Jamf Pro

My main use cases for Jamf Pro  involve it being the greatest MDM  solution for Apple devices, whether iOS, macOS, or tvOS. I am specialized in macOS and understand how its structures and API calls can be used for customization within MDM . I write custom P lists using JSON schema for multi-stage configuration changes for the operating system, as well as zero-touch enrollment and control through scripting. With a decade of experience in macOS, that is my strong point.

While I would not say I particularly favor Jamf Pro , I understand that the operating system's features and abilities greatly influence its effectiveness with MDM solutions. Jamf Pro was the first MDM solution to work with macOS in daemon form, continually checking in from the server to devices. Previously, communication only occurred via APNS, which limited management capabilities. The daemon setup allows for constant checking and configuration pushing, greatly benefiting large deployments and automation efforts. Many MDM solutions today still lack this capability.

Regarding the self-service feature, I note that Jamf Pro recently released Self-Service Plus, integrated with compliance and identity control. Currently working with a banking organization, I prefer hands-on experience, but the described features seem top-notch and aligned with security solutions. It reflects their understanding of rapidly changing infrastructure.

I had AWS  cloud configuration with Jamf Pro at Cognizant, but the organization prefers licensed-based SaaS operations instead of maintaining instances. In some banking sectors, if Jamf Pro completes its security audits and SOC audits, they also prefer cloud options. Ultimately, Jamf Pro runs its instance on AWS .

Jamf Pro's inventory management contributes to lifecycle management and procurement decisions depending on the organization. Lifecycle management is straightforward with Jamf Pro, as it records all information. Admins can guide device training flows easily, integrating with ServiceNow  for additional customization and updates through APIs.

The main benefits I see from using Jamf Pro depend heavily on the admin's configuration and the organization. For a dynamic MDM solution for macOS, I always recommend Jamf Pro. Conversely, identities from other providers offer essential functions too. Organizations can manage macOS devices cost-effectively with Intune  for basic needs.

I would still say that Jamf Pro's automated patch management requires development and improvement. Patch deployment comes from certain CDN  servers, yet the process lacks control and transparency. Sometimes deployment fails without clear visibility for both users and admins, which still needs improvements.

In addition to patching, I see potential for improvement with Jamf Pro. Something similar to JumpCloud , where identity can sync with devices upon enrollment, would be valuable. Implementing a solution to maintain constant identity control, especially considering limitations due to FileVault, could enhance functionality.

I have been working with Jamf Pro since it was Casper  9, which has been since 2017.

I find Jamf Pro scalable, but larger organizations should inform Jamf Pro for instance management. High loads may require monitoring for load balancing, particularly when running numerous processes in Jamf Pro. I have utilized custom scripts for OS updates that Jamf Pro monitors, necessitating careful management of device traffic communication.

My benefits from Jamf Pro's integration with Azure AD  and G Suite for identity management are somewhat limited. I can configure SSO  and use Entra ID as an identity provider. The customization depends on organizational preferences. While Azure AD  offers good solutions for SSO  and OIDC configurations, it lacks the dynamism of solutions like Okta or OneLogin , being static at a user management level. Jamf Pro manages security components effectively through smart groups, which can quickly update status and block non-compliant devices.

I have not used Jamf Pro's reporting features in a long time. Jamf Pro is not an antivirus but effectively manages macOS devices, notably in detecting suspicious activities and compliance control when using Jamf Protect . I recognize its effectiveness but lack recent hands-on experience.

My advice for organizations considering Jamf Pro is that it varies by organization. Many struggle with fundamental features, particularly around security contexts. Collaboration between developers and security teams is vital for understanding product capabilities. Despite challenges, I believe it is an excellent, customizable solution for managing macOS devices. I would rate this review a 3 for customer service.