Hexnode UEM

Certificate management via SCEP, PKCS#12, and PKI integration across all platforms.

Custom configuration profiles and scripts for platform-specific advanced deployments.

Extensive device restrictions with granular control over OS features, apps, and hardware.

Email profile auto-provisioning with Exchange, IMAP, and OAuth support across platforms.

Password policies with complexity, history, and expiration across all platforms.

Per-app VPN tunneling for application-level security across mobile and desktop platforms.

Comprehensive VPN profile support including IKEv2, L2TP, and OpenVPN across platforms.

WiFi profile deployment with WPA2/WPA3, EAP-TLS, and certificate authentication across all platforms.

Android Zero-Touch enrollment via ZTE for enterprise deployments.

Apple Business Manager enrollment for iOS/macOS with seamless device assignment.

CSV-based bulk enrollment for rapid multi-platform fleet onboarding.

Conditional enrollment rules based on device attributes and compliance state.

QR code enrollment across iOS, Android, Windows, macOS, and ChromeOS.

Samsung Knox integration with Knox Vault and Knox Manage for enhanced Android security.

Full BYOD support with work profile separation on Android and iOS.

Windows Autopilot support for zero-touch Windows device enrollment.

Application blocklist and allowlist policies across all supported platforms.

Built-in app catalog with App Store, Play Store, and Windows Store integration.

App Configuration Framework for deploying app-specific settings across platforms.

Apple Volume Purchase Program integration for iOS and macOS app distribution.

Google Play Store and managed Play integration for Android and ChromeOS apps.

Mobile Application Management with work profile containment on iOS and Android.

Silent app installation across iOS, Android, Windows, macOS, and ChromeOS.

Windows Win32 LOB application deployment via MSI and EXE installers.

Robust compliance engine with automated remediation and detailed reporting.

Data Loss Prevention not available in core Hexnode UEM.

Device encryption enforcement across all platforms with policy controls.

Geofencing with location-based policy triggering on iOS and Android devices.

Jailbreak/root detection and remediation on iOS and Android.

Full device wipe with optional PIN/passcode requirement across all platforms.

Selective wipe of managed data and applications without personal data loss.

Mobile Threat Defense integration available via Check Point Harmony Mobile for iOS and Android. Threat signals can trigger compliance actions. Windows/macOS EDR integration not documented.

Android OS update management with OEM-dependent deferral support.

Firmware updates not directly managed via MDM across platforms.

iOS/iPadOS update scheduling with deferral windows and enforced update policies.

macOS Software Update management with deferral and scheduling policies.

OS update deferral with configurable windows across iOS, Android, Windows, and macOS.

Windows Update for Business integration with deferral and scheduling controls.

Application deployment analytics and usage tracking across platforms.

Comprehensive audit logging of all admin actions and device activities.

Detailed compliance reporting with export options and remediation tracking.

Custom report builder with scheduled delivery and export options.

Comprehensive multi-platform inventory dashboard with real-time device visibility.

Real-time device status and policy compliance dashboards.

Custom script execution for Windows (PowerShell), macOS (Bash), and Linux (Python/Bash).

Remote restart capability for Android, Windows, macOS, and Linux.

Remote lock with custom message across iOS, Android, Windows, macOS, and Linux.

Screen view/remote desktop available for Android devices via Hexnode Remote.

Remote terminal access via PowerShell for Windows, Bash for macOS/Linux.

Immediate remote wipe action with audit trail across all platforms.

Device type filtering for phone, tablet, desktop, and shared device policies.

Dynamic smart groups with attribute-based rules and custom filters across platforms.

Geographic location-based device targeting on iOS and Android.

Tag-based device and user targeting with custom tag hierarchies.

User-based device assignment and policy targeting across platforms.

Entra ID integration for Windows device enrollment and conditional access.

Windows Conditional Access through Entra ID integration.

Google Workspace directory integration for Android and ChromeOS enrollment.

Third-party identity provider integration like Okta not directly supported.

On-premises Active Directory integration via Azure AD Connect for device sync.

SAML/OIDC authentication for admin console available but not device enrollment.

Automation workflows for policy assignment, remediation, and device management.

Plugin framework not available; limited third-party extensibility.

Comprehensive REST API for all MDM operations and integrations.

ServiceNow integration for ticketing, asset management, and CMDB sync.

SIEM integration via syslog forwarding for centralized security monitoring.

Webhook support for device lifecycle and policy compliance events.