


BigFix and AWS Config compete in the area of IT management and cloud infrastructure governance. BigFix seems to have the upper hand in endpoint and device management while AWS Config excels in cloud-native integration and scalability.
Features: BigFix is robust in patch management, endpoint security, and automation tailored for enterprise IT management. AWS Config offers comprehensive cloud resource monitoring, compliance management, and seamless integration with other AWS services.
Room for Improvement: BigFix could benefit from a more modernized interface and enhanced reporting capabilities. AWS Config might improve in rule creation flexibility and richer integration with non-AWS resources. Both need to address different aspects to better meet modern IT demands.
Ease of Deployment and Customer Service: BigFix is noted for its straightforward deployment in on-premises setups and responsive customer support. AWS Config is praised for its integration with existing AWS services despite having a steeper learning curve for new users.
Pricing and ROI: BigFix has a higher initial setup cost but delivers substantial ROI through its comprehensive device management and automation. AWS Config offers a flexible pricing model that scales with usage, providing cost savings in dynamic cloud environments.
Everything we've gained from it makes my job easier day after day, and I see value in it as an engineer.
Microsoft Intune not only saves costs by reducing the number of personnel needed but also offers a comprehensive solution for managing laptops, applications, security, individual access, and enrollment.
With Microsoft Intune, tasks such as device provisioning, policy deployment, application delivery, and compliance enforcement require less manual effort than in more traditional management models.
I have seen a clear return on investment since using AWS Config.
When a support ticket is submitted, it directly reaches someone with Intune support expertise.
When I contacted Microsoft, they had the same expertise, if not more, which is phenomenal because I felt heard and my problem was solved.
Sometimes, the support provided is excellent, and the representative is knowledgeable, while other times, the service needs improvement.
We have not had any problems and have not requested support much, as we rely more on the manuals.
On a scale from one to ten, with ten being the highest quality, enterprise support provides timely responses, typically within four to eight hours.
Technical support from HCL is satisfactory unless there are customization requirements.
Whenever we need any kind of support, the BigFix team is present and available.
The scalability of Microsoft Intune is ten out of ten.
Ideally, we want to automatically segregate devices based on user properties like primary use, but currently, dynamic groups seem limited to device properties.
It supports organizations with 200 endpoints and those with more than 15,000 endpoints.
I think the scalability of AWS Config is good, as with just a few clicks we can bring up other instances or carry out different configurations for each of the ones we currently have.
It supports approximately two to three hundred thousand endpoints, demonstrating significant scalability capabilities.
BigFix requires some minimum configuration requirements.
We have not experienced downtime, bugs, or glitches.
It appears Microsoft Intune undergoes changes without informing customers.
In my experience, Microsoft Intune is a stable platform as it is a cloud-based service, and updates are regularly delivered by Microsoft.
I consider AWS Config to be a stable platform.
I have not faced any stability issues with the product.
Features like unlocking devices sometimes fail, and the support offered for other operating systems is insufficient.
There are communication issues, so you might start working with a feature without knowing if it will be deprecated six months from now.
Many third-party companies offer single-pane-of-glass reporting that shows you what your update environment looks like, how your patch is doing, application status, etc., but Intune's reporting is not intuitive.
AWS Config could be improved if they could generate some training as support because it is a gigantic platform with many solutions and a lot of information.
Building a management console is quick and simple, taking only one to two hours for setup.
The problem was related to the hardware configuration and hardware specifications.
In addition to reporting improvements, there should be a feature for application control to allow or disallow certain applications from being executed on endpoints.
Introductory professional services, like a fast-track service, were included with our E5 membership, and there have been no additional costs.
The Intune suite and add-ons, such as batch management and remote help, are costly.
It costs approximately forty euros per user per month.
The level of investment we are currently making for our backups is really worth it to have everything secure and able to recover all the information in any case of catastrophe.
The pricing is pretty good and now follows a subscription model similar to SolarWinds, making it easier for customers to subscribe and unsubscribe.
I rate the price for BigFix as medium, neither low nor high.
Intune excels in configuration and compliance management for Windows 10, ensuring devices receive timely updates and adhere to organizational standards.
Dynamic groups allow us to set conditions for automatic membership, eliminating the need for user intervention or manual review and ensuring a seamless workflow.
Windows Autopatch is the most valuable because it removes the burden of patch management.
With AWS Config, it is easy to find out which IPs belong to the list of suspicious IP addresses.
I find the documentation for the configuration part especially useful, as it really supports us in bringing up our instances, generating automatic backups, and allowing us to grant certain information or a certain level of access to certain users.
Patching is the most preferable feature that users choose BigFix for, making it a very important component.
The BigFix features that have proven most effective include inventory, software delivery, software distribution, software catalog, and both software and hardware management.
I use this mainly to capture inventory for IBM products, and as BigFix was part of IBM, it gets easily integrated with IBM solutions.
| Product | Mindshare (%) |
|---|---|
| Microsoft Intune | 4.6% |
| BigFix | 4.5% |
| AWS Config | 1.8% |
| Other | 89.1% |

| Company Size | Count |
|---|---|
| Small Business | 192 |
| Midsize Enterprise | 62 |
| Large Enterprise | 186 |
| Company Size | Count |
|---|---|
| Small Business | 30 |
| Midsize Enterprise | 12 |
| Large Enterprise | 68 |
Microsoft Intune is a cloud-based service designed for device management, security, and compliance. It supports automation and facilitates endpoint management for Windows, iOS, and Android devices, ensuring data protection and efficient policy enforcement.
Microsoft Intune offers seamless integration with tools like Windows Autopilot to automate device setup and deployment. Integrated with Azure Active Directory, it enhances policy management while providing robust reporting and analytics tools for compliance tracking. Despite its intuitive interface aimed at simplifying navigation and device security management, there are challenges such as compatibility issues with Linux and Mac, limited policy support for Android, and demands for better third-party integration. It's widely used for both corporate-owned devices and BYOD scenarios in dynamic IT environments.
What are the key features of Microsoft Intune?In industries such as finance and healthcare, Microsoft Intune is implemented to ensure data protection and compliance with regulatory standards. Manufacturing sectors utilize Intune for managing a distributed workforce across global locations, while educational institutions employ it to secure and manage devices in learning environments supporting both students and faculty.
AWS Config tracks and manages resource configurations, ensuring compliance and security. With historical analysis and effective tracking, users can identify threats and revert changes efficiently. Though some tools need updates, its core functionalities remain central to AWS resource management.
AWS Config serves as a crucial tool for tracking configuration changes across AWS resources. Users can log alterations, flag deviations, and auto-remediate configurations. It is essential in identifying security breaches, scanning for vulnerabilities, and maintaining change histories. Regular assessments on resources such as S3 and EC2 enhance security by monitoring potential threats and suspicious IP addresses.
What are AWS Config's key features?Organizations in finance and healthcare often implement AWS Config for stringent compliance tracking, ensuring resource configurations align with established regulations. Tech companies utilize its robust logging and remediation capabilities to protect against potential threats and maintain operational integrity, while government sectors rely on its comprehensive security features for critical infrastructure safety.
OVERVIEW:
HCL BigFix is a Unified Endpoint Management (UEM) and automation platform that delivers secure, resilient operations by reducing risk, cost, and operational complexity across on-premises, hybrid, and multi-cloud environments through a centralized control plane.
Built on a single-agent, multi-platform architecture, HCL BigFix unifies infrastructure security, endpoint management, remediation, and digital employee experience automation within a single platform, enabling IT Operations and Security teams to manage more than 155 million endpoints. As AI-driven vulnerability discovery accelerates through frontier models such as Mythos, HCL BigFix helps organizations reduce exposure with near real-time remediation, automated compliance enforcement, and continuous risk reduction. It integrates with leading vulnerability management solutions, including Tenable, Qualys, and Rapid7, and leverages 600,000+ out-of-the-box remediation Fixlets, 50,000+ compliance checks, and a proven >98% first-pass patch success rate to help organizations close the gap between vulnerability detection and remediation.
What are BigFix's key features?
Automated Patch & Vulnerability Remediation: Automates patch deployment and vulnerability remediation across workstations, servers, virtual machines, and cloud workloads using 600,000+ out-of-the-box remediation Fixlets.
Compliance Enforcement: Supports continuous compliance through 50,000+ compliance checks, automated policy enforcement, and prebuilt remediation content.
Enterprise Scalability: Manages and secures more than 155 million endpoints across over 120 operating system variants.
Centralized Endpoint Management: Delivers unified visibility and control across distributed environments through a resilient single-agent architecture.
Digital Employee Experience: Powered by AEX, HCL BigFix's agentic AI platform, enabling proactive monitoring, self-healing workflows, intelligent automation, and natural-language interaction.
What are potential benefits and ROI factors?
Reduced Cyber Risk: Near real-time remediation shortens exposure windows as AI-driven vulnerability discovery compresses exploitation timelines.
Lower Operational Costs: Consolidates endpoint management, security, and automation into a single platform, reducing tool sprawl and administrative overhead.
Operational Resilience: Maintains continuous compliance and policy enforcement across distributed environments.
Improved IT Efficiency: Automates routine endpoint operations and vulnerability remediation, reducing manual effort and accelerating response times.
Higher End-User Productivity: Resolves endpoint issues proactively to minimize disruption and improve employee experience.
Organizations across government, financial services, telecommunications, healthcare, manufacturing, and other regulated industries use BigFix for endpoint management, patching, compliance, software distribution, and vulnerability remediation. Support for standards including SCAP 1.3 and NIAP makes BigFix well suited for highly regulated and public-sector environments.
We monitor all Configuration Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.