Plan 2 adds tunnel for mobile app management, specialty and shared device management, and firmware-over-the-air updates. The Suite is Plan 2 plus endpoint privilege management, Cloud PKI, enterprise app management, Remote Help and advanced analytics. Both are additive to Plan 1 rather than a replacement for it, so Plan 2 with Plan 1 is $15 a seat and the Suite with Plan 1 is $23.