No more typing reviews! Try our Samantha, our new voice AI agent.

BMC Helix Client Management vs BigFix comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
115
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
BigFix
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
100
Ranking in other categories
Configuration Management (10th), Endpoint Protection Platform (EPP) (24th), Patch Management (7th), Unified Endpoint Management (UEM) (10th), Autonomous Endpoint Management (5th)
BMC Helix Client Management
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
7
Ranking in other categories
Mobile Device Management (MDM) (11th), Endpoint Compliance (8th)
 

Mindshare comparison

Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
BigFix1.7%
Microsoft Defender for Endpoint6.7%
CrowdStrike Falcon5.8%
Other85.8%
Endpoint Protection Platform (EPP)
Mobile Device Management (MDM) Mindshare Distribution
ProductMindshare (%)
BMC Helix Client Management4.8%
Jamf Pro11.9%
NinjaOne6.8%
Other76.5%
Mobile Device Management (MDM)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
InderjeetSingh4 - PeerSpot reviewer
Administrator at a tech vendor with 10,001+ employees
End-to-end automation has simplified patching and software deployment across thousands of servers
There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initiated through the patch policy, it appears on the console but arrives in chunks. When targeting hundreds of servers from the patch policy, the actions come in chunks such as ten out of six, ten out of nine, or ten out of fifteen. This fragmented approach creates a significant challenge for the patching team to monitor the action status. I would recommend that the development team provide a single action or one to two actions instead of multiple actions requiring individual monitoring. A broad status update could be provided to the client indicating the overall progress of the patch policy implementation rather than requiring monitoring of every individual action. This would reduce the bandwidth required by the team to track multiple actions on the console.
AA
Senior Account Executive at FDS
Efficient remote control capabilities; compliance features greatly reduced customers' licensing costs
The on-premises version of BMC Client Management has powerful remote control functionality and decent compliance features, but these features both rely on the discovery tool in order to gain a complete set of insights about the endpoint's environment. Now, BMC's discovery solution depends on having an agent installed in each endpoint and sometimes the agent doesn't work properly, making it difficult to get an accurate understanding of the environment (including special topologies) even with BMC's discovery tool. This can be a pain when it comes to the area of compliance, since you might not have full access to everything running in the organization, including important infrastructural components such as servers and databases. For example, some endpoints may have gotten their software updates from servers not visible to the discovery tool, and this can further impact operations when it comes to patch management. Compare this scenario with the way Red Hat handles patch management: their software is always updated from the main patch providers, so you will always know what is running on the endpoints in this kind of environment. Although their endpoint management has its pros and cons, this is where BMC Client Management is at a bit of a disadvantage and I believe they need to improve on this area. Another area BMC could look into improving is the mobile device side of client management. It has lots of support for Microsoft products in terms of client management, but lacks comprehensive mobile device management support, such as for Android devices.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I like about Cortex XDR by Palo Alto Networks is that it is a comprehensive solution that contains everything the organization may need when using endpoints."
"Cortex XDR is a very capable solution for protecting large networks and a lot of endpoints. It's very useful because the automation is very high, and if you combine it with the features on Palo Alto firewalls, it provides very strong protection."
"We have a complete overview of all our PCs and it's very easy to handle and to use the interface. It has a lot of benefits for us."
"We use it for malicious connections from malicious websites, to identify payloads that might be inside the traffic, to identify malicious processes or bugs that are running on the network, and any activities that tend to lead to data infiltration."
"I recognize that Cortex XDR by Palo Alto Networks is one of the best products in its category regarding capabilities."
"The dashboard is customizable."
"The product's most valuable features are massive user and feature intelligence exploit detection."
"Based on my experience, I would recommend Cortex XDR by Palo Alto Networks to other people."
"We did a proof of concept, looked at the other competitors and after scaling all of them on a matrix, IBM ended up being the best option for us."
"The most valuable feature of BigFix is the software deployment."
"We are able to go from patching thousands of machines by twenty to thirty people to one person."
"What I like most is that it is a powerful solution."
"The stability on this solution is rock solid; I will put money up against it, and BigFix is absolutely unbelievably stable."
"Patch Management for a variety of operating systems makes it valuable as we can rely on a single tool for obtaining patch compliance of the entire compute infrastructure."
"It has improved reliability upon delivery of software and has also helped reduce software expenses. The extensibility of BigFix helps to create custom solutions where we may have considered purchasing something instead."
"I think BigFix is a very good solution, and I rate it ten out of ten."
"The support from BMC Client Management is very good."
"It's a scalable solution. We have deployed it for customers using 3000 nodes to those using 300,000 nodes."
"The most valuable features of the solution are patch management and software license management."
"One of our customers is a financial institution with more than 15,000 endpoints, and we use BMC Client Management to manage their regulatory compliance needs, manage the endpoints from a security perspective, and integrate it with service management as well."
"One feature I like, that was especially valuable during the pandemic, is remote control. Remote control grants administrators and support personnel access to the laptops and PCs of employees (who might be working from home) in order to fix any issues that come up as and when they come up, even without having to wait for a support request."
"BMC Client Management is a stable solution and one of the best in the market. It allows me to manage all recipe endpoints, including iOS, Android, Linux, Unix, and Windows, all within the same solution."
"The most valuable features of the solution are its patching capabilities and the help it offers when it comes to use cases, like prompting for the reboot after a certain period of time."
"The solution provides multiple features in one place."
 

Cons

"The onboarding process could be better."
"A potential area of improvement for Cortex XDR by Palo Alto Networks is the cost."
"The MAC agent is not as robust feature-wise as the PC version."
"There's an overall lack of features."
"I have run into some detection issues with Cortex XDR. It needs to be better at detection of internal attacks."
"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."
"The main issue I could point out is the offline agents and the way that it is missing."
"If they had pulse rate detection, it would be better."
"I remember doing restarts a few times. So, making sure that it is rock solid from an executable perspective is important."
"Sometimes the workstations communicate back to the BigFix server two or three days in a week or something similar. Sometimes there can be a delay reporting back to the server for a variety of reasons, such as users turning their computer off when they go home. When the user comes back and turns the computer back on BigFix needs to synchronize and sometimes it can take some time, approximately one week. The communication between the agent and the server should be faster, there is room for improvement in this area."
"The scalability of the web UI product doesn't scale to the size that we need for our implementation so it needs to expand. I would also like to see the capability to develop on the back of the web UI capability. There are lots of web features and integrations that we could do with web UI that it would be nice to be able to put on top of what's already there, rather than waiting for IBM to develop what we need."
"Upgrading from an Evaluation license to a production license is not error free."
"I self-taught for this online, so the initial setup was a little difficult to pick up at first. I had to create a couple of testing environments and destroy them in order to learn how to use it. There was a lot of trial and error, a lot of reading of the manuals."
"Sometimes there is a lag time for our users."
"License management isn't quite as easy as it should be to deal with the licensing. You need to take the server down to import the new licenses which I find to be annoying."
"While performing integration, we face many issues with IBM solution. We need detailed information about those issues that can help users to mitigate them."
"The solution does not offer the functionality of remote access to users."
"BMC Client Management could improve in the area of integration."
"The solution needs to add whitelisting because many customers request it."
"BMC Client Management supports only iOS devices. It would be good if they would support Android as well."
"The on-premises version of BMC Client Management has powerful remote control functionality and decent compliance features, but these features both rely on the discovery tool in order to gain a complete set of insights about the endpoint's environment. Now, BMC's discovery solution depends on having an agent installed in each endpoint and sometimes the agent doesn't work properly, making it difficult to get an accurate understanding of the environment (including special topologies) even with BMC's discovery tool."
"It would be good if BMC Client Management can perform vulnerability assessment scanning at the endpoint on its own and mitigate that. Then, we wouldn't have to rely on a third party VA tool. I would like to see this application move to being a web-based one."
"In BMC Client Management, I would like to see more features for executing commands remotely. For example, with SAP, there isn't the capability to execute all the commands available in the console. The latest version includes more endpoints, but they do not cover everything the operations team needs. Additionally, I think improving the hierarchy for managing endpoints is crucial. Extending the endpoint capabilities would be highly beneficial."
 

Pricing and Cost Advice

"The tool's price is moderate."
"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"Very costly product."
"Cortex XDR's pricing is ok."
"It is "expensive" and flexible."
"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."
"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."
"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."
"We have a subscription-based contract with BigFix."
"The license is subscription-based."
"The price of the solution is high. There are not any additional fees from the standard license."
"The price is very fair."
"There's not much big cost. We only have to pay the agents' cost for the server, and for the systems."
"When purchasing, buying with other IBM tools provided us with a very good discount in pricing."
"The cost is slightly high."
"It is too costly. It is one of the best tools, but because of pricing, not all clients support it. Its licensing is on a yearly basis."
"BMC Client Management is a high-priced solution, but given its performance and capabilities, I think it offers great value. I don't have the exact number for the yearly licensing costs. I believe there is an additional cost of around two hundred dollars."
"To use BMC Client Management they charge annually per node."
"The solution is low cost."
"BMC Client Management is a very affordable solution. There is one main server license which I believe is around $1,000 per year, and then there is the license for the actual solution. With the solution license, you can opt for a suite license where you get access to all the features and benefits, or alternatively you can buy any of the five main components of the suite license individually."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
10%
Financial Services Firm
13%
Manufacturing Company
9%
Government
7%
Construction Company
6%
Financial Services Firm
11%
Retailer
10%
Government
9%
Computer Software Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise54
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise68
By reviewers
Company SizeCount
Small Business7
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for BigFix?
I rate the price for BigFix as medium, neither low nor high.
What needs improvement with BigFix?
There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initia...
What is your primary use case for BigFix?
My current use case involves being one of the products and one of the clients implementing this tool.
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Tivoli Endpoint Manager
BMC Helix Client Management, Helix Client Management, BMC Fromdistance Mobile Device Management
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Charter Manufacturing
Find out what your peers are saying about Microsoft, SentinelOne, CrowdStrike and others in Endpoint Protection Platform (EPP). Updated: July 2026.
908,800 professionals have used our research since 2012.