Category Filter

Hexnode UEM feature comparison based on OS platforms

Hexnode UEM offers a wide range of features to all the leading OS platforms, viz. Android, iOS, Windows, macOS, tvOS and Fire OS. Although these platforms differ vastly from each other, some of the management requirements remain the same across all of them.

We’ve compiled a list of the common restrictions and functionalities supported on all major platforms by Hexnode UEM:

Android

Hexnode’s endpoint management solution offers a range of restrictions for Android devices to help secure it. Hexnode’s seamless integration with Android Enterprise, Kyocera Enterprise Solution, LG Enterprise Solution and Samsung Knox integration makes the management of these devices easier.

App Installations
Legacy Android
  • Store App- A notification prompts the user to install the app.
  • Enterprise App- A notification prompts the user to install the app.
  • Web App- App installation only in Kiosk mode.
Android Enterprise: Device Owner
  • Store App- The app is silently installed in the background.
  • Enterprise App- A popup prompts the user to install the app. Enterprise Apps can be pushed silently on publishing as private apps in Managed Play Store.
  • Web App- App installation only in Kiosk mode.
Android Enterprise: Profile Owner (BYOD)
  • Store App- The app is silently installed in the background.
  • Enterprise App- A popup prompts the user to install the app. Enterprise Apps can be pushed silently on publishing as private apps in Managed Play Store.
  • Web App- App cannot be installed
Samsung Knox
  • Store App- Popup prompts the user to install the app.
  • Enterprise App- Silent installation of the app.
  • Web App- App installation only in Kiosk mode.
LG GATE, Kyocera Business Phones
  • Store App- A popup prompts the user to install the app.
  • Enterprise App- Silent installation of the app.
  • Web App- App installation only in Kiosk mode.
Custom ROM Devices
  • Store App- A popup prompts the user to install the app.
  • Enterprise App- Silent installation of the app.
    (Only if Hexnode MDM APK file is stored in the system/priv-app folder)
  • Web App- App installation only in kiosk

App Blacklisting/Whitelisting
Legacy Android
  • Blacklisting/whitelisting won’t hide apps. Device will be marked as ‘non-compliant’.

Android Enterprise: Device Owner
  • Blacklisted apps will be hidden.
Android Enterprise: Profile Owner (BYOD)
  • Only apps with Work badge can be blacklisted or whitelisted. Blacklisted Apps will be hidden.
Samsung Knox
  • Blacklisted apps cannot be installed or updated. Does not affect already installed apps.
LG GATE, Kyocera Business Phones
  • Blacklisting/whitelisting won’t hide apps. They will be marked as ‘non-compliant’.
Custom ROM Devices
  • Blacklisting/whitelisting won’t hide apps. They will be marked as ‘non-compliant’.

Kiosk Mode
Legacy Android
  • Single App, Multi app & Background App Kiosk modes.
Android Enterprise: Device Owner
  • Single App, Multi app & Background App Kiosk modes.
Samsung Knox
  • Single App, Multi app & Background App Kiosk modes.
LG GATE, Kyocera Business Phones
  • Single App, Multi app & Background App Kiosk modes.
Custom ROM Devices
  • Single App, Multi app & Background App Kiosk modes.

Network Configurations
Legacy Android
  • Wi-Fi
Android Enterprise: Device Owner
  • Wi-Fi
Android Enterprise: Profile Owner (BYOD)
  • Wi-Fi
Samsung Knox
  • Wi-Fi, VPN & APN
LG GATE, Kyocera Business Phones
  • Wi-Fi
Custom ROM Devices
  • Wi-Fi

Work Accounts
Samsung Knox
  • Email, Exchange ActiveSync

Integrations
Legacy Android
  • G Suite, Office 365, Azure AD, Microsoft Active Directory, Zendesk
Android Enterprise: Device Owner
  • G Suite, Office 365, Azure AD, Microsoft Active Directory
Android Enterprise: Profile Owner (BYOD)
  • G Suite, Office 365, Azure AD, Microsoft Active Directory
Samsung Knox
  • Samsung Knox, Exchange ActiveSync, G Suite, Office 365, Azure AD, Microsoft Active Directory, Zendesk
LG GATE, Kyocera Business Phones
  • Kyocera Enterprise Solution/LG Enterprise Solution, G Suite, Office 365, Azure AD, Microsoft Active Directory, Zendesk
Custom ROM Devices
  • G Suite, Office 365, Azure AD, Microsoft Active Directory, Zendesk

Security
Android Enterprise: Device Owner
  • OS Updates- Available
  • Certificates- Silent Installation provided the device is password protected and the certificate is not.
Android Enterprise: Profile Owner (BYOD)
  • Certificates- Silent Installation provided the device is password protected and the certificate is not.
Samsung Knox
  • Web content filtering- Android 6+ devices.
  • Global HTTP proxy- Samsung Knox 2.5+ devices.
  • Certificates- Silent installation.
LG GATE, Kyocera Business Phones
  • Certificates- Silent installation
Custom ROM Devices
  • Certificates- Silent installation

Data Restrictions
Legacy Android
  • Monitors and controls how Wi-Fi and mobile data connection are being used.
Android Enterprise: Device Owner
  • Monitors and controls how Wi-Fi and mobile data connection are being used.
Android Enterprise: Profile Owner (BYOD)
  • Monitors and controls how Wi-Fi and mobile data connection are being used.
Samsung Knox
  • Monitors and controls how Wi-Fi and mobile data connection are being used.
LG GATE, Kyocera Business Phones
  • Monitors and controls how Wi-Fi and mobile data connection are being used.
Custom ROM Devices
  • Monitors and controls how Wi-Fi and mobile data connection are being used.

iOS

Apple has always been rather assiduous when it comes to its security policies. These, along with the policies of an endpoint management solution, should, in most cases, prove to be adequate in protecting corporate data. iOS can be managed as both unsupervised and supervised devices, the latter being more restrictive, is also more work-specific.

App Installations
iOS Supervised
  • Store App- Silent installation of the app (iTunes login required).
  • Enterprise App- Silent installation of the app.
  • Web App- App installation in Kiosk Mode for iOS 9.3+ devices
  • Web Clip- Silent installation of the app.
  • VPP App- Silent installation of the app.
iOS Unsupervised
  • Store App- A notification prompts the user to install the app.
  • Enterprise App- A notification prompts the user to install the app.
  • Web Clip- Silent installation of the app.
  • VPP App- Silent installation of the app.

App Blacklisting/Whitelisting
iOS Supervised
  • Blacklisted app is hidden.
iOS Unsupervised
  • Blacklisting/whitelisting won’t hide apps. Device will be marked as ‘non-compliant’.

Kiosk Mode
iOS Supervised
  • Single App (iOS 6.0+), Multi App (iOS 9.3+) & Web App Kiosk (9.3+) modes.
  • Autonomous Single App Mode (OS 7.0+)

Network Configurations
iOS Supervised
  • Wi-Fi, VPN, APN
iOS Unsupervised
  • Wi-Fi, VPN, APN

Work Accounts
iOS Supervised
  • Email, Exchange ActiveSync, CardDAV, Calendar, CalDAV, Google Accounts, LDAP, Business Container
iOS Unsupervised
  • Email, Exchange ActiveSync, CardDAV, Calendar, CalDAV, LDAP, Business Container

Integrations
iOS Supervised
  • Apple Business Manager & Apple School Manager, Exchange ActiveSync, G Suite, Office 365, Azure AD, Microsoft Active Directory, Zendesk
iOS Unsupervised
  • Apple Business Manager & Apple School Manager, Exchange ActiveSync, G Suite, Office 365, Azure AD, Microsoft Active Directory, Zendesk

Security
iOS Supervised
  • Web content filtering- iOS 7.0+ devices
  • Global HTTP proxy
  • OS Updates- iOS 11.3+ devices
  • Certificates- Silent Installation of all certificates
iOS Unsupervised
  • Certificates- Silent Installation of all certificates

Customization
iOS Supervised
  • App configuration- Configured using an XML file
iOS Unsupervised
  • App configuration- Configured using an XML file

Data Restriction
iOS Supervised
  • Controls how managed apps access data on cellular networks and when the device is roaming
iOS Unsupervised
  • Controls how managed apps access data on cellular networks and when the device is roaming

macOS

Hexnode’s Management solution for macOS provides a wide range of restrictions and policies that helps secure the device. Applying policies adhering to the company policies can ensure that the safety regulations are always up to par. Hexnode not only helps secure the device but also makes using and managing the device much more straightforward.

App Installations
Mac Device
  • Store App- App cannot be installed directly.
  • Enterprise App- App is installed silently.
  • Web App- App not available.
  • VPP App- App is installed silently in the background.

App Blacklisting/Whitelisting
Mac Device
  • Application Whitelisting will work only on MDM managed user accounts and macOS 10.11+ devices.
  • Enterprise apps uploaded using DMG files cannot be blacklisted/whitelisted.

Kiosk Mode
Mac Device
  • Not available

Network Configurations
Mac Device
  • Wi-Fi, VPN

Work Accounts
Mac Device
  • Email, Exchange ActiveSync, CardDAV, CalDAV, LDAP

Integrations
Mac Device
  • Apple Business Manager & Apple School Manager, Exchange ActiveSync, G Suite, Office 365, Azure AD, Microsoft Active Directory

Security
Mac Device
  • Web content filtering
  • OS Updates- for DEP enrolled devices.
  • Certificates- The formats and recognised file extensions are:
    • PKCS1: .cer, .crt, .der
    • PKCS12: .p12, .pfx

  • Firewall- macOS 10.12+ devices
  • FileVault- Mac OS X 10.3+ devices

Customization
Mac Device
  • Custom Script- macOS 11.11+ devices and supports Perl (.pl), Bash (.sh), Shell (.sh), C Shell (.csh), Z shell (.zsh), Korn Shell (.ksh), Hypertext Preprocessor (.php), Ruby (.rb) and Python (.py) file formats.
  • App configuration- Configured using an XML file

Apple TV

An environment employing iOS and macOS devices benefits immensely from using Apple TV for display due to the Airplay feature. Utilizing features like single-app kiosk and conference room display, Hexnode makes the management and security appear seamless.

App Installations
Apple TV
  • Enterprise App- App install silently in the background.

Kiosk Mode
Apple TV
  • Single App Kiosk Mode (Supervised devices)

Network Configurations
Apple TV
  • Wi-Fi

Integrations
Apple TV
  • Apple Business Manager & Apple School Manager

Security
Apple TV
  • Global HTTP proxy- tvOS 10.2+ devices
  • Airplay Security- tvOS 11.0+ devices
  • Certificates- The formats and recognised file extensions are:
    • PKCS1: .cer, .crt, .der
    • PKCS12: .p12, .pfx

Customization
Apple TV
  • Conference Room Display- Supervised tvOS 10.2+ devices

Windows

With features like the Custom Script, BitLocker and Microsoft Defender, Hexnode effortlessly manages and secures Windows PCs. App management features like blacklisting and the kiosk modes help make Windows management flawless.

App Installations
Windows PC
  • Store App- App is silently installed.
  • Enterprise App- App can be uploaded to the portal as MSI app. It is then installed silently in Windows 10 laptops.

App Blacklisting/Whitelisting
Windows PC
  • Device will be marked as ‘non- complaint’. The apps will not be hidden. (Windows 10 device only).

Kiosk Mode
Windows PC
  • Single App and Multi App Kiosk mode (Supported on Windows 10 Pro).

Network Configurations
Windows PC
  • Wi-Fi

Work Accounts
Windows PC
  • Email, Exchange ActiveSync

Integrations
Windows PC
  • Exchange ActiveSync, G Suite, Office 365, Azure AD, Microsoft Active Directory, SCCM

Security
Windows PC
  • BitLocker, Microsoft Defender

Customization
Windows PC
  • Custom Script- Supported on Windows 10 v1709 or later PC’s and tablets and file formats such as “.bat”, “.cmd”, and “.ps1”.