How to choose the proper UEM platform
Endpoint devices have grown to be so ubiquitous, connected, and data-intensive they are being among the most valuable technology assets a business has today. They’re also a number of the biggest security risks. It’s no real surprise, then, that managing the large and growing amount of smartphones, laptops, tablets, desktops, along with other end-user products is really a high priority for this.
For an increasing number of enterprises, unified endpoint management (UEM) may be the approach to choice for keeping management of endpoints from descending into chaos. UEM platforms are made to simplify the management of devices and improve the security of heterogeneous environments.
On the list of key selling points of UEM is that it’s better using a large number of disparate mobility management tools that may find yourself increasing costs and decreasing efficiency for companies.
UEM platforms are software suites  basically;that provide a single management interface for endpoint devices in a organization. The technology evolved from and perhaps is replacing mobile device management (MDM) and enterprise mobility management (EMM) tools.
MDM products control mobile device functionality you need to include features such as for example device enrollment, handy remote control, device lockdown, and location tracking; EMM provides those features in addition to mobile information management, mobile application management, and mobile content management.
UEM broadens the enterprise management spectrum to add not only cellular devices, but additionally desktop and laptops, printers, wearables, and internet of things (IoT) devices with a single management console.
As more folks work remotely or in hybrid work environments – oftentimes using personal devices – so when more companies launch IoT and edge computing initiatives, UEM is becoming a lot more valuable for enterprises.
Choosing UEM software
Although UEM platforms from leading vendors may have a lot in keeping, no two offerings alike are completely. Enterprises should do their homework when evaluating your options available – and it’s really important to take into account that UEM is really a relatively new technology concept that’s still evolving.
Given how important endpoint management would be to an organization, it could be smart to conduct a proof concept or perhaps a pilot test before investing in a broad rollout. Creating a shift in vendors later along the way could possibly be difficult and costly. Most major UEM vendors offer 30-day free trials of these software.
A pilot program can be a sensible way to determine which features and capabilities are most crucial to the company. Trying out multiple platforms, when possible, offers a solution to make direct comparisons.
10 criteria for selecting a UEM platform
When evaluating UEM options, make sure to pay particular focus on these key factors:
1. Operating-system support. Thus giving a feeling of the breadth of the UEM tool across Windows, iOS, macOS, Android, and Chrome os's, says Andrew Hewitt, a senior analyst at Forrester Research. “Enterprises are increasingly seeking to satisfy the dependence on employee choice, especially when it involves device operating systems,” he says. “The more a UEM supports, the much more likely the enterprise can satisfy that require.”
Certain platforms support various os’s with varying degrees of granularity and features, says Phil Hochmuth, program vice president, enterprise mobility, at IDC. “Some vendors focus specifically on a particular operating system, such as for example Apple or Android,” he says.
2. Support for bring-your-own-device (BYOD) programs. This capability has an indication of specific investments the UEM provider has manufactured in iOS User Enrollment or Android Enterprise, Hewitt says.
“Due to shortages in devices within the last year, we’ve seen a growth in BYOD deployments,” he says. “The native enrollment models for BYOD from both Apple and Google give a baseline of security within an easy-to-enroll fashion, rendering it much smoother for organizations to obtain devices in to the hands of employees.”
3. Integration with other IT products. Partnerships a vendor has with other platforms used to aid IT or customers generally is another key consideration. “How well does the UEM platform integrate together with your ticketing system or your security information and login platform, or your endpoint security product?” Hochmuth asks. “Lots of the larger vendors now give you UEM and also other products such as for example these, and also have strong integration stories there.”
4. Device security policies. Companies have to be in a position to set policies regarding things such as jailbreaking, root detection, password setting, mobile threat detection, malware detection, anti-phishing, etc, Hewitt says. “Because data now lives beyond your four walls of the enterprise, ensuring device security for cellular devices is a lot more important,” he says. These kinds of features enable organizations to make sure that there is absolutely no compromise in mobile security.
Also important from the security standpoint is integration with identity and access management, remote access, and endpoint security tools “to aid dynamic policy and contextual access in addition to novel authentication methods,” says Dan Wilson, senior director analyst at Gartner.
5. Management automation. Organizations are increasingly seeking to save on costs with regards to deploying devices, because it’s an undifferentiated activity of their competitive environments, Hewitt says. These capabilities allow a completely automated deployment that occurs quickly, this means employees get devices faster and administrators spend less time on deployment.
6. Mobile application management (MAM)-only support. Can owner support a non-MDM deployment, in which a company only manages apps? “Don't assume all organization can get most of its employees to sign up an MDM, for both privacy and technical reasons,” Hewitt says. “MAM is an excellent option for privacy-minded employees, as the organization has no usage of their device, corporate apps just.”
The capability to provide standalone management of applications on unmanaged devices, in addition to application and data containment, is essential, Wilson says. This consists of “capabilities to segregate or isolate personal and corporate data,” he says.
7. Pricing. Pricing is definitely a key consideration for just about any technology investment, especially one which affects so many users. “Some UEM platforms could be had for relatively low priced if bundled with other sold by owner, or with regards to the licensing model for several software products,” Hochmuth says.
“In general, choose a per-user pricing model instead of a per-device pricing model, because so many customers are accessing multiple devices to accomplish work and can need several device managed and secured,” Hochmuth advises.
8. Regulatory compliance certifications. Offering certifications for initiatives like the Federal Risk and Authorization Management Program (FedRAMP), which gives a standardized method of security authorizations for cloud service offerings, is essential for government customers among others in regulated industries. Some organizations have unique requirements for compliance with rules like the General Data Protection Regulation (GDPR), MEDICAL HEALTH INSURANCE Portability and Accountability Act (HIPAA), and FedRAMP, Hewitt says.
“Customers in government and financial services generally search for these kinds of certifications, since they verify that the UEM involved has been tested and secured,” he says.
9. Conditional access. Can the UEM enforce conditional access policies across devices, apps, networks, etc? Conditional access may be the foundation of any mobility strategy, Hewitt says. It enables organizations to check across a variety of conditions to choose whether individual employees can access a resource. If the conditions are noncompliant, access is blocked.
10. Support for remote environments. Lots of people will work from your home or other remote locations, at the very least area of the time, for the near future. So it’s important that UEM platforms can support a remote and hybrid workforce. This permits IT administrators to troubleshoot both traditional and mobile endpoints in remote locations, improving user experience and limiting downtime for employees, Hewitt says.13 key UEM vendors
The major players in the UEM market are largely exactly the same ones which have held leadership positions in the MDM/EMM segment. They include a number of the biggest software companies on the planet.
To get you were only available in your research, listed below are brief descriptions of the major platforms available. You can even download an in depth comparison chart showing the features and functions provided by eight leading EMM/UEM vendors.
42Gears: 42Gears UEM supports Android, iOS, MacOS, Windows, and Linux, and was created to ensure it is easier for enterprises to migrate from legacy platforms such as for example Windows 7 to an EMM-compliant version such as for example Windows 10. It includes a single platform to control all endpoints, including desktops/laptops, employee-owned devices, IoT devices, gateways and sensors, ruggedized devices, wearables, and printers.
BlackBerry: BlackBerry UEM is really a multi-platform system that delivers device, app, and content management with integrated connectivity and security, and helps organizations manage iOS, macOS, Android, Windows 10, and BlackBerry 10 devices. Key features add a single interface, secure IP connectivity, user self-service, role-based administration, and company directory integration.
Cisco Meraki: Systems Manager , Meraki’s cloud-based UEM platform, provides central provisioning, monitoring, and securing of most endpoint devices in a organization, while keeping the enterprise network alert to constantly changing devices. The platform supports management of iOS, Android, Windows, macOS, Chrome OS, and tvOS environments. The Meraki cloud dashboard enables configuration and monitoring from the single console.
Citrix: Citrix Endpoint Management (formerly XenMobile) allows organizations to inventory, manage, and secure a variety of device types with an individual management console. Along with iOS and Android, Citrix provides controls and management for Windows 10, macOS, Chrome OS, thin clients, and Workspace Hub device types, using XenMobile as its foundation. It provides endpoint provisioning and configuration controls for device enrollment, policy application, and access privileges.
HCL Technologies: The vendor’s BigFix 10 endpoint management platform enables organizations to totally automate discovery, management, and remediation of endpoint issues, no matter location or connectivity. Features include BigFix Insights, which lets organizations quickly visualize risks in addition to costs, and multicloud management, gives administrators 360-degree visibility, control, and compliance enforcement of both on-premises and cloud endpoints.
IBM: IBM Security MaaS360 with Watson is really a cloud-based UEM platform that allows organizations to secure smartphones, tablets, laptops, desktops, wearables, and IoT devices. Watson artificial intelligence (AI) and predictive analytics provide alerts to potential endpoint threats and remediation in order to avoid security breaches and disruptions. MaaS360 protects apps, content, and data.
Ivanti: Ivanti Unified Endpoint Manager was created to simplify enterprise mobility, applying policies and personalization across all devices. ( Ivanti purchased MobileIron , another leading EMM/UEM vendor, in 2020.) Companies can use the system’s artificial intelligence to determine which devices and users get what type of access. The platform supports Windows, macOS, Linux, Unix, iOS, and Android os's. Administrators can gather detailed device data, automate software and operating-system deployments, personalize workspace environments, and address user issues.
ManageEngine: ManageEngine Desktop Central , a UEM platform from the IT management division of Zoho Corp., helps organizations manage servers, laptops, desktops, smartphones, and tablets from the central location. Enterprises can automate endpoint management routines such as for example installing patches, deploying software, and imaging and deploying os's. The platform provides management of IT assets and software licenses also, remote desktop control, and software usage monitoring. It supports Windows, macOS, Linux, Chrome OS, Android, iOS, iPadOS, and tvOS.
Matrix42: Matrix42 Unified Endpoint Management supports Windows, macOS, Chrome OS, Android, iOS, and iPadOS and may be accessed from the cloud, on-premises, or in a hybrid environment. The platform provides automatic deployment of applications and devices, real-time analysis and reports on usage, and access control for applications and sensitive data. Data is encrypted on cellular devices, and personal and business data are separated on BYOD devices.
Microsoft: Microsoft Endpoint Manager includes both Configuration Manager and Microsoft Intune , a cloud-native management tool for Windows and macOS desktops and cellular devices that delivers MDM and MAM. Enterprises can configure specific policies to regulate applications, such as for example preventing emails from being delivered to people beyond your organization. On personal devices, Intune makes sure an organization’s data stays protected and will isolate organization data from personal data.
Sophos: Sophos Mobile supports the management of Windows 10, macOS, iOS, and Android devices, providing policies and configuration, asset and inventory management, and detailed reporting on device usage. Organizations can install, remove and view apps, use containers to control content, provide compliance remediation and rules, and drive back threats such as for example malware and phishing.
SOTI: The SOTI One Platform allows companies to securely manage any device or endpoint, including IoT devices, with any form factor throughout its entire lifecycle. Supported OSes include Windows 10, macOS, Linux, Android, iOS, iPadOS, Windows Mobile, Zebra, and much more. The platform features SOTI Assist, a diagnostic help desk tool that lets technicians analyze, troubleshoot, and resolve mobile device and app issues from anywhere anytime.
VMware: VMware Workspace ONE is really a cloud-based platform for managing desktop, mobile, rugged, wearable, and IoT devices. It supports operating environments including Android, iOS, Windows 10, macOS, and Chrome OS. The platform offers data protection against security threats with conditional compliance and access policies, with a Privacy Guard feature made to manage privacy policies.
Related: Download our 2021 EMM/UEM vendor comparison chart