Mobile Device Manager Plus to Endpoint Central

Device onboarding

You can:

Enroll Windows, Android, iOS, tvOS, and ChromeOS (or modern) devices using multiple enrollment methods tailored to each OS and device type.

You can You can also:

Onboard desktops, laptops, and servers using multiple agent deployment methods.
Deploy agents silently, manually, through a GPO, during OS deployment, via IP-range-based installation, and through more methods.

Configurations

You can:

Create profiles with custom configurations across Android, iOS, macOS, and tvOS.

You can You can also:

Apply user-based or computer-based configurations across Windows, macOS, and Linux systems.
Enforce configurations that enhance productivity and security.
Deploy a group of configurations as a collection.

App distribution and management

You can:

Automate app distribution and install only approved apps.
Preconfigure app permissions to prevent any modifications.
Test and deploy app updates.

You can You can also:

Roll out software quickly with ready-made templates.
Configure installation and uninstallation switches and auto-update policies in software packages.
Let users install approved applications and patches via the self-service portal.

Remote commands

You can:

Remotely lock devices.
Trigger remote alarms.
Manage passcodes.
Enable Lost Mode.
Perform remote restarts.
Completely wipe devices.
Erase corporate data remotely.

You can You can also:

Secure remote access with file transfer and screen privacy controls.
Troubleshoot remotely using over 12 built-in system and power options.
Support users via chat, voice, video, and multi-monitor access.
Collaborate with multiple technicians in the same remote session.
Record and store remote sessions for audits and team training purposes.

Browser security

You can:

Add web content filters.
Impose browser restrictions.

You can You can also:

Align browser configurations with your organization's security standards.
Block unsafe extensions and allow only trusted browser add-ons.
Redirect users to compatible browsers for accessing legacy applications.
Prevent malicious downloads and block access to harmful websites.
Isolate risky websites in virtual browsers for secure web access.

Sensitive data protection

You can:

Configure FileVault encryption.
Configure SD card and storage encryption.
Enforce conditional access policies.
Containerize organizational data.

You can You can also:

Scan and classify sensitive data using flexible data rules.
Block unauthorized access, printing, and screenshots.
Prevent data uploads to peripherals and untrusted domains.
Centralize BitLocker encryption, enforce encryption policies, and manage the recovery key life cycle.

Peripheral device control

You can:

Allow USB connections.
Connect USB storage devices.

You can You can also:

Allow, block, or control a wide range of peripheral devices such as USB devices, mice, and Bluetooth devices.
Allow only trusted peripheral devices.
Enable just-in-time access when required.
Store secure copies of transferred files for full visibility and control.

Application control and privilege management

You can:

Allow only trusted applications to run.
Blocklist untrusted or unproductive applications.
Add or remove accounts.

You can You can also:

Allow only trusted applications and block unauthorized and risky child processes.
Remove unnecessary admin rights and application privileges.
Control privileges for scripts, tools, and PowerShell commands.
Grant temporary elevated access with just-in-time privilege elevation.

Threat detection and response

You can:

Integrate with Check Point Workspace Security.
Categorize devices based on the risk severity and fix the security gaps.

You can You can also:

Assess and prioritize vulnerabilities based on risk scores with AI-based threat intelligence.
Remediate vulnerabilities with built-in patching and compliance auditing capabilities.
Uninstall high-risk software and audit ports and antivirus solutions.
Rectify web server misconfigurations and secure network devices.
Achieve compliance with CIS standards.
Isolate noncompliant devices, audit them, and restore them once they're back to compliance.

OS updates

You can:

Roll out critical OS updates as soon as they are available.
Delay updates for a set period to test them before deployment.
Schedule updates to run during convenient windows.
Distribute updates gradually across devices to prevent network congestion.

You can You can also:

Roll out OSs to remote machines in bulk via PXE, USB, or ISOs, without manual intervention.
Simplify deployments with preconfigured templates tailored to each role or department.
Deploy OSs across multiple systems using a single golden image and add compatible drivers dynamically.
Capture OS images from live and powered-off endpoints using online and offline imaging.
Store user profile backups to deploy images to new, refurbished, or replacement machines.

Feature	Mobile Device Manager Plus	Endpoint Central
Mobile device management	Yes	Yes
Patch management	No	Yes
OS deployment	No	Yes
Remote troubleshooting	No	Yes
Asset management	No	Yes
Vulnerability remediation	No	Yes
BitLocker management	No	Yes
Data leakage prevention	No	Yes
Peripheral device control	No	Yes
EDR	No	Yes
Application and privilege control	No	Yes
Browser security	No	Yes
Secure private access	No	Yes
Endpoint analytics	No	Yes

Mobile Device Manager PlusEndpoint Central

Device onboarding

You can:

You can You can also:

Configurations

You can:

You can You can also:

App distribution and management

You can:

You can You can also:

Remote commands

You can:

You can You can also:

Browser security

You can:

You can You can also:

Sensitive data protection

You can:

You can You can also:

Peripheral device control

You can:

You can You can also:

Application control and privilege management

You can:

You can You can also:

Threat detection and response

You can:

You can You can also:

OS updates

You can:

You can You can also:

Endpoint Detection and Response

Digital employee experience management

Secure private access

Take full control of every endpoint from 1 place

Trusted by