is pretty expensive."
"The product is expensive."
"The pricing is very high."
"The product is expensive. There are some additional costs apart from the standard licensing charges attached to the solution."
"Carbon Black provides competitive pricing."
"Carbon Black might be a touch more expensive than Symantec. They tend to get a premium for their capabilities. They're sort of an industry leader in a lot of areas with the functionality that they provide."
"It's reasonable in price"
"The product is quite reasonable."
"The solution has almost the same price as other different kinds of infrastructures, but it offers a lot of different features."
"The licensing cost is on the more expensive side, but I thought it was worth it because they did a good job. It was one of the vendors I truly didn't have to worry about too much until this latest upgrade."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
864,574 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Government
10%
Manufacturing Company
9%
Computer Software Company
9%
Computer Software Company
16%
Manufacturing Company
11%
Financial Services Firm
9%
Government
8%
Computer Software Company
13%
Financial Services Firm
11%
Government
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about BigFix?
The most valuable features of the solution are Windows patching and the hardware and software inventory.
What is your experience regarding pricing and costs for BigFix?
The pricing is competitive, but not the most competitive.
What needs improvement with BigFix?
While performing integration, we face many issues with IBM solution. We need detailed information about those issues ...
What do you like most about Ivanti Endpoint Security for Endpoint Manager?
The most valuable features of the solution are accessing the data through the mobiles and meeting with the compliance...
What needs improvement with Ivanti Endpoint Security for Endpoint Manager?
Some of the GUI features need improvement. In particular, navigation could be better optimized for quick navigation b...
What is your primary use case for Ivanti Endpoint Security for Endpoint Manager?
I use Ivanti Endpoint Security for Endpoint Manager ( /products/ivanti-endpoint-security-for-endpoint-manager-reviews...
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) s...
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoin...
What do you like most about Carbon Black CB Defense?
VMware Carbon Black Endpoint is a highly stable solution.
 

Also Known As

Tivoli Endpoint Manager
LANDesk Security Suite, Ivanti Endpoint Security
Carbon Black CB Defense, Bit9, Confer
 

Overview

 

Sample Customers

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Otkritie Bank, France T_l_visions, MBDA, 21st Century Oncology, Sealed Air Corporation, Granite School District, The Bunker, The MAC Services Group, Adams 12 Five Star Schools District, AlliedBarton Security Services, Mohawk Industries, Sun National Bank
Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America
Find out what your peers are saying about Microsoft, CrowdStrike, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: July 2025.
864,574 professionals have used our research since 2012.