Try our new research platform with insights from 80,000+ expert users

BigFix vs Check Point Harmony Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 17, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

BigFix
Ranking in Endpoint Protection Platform (EPP)
26th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
97
Ranking in other categories
Configuration Management (6th), Patch Management (3rd), Unified Endpoint Management (UEM) (4th)
Check Point Harmony Endpoint
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.8
Reviews Sentiment
7.6
Number of Reviews
186
Ranking in other categories
Anti-Malware Tools (4th), Endpoint Detection and Response (EDR) (7th)
 

Mindshare comparison

As of August 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of BigFix is 1.2%, up from 0.8% compared to the previous year. The mindshare of Check Point Harmony Endpoint is 2.4%, down from 2.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP)
 

Featured Reviews

Bella Yakoby - PeerSpot reviewer
Offers third-party patching feature, good scalability, and enhance endpoint management capabilities
From the perspective of the team that's handling the environment, it's not so user-friendly compared to other solutions, the competitors. We hire new teams from time to time, and they are complaining, look, although BigFix is very robust and cross-platform, it's not so fun to work with. The user interface for the technical teams is not so advanced. It's not so intuitive compared to SCCM, compared to ManageEngine. And this is the fact that they have, with the teams, because they have the rejection. The look and feel of the system are old-fashioned. For new employees, it's less easy to find someone I don't need to educate on how to work with BigFix. Although it's easy, it's not as intuitive as the other solutions, and the functionality of the other solutions is less advanced. Let's summarize: The user interface has to be changed from the perspective of the teams that are managing the product. It's old school.
Nasseer Qureshi - PeerSpot reviewer
Comprehensive defensive features boost daily protection and efficiency
I see a need for improvement especially in policy management and policy customization with Check Point Harmony Endpoint. As a new user, I find it somewhat difficult to customize and apply policies due to the various options available. I would appreciate improvement in fine-tuning those policies and integrating with other tools, such as being able to send logs from Check Point to our SIM or syslog solution. The user interface is good, and I really appreciate it, but improvements are needed in policy customization and integration with third-party products. Additionally, I would prefer to see a mechanism to send agents directly from the console to an endpoint during installation.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature for us is the ability to manage TWS, the relevance is really what sets it apart. Also, using it as a software deployment tool is the key for us."
"The most valuable aspect of BigFix is its ability to patch desktops. While we have complete control over servers and can easily push patches to them, desktops pose a greater risk for leaks and vulnerabilities if patches are not installed in a timely manner. By using BigFix, we have significantly improved our ability to patch desktops, whether they are laptops, desktops, or other mobile devices used by end-users."
"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."
"It is user-friendly."
"The most valuable and essential features of BigFix are all of them, they are needed when serving the purpose of the desktop operation framework. We cannot run operations without patching or without having an appropriate mechanism for deploying software, et cetera. The features all serve their purpose for our use case."
"Almost every feature is wonderful in BigFix. It is very stable, and we can rely on it. It is an awesome tool."
"I’ve found patching to be the most valuable feature of the solution."
"It's easy to use, not complicated."
"Stability is good, and the product is well-designed for security needs."
"The forensics allows us to search retrospectively for an URL or file opened by users, for example, when you need to quickly check who else has clicked on a phishing link."
"One of the strengths of Harmony is its power to detect threats and keep us safe."
"The application runs very fast and does not affect the performance speed of the device where it is installed."
"The graphical interface is very easy to use and intuitive, which greatly facilitates the work and greatly facilitates the work and the location of threats on the users' computers."
"Its ability to rollback anti-ransomware once an attack has started is the most valuable feature."
"The license plans are also very nice and distributed - allowing for a separation between types of users with more basic or more advanced options."
"The solution offers multiple features in one solution, along with data detection."
 

Cons

"They need better integration."
"The look and feel of the system are old-fashioned."
"I would like better support on the backend."
"The stability is generally pretty good. The one thing that we came across is the battle between load on endpoints and load on our servers and relays versus how quickly, effectively and reliably actions can be taken. I'd like to not have to take an action on a system while I'm working with someone and then have to say whether something will happen between five seconds or thirty minutes from that point."
"I remember doing restarts a few times. So, making sure that it is rock solid from an executable perspective is important."
"Implementing a business solution with BigFix has some issues, primarily concerning the time required for distribution to clients if there are too many."
"I would like to see different types of reporting and the ability to integrate closer with the cloud."
"The solution should have some kind of a local caching methodology, where the patches can be taken locally into a localized relay server, and from there, the patch can be applied, so that there is not much usage of the network required."
"Technical support needs to be improved, along with the response time."
"Compared to other brands, we would like a dedicated anti-spam to be included in order to close the full circle."
"The SLA is slow."
"SandBlast Agent had moments in which it had a high load, we escalated it to the CheckPoint support that helped us to stabilize it. We had a problem with the parameterization of the solution. Once corrected by following the CheckPoint instructions, everything worked normally again."
"Sometimes the portal loads slowly which should be improved."
"The solution could improve VPN functionality and the VPN user-interface."
"Improvements are required in two key areas: notifications and setup simplification."
"They need to make the user interface on the server more intuitive and user-friendly."
 

Pricing and Cost Advice

"You get what we call the Platform Edition, which you get for free. The patch service is maybe $0.50 per workstation per month. Then there's the basic server cost, which is about $1.50 per server per month. You also get into Lifecycle which does power management, OSD remote control, and those types of things, and that might be about 10 times the price - which works out to about $13 per server and, maybe $5 per workstation per month."
"The price is reasonable, but our customers find it expensive."
"We have a subscription-based contract with BigFix."
"The tool's price continues to go up. The cost per endpoint can vary, ranging from approximately 30 to 80 dollars per year. Compared to other products, pricing is in the middle. You need to buy an additional database license, but most users already have it."
"The price of BigFix could be lower. However, I am always seeking a lower price."
"It might be about $23 a client."
"It is too costly. It is one of the best tools, but because of pricing, not all clients support it. Its licensing is on a yearly basis."
"There's not much big cost. We only have to pay the agents' cost for the server, and for the systems."
"Licensing comes free in that first year or is included in the base package. From a commercial point of view, it really just is the renewal cost, rather than a one-time fixed cost or buy-in."
"Price-wise, the product is affordable. There are no additional costs apart from the licensing charges that are attached to the product."
"The price is good."
"We implement this solution with a yearly subscription and there are no extra costs."
"The solution is too pricey."
"Choosing the correct set of licenses is essential because, without the additional software blade licenses, the Check Point gateways are just a stateful firewall."
"The tool’s cost has increased by almost 300% in two years."
"I bought them for 12 months and I genuinely cannot remember what I paid for them. I think it's about 100 pounds per user per year, so about 10 pounds a month per person."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
865,295 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Government
10%
Manufacturing Company
9%
Computer Software Company
9%
Computer Software Company
14%
Manufacturing Company
9%
Comms Service Provider
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about BigFix?
The most valuable features of the solution are Windows patching and the hardware and software inventory.
What is your experience regarding pricing and costs for BigFix?
The pricing is competitive, but not the most competitive.
What needs improvement with BigFix?
While performing integration, we face many issues with IBM solution. We need detailed information about those issues that can help users to mitigate them. The problem was related to the hardware co...
What do you like most about Check Point Harmony Endpoint?
The platform's most valuable features are the ability to build API, which meets our business requirements, and the VPN client, which provides VPN access from a single client.
What is your experience regarding pricing and costs for Check Point Harmony Endpoint?
I do not have much information about the pricing, setup cost, and licensing for Check Point Harmony Endpoint.
What needs improvement with Check Point Harmony Endpoint?
I think Check Point Harmony Endpoint could be improved by reducing false positives. Sometimes false positives occur, but I do not have more to add about the needed improvements.
 

Also Known As

Tivoli Endpoint Manager
Check Point Endpoint Security, Endpoint Security, Check Point SandBlast Agent, Check Point Antivirus
 

Overview

 

Sample Customers

US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Boston Properties, Independence Care System, Melbourne Convention and Exhibition Centre (MCEC), Courtagen Life Sciences, Carmel Partners
Find out what your peers are saying about BigFix vs. Check Point Harmony Endpoint and other solutions. Updated: July 2025.
865,295 professionals have used our research since 2012.