BigFix vs Microsoft Windows Server Update Services comparison

Cancel
You must select at least 2 products to compare!
HCLTech Logo
5,634 views|3,197 comparisons
97% willing to recommend
Microsoft Logo
4,520 views|3,697 comparisons
89% willing to recommend
Comparison Buyer's Guide
Executive Summary
Updated on Jan 9, 2023

We performed a comparison between Bigfix and Microsoft Windows Server Update Services based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.

  • Ease of Deployment: Bigfix users say the solution is very easy to deploy. In contrast, Microsoft Windows Server Update Services users say deployment is complicated.
  • Features: Users of both products are happy with their stability and scalability.

    BigFix users like the solution’s flexibility, reporting, and patch management. Reviewers would like to see better integration with other solutions and more mobile device options.

    Microsoft Windows Server Update Services users like the solution’s centralized management and merging capabilities, and say it has good patching. Reviewers say you can't easily add or search for a server, and that the reporting could use improvement.
  • Pricing: Users of both solutions say they are expensive.
  • Service and Support: Users of both solutions are happy with the level of support they receive.
  • ROI: BigFix users don’t mention an ROI. Microsoft Windows Server Update Services users report a positive ROI.

Comparison Results: BigFix wins out in this comparison. The main difference between the two solutions is that Microsoft Windows Server Update Services users say deployment is complicated and that the product could benefit from better reporting.

To learn more, read our detailed BigFix vs. Microsoft Windows Server Update Services Report (Updated: March 2024).
770,292 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"BigFix is incredibly fast and accurate in patching, reporting, and remediation.""Servers are patched more consistently than they have been previously.""Having higher visibility on patching level, on patching successful, and non-successful has been a way that BigFix has improved my organization. Also, the ability to customize the content to do what we need it to do is very powerful and very flexible for us. Finally, in the area of custom interfaces like REST API really gives us the ability to provide for our external customers.""Software distribution and patch management are the most valuable.""We found the implementation partner to be very supportive in terms of explaining and training the in-house resources and deploying the solution.""BigFix has always been easier to use when managing servers, especially when you deal with so many servers. We have 7,000. That's a lot of services to manage, and it's convenient to patch them all at once.""It's enabled us to have a highly successful endpoint patching program for the past decade. It's been enormously successful there. It's also become a core part of many of our business processes, from compliance monitoring of endpoints, encryption management, key escrow, and local administrator password escrow. It's built into our inventory. It's very much everywhere.""BigFix is easy to use."

More BigFix Pros →

"The noteworthy aspect is the system's capability to handle an extensive range of services and workloads, with the potential for almost unlimited scalability.""The most important aspect is that we can centrally deploy the updates that are necessary for the organization. It's important.""The central points of managing product updates have been the tool's most valuable features.""The solution performs well.""It's a scalable product.""The most valuable features are that it is included with Windows, and it can be driven by Group Policy Objects (GPOs).""The most valuable feature of Microsoft Windows Server Update Services is the efficiency once configured.""We get server updates from the internet and from the Bluetooth server. All of the clients are connected to it, and they're all updated from this exact server. It updates automatically."

More Microsoft Windows Server Update Services Pros →

Cons
"I would like to see improvements in the Web UI program and also a BigFix console for Mac OS.""It can be improved speed-wise. They can make it a little bit light. If you do any query for servers in bulk, it can take some time. Similarly, creating a job can take some time.""Around the scalability concern, I would like to see the ability to run teamed, clustered, or hierarchical root servers, in order to provide a more robust, high availability system. The single monolithic root server model does somewhat bother me.""The remote software installation could be better.""Sometimes the workstations communicate back to the BigFix server two or three days in a week or something similar. Sometimes there can be a delay reporting back to the server for a variety of reasons, such as users turning their computer off when they go home. When the user comes back and turns the computer back on BigFix needs to synchronize and sometimes it can take some time, approximately one week. The communication between the agent and the server should be faster, there is room for improvement in this area.""The reporting structure could be a little more simplistic. Currently, it throws too many vulnerabilities. Some of them are not needed because they are only informational and limitations, and they are not of much help. It doesn't need to show us these things.""They need better integration.""The relevant language takes a little getting used to since it's not used anywhere else in the industry. It's just in the BigFix environment."

More BigFix Cons →

"In the next release, I would like them to provide better connectivity. They must improve the connectivity between the WSS with Microsoft or the client.""The solution's stability could be improved because sometimes, there are some problems in communication and sending updates and patches.""The only complex part was the solution’s tricky setup phase.""The solution must provide the issue description of the patches.""The old backup files created by this solution use up a lot of storage, and this needs to be improved.""In the next release, I would like to see additional tools added to fix the engine issues on the client's side.""This solution's deployment could be improved. When I was the admin, there were some problems when deploying to clients. Sometimes the policy is not effective. I guess, more on the reliability side, more reliable means working more often with the clients. It could be easier to deploy.""Microsoft Windows Server Update Services could improve by being less cumbersome to use. It's somewhat difficult to use, but we manage to get through it."

More Microsoft Windows Server Update Services Cons →

Pricing and Cost Advice
  • "I can estimate the reduced cost of servers maintenance to approximatively $500,000."
  • "When purchasing, buying with other IBM tools provided us with a very good discount in pricing."
  • "I would stay with the Managed Virtual Server license model, which is a 1-to-1 license per OS whether it is virtual or physical."
  • "The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."
  • "Compliance, inventory, and licensing are really pricey. They should lower the price. It discourages users from getting onboard."
  • "You get what we call the Platform Edition, which you get for free. The patch service is maybe $0.50 per workstation per month. Then there's the basic server cost, which is about $1.50 per server per month. You also get into Lifecycle which does power management, OSD remote control, and those types of things, and that might be about 10 times the price - which works out to about $13 per server and, maybe $5 per workstation per month."
  • "The price is very fair."
  • "The price is reasonable, but our customers find it expensive."
  • More BigFix Pricing and Cost Advice →

  • "Because it is not open-source, it has to compete with open-source solutions. Relatively it is expensive to open-source."
  • "The WSUS cost is included in Microsoft Windows, and there are no licensing fees."
  • "The integration is included in the Windows Server system, and there are no additional fees."
  • "This product comes included with Windows and can be used free of charge."
  • "The licensing of WSUS is free of charge because it comes with the Windows Server operating system, included as a feature of the operating system itself. It's simply a role that you enable within Windows Server."
  • "It doesn't need a license. It's offered for free with Microsoft."
  • "Microsoft's operating model determines the solution's pricing, and we use it based on our enterprise agreement, which incurs an annual cost."
  • "The solution is expensive, and the licensing costs are yearly."
  • More Microsoft Windows Server Update Services Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Patch Management solutions are best for your needs.
    770,292 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The most valuable features of the solution are Windows patching and the hardware and software inventory.
    Top Answer:On a scale from one to ten, where one is expensive and ten is cheap, I rate the solution's pricing one out of ten.
    Top Answer:The solution’s pricing could be improved.
    Top Answer:The policies must be made easier. The tool must allow users to update the policies. Currently, we can only create policies and update a few things in them. The product must provide more functions. The… more »
    Ranking
    2nd
    out of 50 in Patch Management
    Views
    5,634
    Comparisons
    3,197
    Reviews
    17
    Average Words per Review
    663
    Rating
    8.7
    3rd
    out of 50 in Patch Management
    Views
    4,520
    Comparisons
    3,697
    Reviews
    23
    Average Words per Review
    420
    Rating
    8.3
    Comparisons
    Also Known As
    Tivoli Endpoint Manager
    Windows Server Update Services, Microsoft WSUS, WSUS, Microsoft Software Update Services, Software Update Services, Microsoft SUS, SUS, MS Windows Server Update Services
    Learn More
    Overview

    HCL BigFix is a powerful patch management tool that enables organizations to simply control their patch management operations. It is designed so that IT security and operations teams can collaborate in the most effective way possible. Users that employ BigFix can find and fix issues with their endpoints faster than those that employ its competitors. It comes with thousands of security checks that can be deployed quickly and easily. These enable users to safeguard themselves from a wide variety of digital threats.

    HCL BigFix Benefits

    Some of the ways that organizations can benefit by choosing to deploy HCL BigFix include:

    • Total visibility and simplified control. BigFix provides users with total system visibility while simultaneously enabling administrators to easily manage their networks. It enables organizations to run all of their patch management operations from a single user interface. This UI contains all of BigFix’s system controls. It also contains all of an organization’s network data. Users will never have to search for the features or information that they need as everything is centrally located.
    • Maximum benefit for reduced overhead. BigFix enables businesses to integrate with more than 100 different operating systems. Users can utilize the operating system of their choice without multiplying their overhead costs. They can keep costs down while still achieving their goals. 
    • Flexibility. BigFix is highly flexible. Users can integrate it with the top vulnerability management solutions on the market. This enables users to maximize their protective coverage and minimize the amount of time that they have to spend resolving issues. 

    BigFix Features

    • BigFix Insights. The BigFix insights feature gives users access to a powerful deep analysis tool. This tool enables organizations to gather data from all of their endpoints and compile them into reports that can aid administrators in their work. It can centralize an organization’s data and also enable it to import data from other sources so that it can make more informed decisions.
    • Task automation. BigFix has the ability to automate rudimentary tasks so that users can focus on tasks that require a greater level of attention. This can include tasks such as event remediation and data collection. This feature enables users to focus their attention on other more critical tasks.
    • Data loss prevention tool. This tool enables users to prevent critical data from being leaked or leaking accidentally. It creates policies that limit or prevent sensitive data from being transmitted. It also enforces the privacy protocols that are already in place. Organizations can leverage this tool to bolster the security protecting their data from malicious actors.
    • Web reputation tool. This tool proactively protects networks from malicious websites. It scans for potentially dangerous websites and opens a blocking page when one is detected. Users are also given the ability to set proxy server credentials for the system to recognize and authenticate. Users can use this to ensure that suspicious websites are unable to infect their networks.
    • Centralized UI. BigFix comes with a built-in UI that centralizes all of the solution’s features so that they can be accessed from a single location. It enables administrators to target specific portions of the network when issues arise without requiring them to take actions that will affect the entire network.

    Reviews from Real Users

    HCL BigFix is a highly effective solution that stands out when compared to most of its competitors. Two major advantages it offers are its auto-patching capability and its user-friendly tools.

    Santhosh K., the chief executive officer of Catnip Infotech Private Limited, writes, “The second valuable feature is, BigFix also has an auto patch updating feature, where the latest patches, and what is required for my system are automatically downloaded and kept ready for me. The solution applies the patch and notifies me after applying the patch. BigFix also gives me a ping saying that I should reset my system within a certain period of time, while the patch is being applied. Let's say, the patch is being applied and if there's an issue, the solution can revoke the applied patch, and revert back to the old state.”


    Benedikt S., an application administrator, says, “It's very straightforward. The usability is very close to everyday technical tools that you use as a systems administrator. So it's quite user-friendly.”

    Microsoft Windows Server Update Services (WSUS) is a patch management tool that simplifies the administrator’s task of deploying the latest Microsoft updates. Administrators use WSUS to manage the distribution of updates released through Microsoft Update to computers in their network.

    WSUS has features you can use to manage and distribute updates from a management console. The WSUS server can also be a source of updates to other servers within the organization, acting as an upstream server.

    Microsoft Windows Server Update Services Use Cases

    The four main use cases that WSUS adds value to businesses are:

    • Centralizes update management.
    • Automates update management.
    • Performs general patch management to ensure compliance and protect against vulnerabilities.
    • Downloads all endpoint updates from data centers to a central location and then distribute them across the organization’s network.

    Microsoft Windows Server Update Services Features

    This built-in server includes the following features:

    • Includes Windows PowerShell cmdlets.
    • Features client and server separation, which means you can deliver versions of the Windows Update Agent (WUA) separately from WSUS.
    • Automatic download of updates.
    • Deploy a targeted download of updates to a specific group of computers.
    • Multiple language support.
    • Advanced reporting capabilities.
    • Centralized management of network resources.

    Requirements

    In order to be able to use WSUS to manage and deploy updates, it is important to use a supported WSUS version, such as:

    • WSUS 10.0.14393
    • WSUS 10.0.17763
    • WSUS 6.2 and 6.3 with installed KB 3095113 and KB 3159706

    Microsoft Windows Server Update Services Benefits

    • Stable.
    • Ensures servers are always patched and prevents vulnerabilities.
    • Works great for internal updating.
    • Enforces automated updates and patching for applications.
    • Because the solution is used in the cloud, clients are always using the latest version.
    • Highly scalable and configurable regardless of the organization’s layout.

    Different Types of WSUS Deployments

    • Simple WSUS deployment: A server inside the corporate firewall serves clients via a private intranet. The WSUS server downloads updates by connecting to Microsoft Update. Using this model, you can configure multiple WSUS servers with a parent WSUS server.

    • Computer groups: You can use computer groups to deliver updates to specific computers. There are two basic computer groups: All Computers or Unassigned Computers. When a client first contacts the WSUS server, it is added to both. You can then create a group from the Unassigned Computers group to the new group.

    • WSUS server hierarchies: The flexibility of WSUS enables the creation of complex hierarchies of servers. To do this, you need only a single WSUS server connected to Microsoft Update. This will serve as an “upstream server,” and the connected servers as “downstream servers.”

      • You can link WSUS servers in two modes: autonomous or replica. In the autonomous mode, the upstream server shares the updates with the downstream servers but doesn’t update status or group information.

      • The upstream server shares updates, status, and group information in replica mode. You cannot administer replica servers apart from the upstream WSUS server.
    Sample Customers
    US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
    Information Not Available
    Top Industries
    REVIEWERS
    Computer Software Company16%
    Retailer12%
    Healthcare Company10%
    University10%
    VISITORS READING REVIEWS
    Educational Organization44%
    Financial Services Firm9%
    Computer Software Company7%
    Government7%
    REVIEWERS
    Computer Software Company17%
    Manufacturing Company14%
    Energy/Utilities Company10%
    Security Firm7%
    VISITORS READING REVIEWS
    Computer Software Company14%
    Government13%
    Financial Services Firm10%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business25%
    Midsize Enterprise11%
    Large Enterprise64%
    VISITORS READING REVIEWS
    Small Business11%
    Midsize Enterprise50%
    Large Enterprise40%
    REVIEWERS
    Small Business39%
    Midsize Enterprise13%
    Large Enterprise47%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise17%
    Large Enterprise61%
    Buyer's Guide
    BigFix vs. Microsoft Windows Server Update Services
    March 2024
    Find out what your peers are saying about BigFix vs. Microsoft Windows Server Update Services and other solutions. Updated: March 2024.
    770,292 professionals have used our research since 2012.

    BigFix is ranked 2nd in Patch Management with 91 reviews while Microsoft Windows Server Update Services is ranked 3rd in Patch Management with 38 reviews. BigFix is rated 8.6, while Microsoft Windows Server Update Services is rated 8.0. The top reviewer of BigFix writes "Very stable and easy to deploy with excellent patch compliance". On the other hand, the top reviewer of Microsoft Windows Server Update Services writes "Lets us manage all our organization's updates from a single management console". BigFix is most compared with Microsoft Intune, Microsoft Configuration Manager, Red Hat Ansible Automation Platform, Tanium and ManageEngine Patch Manager Plus, whereas Microsoft Windows Server Update Services is most compared with ManageEngine Patch Manager Plus, Quest KACE Systems Management, Microsoft Configuration Manager, Ivanti Neurons Patch for Intune and GFI LanGuard. See our BigFix vs. Microsoft Windows Server Update Services report.

    See our list of best Patch Management vendors.

    We monitor all Patch Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.