UEM: Choosing the Right Platform

Unified Endpoint Management (UEM) tools are a group of sophisticated products that provide management, security, configuration and provisioning services for apps and devices on Windows 10, macOS, iOS, Chrome, Android, Linux, but also connected objects and connected clothing systems .

Continuation of the article below

The way UEM tools perform these tasks varies widely. Therefore, it can be difficult to determine which platform is best for your environment. It should be noted that all of the products presented below are suitable for SMEs and large companies and have free evaluation periods.

There are a few key points to consider when evaluating a UEM tool:

Gartner’s Magic Quadrant and Customer Choice Ratings. The products of large companies such as Microsoft, Blackberry, VMware and IBM offer a wide range of tools that are brought together in various by-products for the EMU. This allows more features to be offered, but can be confusing as to which ones are needed or which actually make up the UEM platform. If in-house IT already knows a vendor, it may be wise to stick with that vendor as it can keep costs down, especially when it comes to the onboarding process. 42 gears

SureMDM, 42Gears’ UEM platform, scored 4.7 out of 5 in the Gartner Customer Choice Awards – the highest rating of any product in the company’s Magic Quadrant for 2019. SureMDM is one of the few products that supports all types of operating systems, including Linux systems, IoT devices, wearables, rugged endpoints, kiosks and printers. It offers unlimited scalability and flexible licensing, including a free license for up to five devices. However, the software development kit (SDK) is limited, which limits the platform for developing and securing custom applications. It doesn’t support VDI, but it can be deployed locally or taken over in cloud mode. However, the local version has certain restrictions and is only offered for billing at the covered terminal.

SureMDM is offered according to three price offers:

Free: Five devices. Standard: $ 3.99 per month per device. Premium: $ 5.94 per month per device. Business: $ 7.99 per month per device. blackberry

Once a leader in the mobile device market, BlackBerry is now a major player in the EMU market with a special product included in its Enterprise Mobility Suite. BlackBerry stands out from the competition with a full suite of mobility products, such as: B. BlackBerry Workspaces, BlackBerry Dynamics for Security and a personalized IAM (Identity and Access Management) product that can be combined. The UEM tool is available in all editions of the Blackberry Enterprise Mobility Suite:

Management Edition: Basic UEM functions. $ 3 per user per month. Enterprise Edition: Includes UEM, secure browser, and native messaging. $ 5 per user per month. Collaboration Edition: Includes UEM, secure browser, native email, secure instant messaging, file collaboration, MAM, MCM (Mobile Content Management), and the provision of SSO and third-party applications. $ 10 per user per month. Application Edition: Includes UEM, secure browser, native email, secure messaging, file and message collaboration, SSO, third-party application delivery, but also two-factor authentication for cloud, VPN and third-party applications. $ 15 per user per month. Content Edition: Adds Enterprise File Sharing and Synchronization (EFSS), Digital Rights Management (DRM) and Document Audit Trail to the components of the previous edition. $ 25 per user per month. Citrix

Citrix is ​​one of the few vendors to support VDI environments with its Citrix Endpoint Management product, formerly known as XenMobile. It is also connected to Microsoft’s Office 365 and Intune applications and supports on-premises Microsoft Exchange policies.

The prices are set per device or per user. The enhanced version starts at $ 110 per device and $ 143 per user. For the Enterprise Edition, potential customers should contact Citrix directly.


IBM’s UEM platform, MaaS360, is a strictly cloud-based tool that can be fully integrated with Watson to provide comprehensive analytical capabilities. MaaS360 supports older versions of Windows and offers a wide variety of features including support for connected objects and wearables. IBM values ​​security and features such as mobile threat defense as a key differentiator.

MaaS360 is only in SaaS; The price is set per user or per device. There are four editions:

Basics: $ 4 per device or $ 8 per user.

Deluxe: $ 5 per device or $ 10 per user.

Premier: $ 6.25 per device or $ 12.50 per user.

Enterprise: $ 9 per device or $ 18 per user.

IBM offers monthly or yearly billing options with a year-round commitment.


Ivanti offers two UEM products: Endpoint Manager, which is primarily aimed at SMBs, and Unified Endpoint Manager, which is more comprehensive and includes user profile migration on Windows 10, data normalization, and other advanced features that are missing in version first. Ivanti supports most operating systems, including Linux, as well as connected objects and wearables. However, it lacks containerization, SDK, Office 365 configuration management capabilities, and IAM. Ivanti cites the following as a differentiator:

Automatic subnet selection to reduce management; Passive detection of devices connected to the environment; Dynamic management of bandwidth to limit consumption for administrative purposes when it is limited.

To find out the prices and to receive a personal offer, please contact the publisher directly.


ManageEngine offers Desktop Central locally, which supports Linux and Windows systems prior to version 10, but not VDI or Office 365 environments. Although it does not provide SDK or IAM functionality, the publisher does offer them to separate Active Directory (AD) management software. Its main strengths are: 250 ready-to-use scripts, support for 40,000 terminals with a single server instance and a pricing model with a free edition for 25 laptops and 25 mobile terminals, and the management of individual terminals for less than $ 2 a month.

Free: Up to 25 laptops and 25 mobile devices. Professional: $ 795 per year. Business: $ 945 per year. EMU: $ 1,095 per year.

There are also monthly and user rates.


Microsoft offers Intune for its UEM platform as part of its Enterprise Mobility and Security (EMS) suite. The publisher claims to manage more than 175 million devices worldwide. Microsoft users can also access UEM functionality from products other than the EMS suite. For example, Office 365 also includes UEM functionality, and the suite uses System Center Configuration Management (SCCM), Intune, and Azure, among others, to complete the functionality.

Microsoft’s key differentiator is the Microsoft Shop license agreement, which makes the UEM suite and features available to other Microsoft users at no additional cost. However, the editor has found that a large percentage of those who have access to their UEM product are not using it – likely because they don’t know they can use it.

Although each of the components of the EMS suite is available independently, together they offer their full potential. Most customers choose either Enterprise Mobility and Security E3 / E5 or Microsoft 365 E3 / E5, which provides access to UEM tools.

The price is per user or per device. The E3 version starts at $ 8.74 per month per user and the E5 version starts at $ 14.80 per month per user. Intune is available separately for $ 6 per month per user.


MobileIron UEM and its broader Enterprise Mobility Management (EMM) platform have a reported customer base of more than 17,000 companies, and the publisher holds a patent for its enterprise application store. MobileIron’s product offers features such as VDI support, SDK, IoT and wearable support, as well as a comprehensive suite of IAM functions that go down to zero. Please note that the popular MobileIron Access and MobileIron Threat Defense are different from the UEM product.

The prices are per user or per device on three levels: silver, gold and platinum. For UEM Silver, the list price starts at $ 48 per year. Perpetual licenses are offered for local deployments. But it is also possible to opt for an annual subscription – this is the only option for the cloud offer.


The Sophos Mobile product supports Windows 10 and macOS devices. However, the product does not include an identity and access management component. Unfortunately the publisher does not explicitly address the question of the available connectors. Sophos offers a suite of three products with different UEM capabilities:

Mobile security: Management is only done through Sophos Central. Mobile switchboard: Management is done either via Sophos Central or via an internally provided console. Management of mobile applications is added to that of terminals. Advanced Mobile: Here, too, local provision or cloud service with management of terminals and applications, but also of content. With the bonus container and the SDK.

Prices are communicated on the basis of offers.


VMware’s Workspace One offers a complete suite of products for EMU, especially since the AirWatch acquisition. So there are MDM tools with support for peripherals and wearables, advanced workstation management, and telecommunications management. VMware is characterized by its robust Workspace One environment, a secure digital “desktop” that provides users with a secure online environment: Workspace One Tunnel connects to third-party applications and SCCM. The price structure:

Standard: $ 3.78 per device, $ 6.52 per user Extended: $ 6.00 per device, $ 10.90 per user Enterprise: $ 10.00 per device, $ 15.00 per user Enterprise for VDI: 20 USD $ 00 per device, $ 25.00 per user