Microsoft Defender for Cloud Apps vs Symantec CloudSOC CASB comparison

Microsoft Defender for Cloud Apps vs. Symantec CloudSOC CASB

Download the complete report

Helped 831,158 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

iboss

Featured Reviews

Matt Crockford

Head of Cybersecurity at SES Water

It's easy to roll out, and their understanding of our business made it seamless

One aspect we value about iboss is its simplicity. Their customer service is brilliant, and they are super responsive and knowledgeable. It's easy to roll out, and their understanding of our business made it seamless. We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times. The user interface is highly intuitive. Our IT team picked it up with minimal training. It's arranged so that it's easy to find where things are. Another advantage is the single pane of glass console, which gives you visibility into what's happening. We're not fully there yet because we haven't implemented zero trust, but we're excited about the possibilities from the demos we've seen. We launched a POC of iboss' ChatGPT Risk Protection feature two weeks ago. AI is a great tool, but you need to be careful what you put into it. My biggest fear is employees inputting sensitive corporate information or customer PII data into one of these chatbots. I was impressed by our trial of the feature. It's exactly what we wanted. Now, when a user goes to ChatGPT, there's a banner warning them not to share information, and we can block conversations containing customer data like bank details and email addresses. I don't want to stop people from using it, but we need visibility. We've only tried it on a test group of 15 people. You can configure it to look for specific keywords or integrate it with your DLP policy if you have that configured

Read full review

Jagadeesh Gunasekaran

Cyber security engineer at a tech services company with 10,001+ employees

Saves us time, has good visibility, and a single dashboard

The solution is user-friendly and provides great visibility into threats. There are easy options available for specific workflow inspections. We can also get support by going through the Microsoft documentation, which is straightforward. Microsoft Defender for Cloud Apps helps us prioritize threats across our enterprise. It covers us from a compliance perspective and protects our organization's data. Data protection is a very important aspect of any new organization, as we need to protect our data from both external attacks and insider threats. Microsoft Defender for Cloud Apps helps us monitor for abnormal activity by insiders, which is one of the most important access points for attackers today. Additionally, the different cloud apps that Defender for Cloud Apps supports provide us with much more visibility into potential threats and activities on the internet. We have integrated Microsoft Defender for Cloud Apps alerts with Sentinel. The integration is straightforward. We can find the configuration details on Microsoft's official documentation website. If we are familiar with how Microsoft products work, we will be able to follow the instructions clearly. Microsoft Defender for Cloud Apps and Sentinel work natively together to deliver coordinated detection and response across our environment. Our integrated Microsoft solutions provide comprehensive threat protection, covering most of the tactics and techniques relevant to the MITRE ATT&CK framework. Sentinel allows us to ingest data from our entire ecosystem. When implementing an SIEM solution, there are always prerequisites such as Active Directory logs, security logs, firewall logs, and DNS logs. These are important logs that need to be ingested into the environment. Sentinel has many third-party connectors available that make integrations straightforward. Microsoft provides the configuration details in the Sentinel platform. It is important to integrate all relevant log sources into the SIEM solution so that we can detect and be alerted to any type of threat factor, whether it is from an internal or external source. Integrating third-party solutions into the platform requires a separate configuration, but Microsoft provides the necessary information. However, we need to have the appropriate permissions to execute these setups. Sentinel provides a centralized dashboard that covers threat management and configuration. It gives us complete insight into what entities are accessing, as well as full details for investigation. We can see how the alerts and threats are relevant to suspicious activities, whether they are related to malicious IP addresses, suspicious ASHAs, or any other indicators of compromise. All of this relevant data can be seen in a single pane. Recently, Microsoft introduced a new investigation experience in a single pane. This means that we can now get a lot of details in a single pane, without having to go there and execute a query. There are a lot of new insights being developed in the Sentinel platform these days. It has software intelligence. They recently introduced Microsoft Defender Threat Intelligence, which covers almost all IOCs. This protects organizational assets from threats and suspicious traffic associated with IOCs. If a match is found, alerts are generated. This is a very interesting feature. Another great feature is automation and logic apps. We can create a number of operations, such as posting in a team's channel if a severe incident occurs or sending an email notification. There are many operations available, so we can automate a lot of tasks. Microsoft Defender for Cloud Apps helps us stay compliant. It has predefined mechanisms in place to prevent attacks. For example, if an external user tries to access our SharePoint folders or files, an attack will be blocked. This is why it is important to give appropriate access to guest users. Microsoft Defender for Cloud Apps has many features and benefits. It provides a number of policies that can be configured to meet the specific needs of our security team. These policies can be used to customize cloud applications so that only authorized users can access them and perform operations that benefit the organization. In terms of safety and security, Microsoft Defender for Cloud Apps is top-notch. Using the solution's automation features, we can suppress false positive alerts. We can also close alerts, lower their severity from "high" to "low" or "informational," or close them immediately with the appropriate commands. This will depend on the configuration automation rule and the perspective from which we are testing. Microsoft Defender for Cloud Apps provides a single console. We are also provided with Microsoft templates to enable workbooks instantly. Alternatively, we can build our own customized workbooks to provide better insights and improve our SOC efficiency and overall performance. Consolidating all of our security data into one dashboard has saved our security operations team a significant amount of time. From an analyst's perspective, it is now much easier to correlate events, investigate alerts, and visualize specific entities. For example, an analyst can quickly see all of the alerts associated with a particular IP address, or they can view all of the activity for a specific entity over the past 24 hours or 7 days. This level of detail and insight would not be possible if our data were siloed in multiple dashboards. The single dashboard saves our operations approximately 20 hours per week by eliminating the need to access multiple consoles and tabs. Microsoft Defender for Cloud Apps threat intelligence can help us prepare for potential threats before they happen. However, it depends on how we develop the policies for the database to block or ignore things in our environment.

Read full review

reviewer1224759

Technology Analyst at Infosys Technologies Ltd

Stable with good threat monitoring and excellent technical support

The solution's initial setup is straightforward. It's not something that is complicated. In terms of Symantec, the whole process is rather simple. We have the DLP on-premise solution, so they'll just give the provider the integration files and we can integrate with the on-premise DLP. It's quite easy. If everything is in place according to the requirements, etc., it will not take more than three or four days to deploy the solution. I believe there were two people who handled deployment when we launched. One was very senior (with ten or twenty years of experience) and one (myself) had something like five years or six years of experience. While I was personally engaged in the deployment, I did not help develop the policies.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Its initial setup was straightforward."

"We were impressed by the solution's mental health function, which can detect if someone needs help. It scans what users are browsing and flags warning signs so we can check to see if they are okay. We've had to use it a couple of times."

"iboss has significantly lowered the number of security incidents. It is crazy how much it blocks and how much it is aware of the outside danger."

"It was a very easy product to install. It can be deployed very fast."

"Content filtering is the most useful feature of iboss."

"iboss is easy to use despite its complexity. Multiple engineers manage it, but it's significantly more straightforward to administer than traditional VPNs and web proxies."

"The solution has massively improved our security posture, giving us full visibility into what our staff does online."

"Iboss is a solution that prevents advanced persistent threats, and has a zero tolerance for attacks."

More iboss pros

"Threat detection is its key feature, and that's why we use this tool. It gives an alert if a PC is attacked or there is any kind of anomaly, such as there is a spike in sending emails or we see an unauthorized website being accessed. So, it keeps us on our toes. We get to know that there is something wrong, and we can isolate the user and find any issues with it. So, threat detection is very robust in this tool."

"There are a lot of features with benefits, including discovery, investigation, and putting controls around things. You can't say that you like the investigation part but not the discovery. Everything is correlated; that's how the tool works."

"One of the most valuable features is auditing. Some of the other protection services have issues with auditing. Microsoft Defender for Cloud has an excellent auditing technique that helps us avoid the risk of filtering or information loss. You can use different tools to guarantee these things. It allows you to conduct an in-depth exploration of applications, users, and files that are harmful or suspicious. You can also enhance your security setup by creating personalized rules or policies that help you better control traffic in the cloud."

"Defender helps us control which applications are being used and gain more security insight into remote and hybrid users based on user identity and log in location. You can also integrate Defender for Cloud Apps with Defender for Endpoint to extend its capabilities."

"The product helps us with privileged identity management to control who has access to what and for how long."

"The feature that helps us in detecting the sensitive information being shared has been very useful. In addition, the feature that allows MCAS to apply policies with SharePoint, Teams, and OneDrive is being used predominantly."

"The most valuable feature of Microsoft Defender for Cloud Apps is to stop shadow IT."

"The most effective features for data protection are data loss prevention (DLP) and data classification."

More Microsoft Defender for Cloud Apps pros

"One of the most valuable features of Symantec CloudSOC CASB is its detection functionality. It uses the same base as Data Loss Prevention, allowing for close integration between on-premises DLP and the Symantec CloudSOC CASB. This integration lets you manage policies and incidents across both platforms."

"This solution has improved my organization because it allows us to have visibility and monitoring over our global workforce connectivity to Office 365 and for Service Now."

"The ability to monitor for threats is the solution's most valuable aspect."

"The value in some of these solutions is just the integration of technologies with their on-prem DLP solution. So, you can tie on-prem and cloud DLP policies together. You can apply on-prem policies to the cloud to have consistent policies in a hybrid environment. So, it works very well in that hybrid environment of on-prem and cloud."

"The monitoring and threat protection were the solution's most valuable features."

"The active directory integration is very valuable as we can connect to the list of users that we have and the cloud control, the blocking, the access control of the cloud, can be handled by this product."

Cons

"The dashboards for local use could be better."

"Sometimes when you call in support, you get someone who is just following a sheet. It feels like a runaround. You feel that you are running into that support wall."

"SSL decryption: We had issues with learners using apps instead of using web browsers. This type of encryption is tough for any appliance in a BYOD environment."

"Its pricing could be better."

"Iboss is growing so fast that it is often hard for them to keep up with the challenges."

"Sometimes the agent stops working in iboss, and we have to reinstall the agent."

"File integrity monitoring would be very advantageous as an additional feature."

"To scale up, a new iboss Node Blade Chassis must be purchased."

More iboss cons

"They should continue integration with all other Microsoft security-related products. The integration with all the other products is still ongoing."

"The response time could be better. It will be helpful if the alerts are even more proactive and we can see more data. Currently, the data is a little bit weak. It is not complete. I can't just see it and completely know which user or which device it is. It takes some effort and time on my part to investigate and isolate a user. It would be great if it is more user-friendly or easy for people to understand."

"Microsoft Defender for Cloud Apps’s technical support services needs improvement."

"I would prefer to have filtering options incorporated within the policies, enabling the solution to perform tasks beyond mere blocking or allowing."

"The technical support team has room for improvement."

"This service would be better if it had a separate license, only for this service, that could be used to track usage."

"Currently, reporting is not very straightforward and it needs to be enhanced. Specific reports are not included and you need to run a query, drill down, and then export it and share it. I would love to have reports with more fine-tuning or granularity, and more predefined reports."

"There could be more granular roles that are out of the box included in the product."

More Microsoft Defender for Cloud Apps cons

"The data security needs improvement. We should be able to leverage it a bit better for situations where someone may be trying to upload documents onto the cloud application."

"They have some room for improvement in terms of being able to do troubleshooting. If you're trying to troubleshoot it, you have to work a lot with their backend people in order to get to a solution. So, trying to do your own troubleshooting can be a little bit difficult."

"I would like to see them develop the ability to integrate it with a central management system."

"The solution should work to incorporate some machine learning policies like IDM and VML."

"It's a niche product. Not many people use it, and therefore there isn't as much of a knowledge base surrounding it."

Pricing and Cost Advice

"It is not expensive, and it is also not cheap. iboss is priced right in the sweet spot for the number of features it offers."

"It is probably in line with other solutions, but I do not deal with the financial side."

"The overall pricing for iboss is very competitive and transparent."

"We have not priced the solution recently, but they were competitive with other vendors in the past."

"It is expensive compared to one of its competitors."

"We are an MST and we do not pay for the solution. However, the price of the solution could be better."

"This product is not expensive."

"The E5 license offers everything bundled. People are moving to Microsoft because you buy one license and it gives you everything."

"The pricing is in the middle. It isn't too cheap or expensive compared to other antivirus or security products. It is priced according to industry standards."

"We utilize the Microsoft E5 licensing, which encompasses the entire Microsoft suite; however, it is costly."

"Its pricing is on the higher side. Its price is definitely very high for a small-scale company. As an enterprise client, we do get benefits from Microsoft. We get a discounted price because of the number of users we have in our company. We have a premier package, and with that, we do get a lot of discounts. There are no additional costs. It only comes in the top-tier packages. Generally, the top-tier license is the best license that you can get for your organization. If you want, you can buy it separately, but that's not a good idea."

"It has fair pricing. You pay for what you get. As far as I know, there are no costs in addition to the standard licensing fee."

"The pricing is a little bit high but right now, we are okay with it because of the compatibility with Office 365, Teams, and Azure AD."

More Microsoft Defender for Cloud Apps pricing and cost advice

"It compares well with the competition because they're all priced on a per-user basis. I've seen the rest of them. There is definitely a huge price difference between them."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Access Security Brokers (CASB) solutions are best for your needs.

See recommendations

831,158 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

12%

Manufacturing Company

Government

Computer Software Company

16%

Financial Services Firm

12%

Manufacturing Company

Government

Financial Services Firm

28%

Manufacturing Company

14%

Computer Software Company

Media Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about iboss?

Content filtering is the most useful feature of iboss.

What needs improvement with iboss?

I have the same complaint about them that I have about other software companies. Sometimes when you call in support, ...

What is your primary use case for iboss?

We are a PreK-12 public school district, and we use iboss to filter internet content for our students at home and sta...

Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?

Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-nat...

What do you like most about Microsoft Cloud App Security?

It does a great job of monitoring and maintaining a security baseline. For us, that is a key element. The notificatio...

What is your experience regarding pricing and costs for Microsoft Cloud App Security?

I'm familiar with the licensing requirements to get our job done, but not from a pricing standpoint. That is not my job.

What needs improvement with Symantec CloudSOC CASB?

After integrating the Gatelet with a live environment, users experienced connectivity issues because they were not im...

What is your primary use case for Symantec CloudSOC CASB?

The solution helps detect and control data in the cloud, focusing on Shadow IT and Shadow Data. The audit module help...

What advice do you have for others considering Symantec CloudSOC CASB?

I rate the overall product a six out of ten.

Zscaler Internet Access vs iboss

Comparisons

Compared 18% of the time

Cisco Umbrella vs iboss

Compared 15% of the time

Prisma Access by Palo Alto Networks vs iboss

Compared 11% of the time

Zscaler Zero Trust Exchange Platform vs iboss

Compared 11% of the time

Netskope vs iboss

Compared 10% of the time

More iboss Competitors

Zscaler Internet Access vs Microsoft Defender for Cloud Apps

Compared 23% of the time

Cisco Umbrella vs Microsoft Defender for Cloud Apps

Compared 17% of the time

Netskope vs Microsoft Defender for Cloud Apps

Compared 12% of the time

Prisma Access by Palo Alto Networks vs Microsoft Defender for Cloud Apps

Compared 7% of the time

Skyhigh Security vs Microsoft Defender for Cloud Apps

Compared 5% of the time

More Microsoft Defender for Cloud Apps Competitors

Netskope vs Symantec CloudSOC CASB

Compared 32% of the time

Prisma Access by Palo Alto Networks vs Symantec CloudSOC CASB

Compared 16% of the time

Forcepoint ONE vs Symantec CloudSOC CASB

Compared 16% of the time

More Symantec CloudSOC CASB Competitors

Product Reports

iboss

Download iboss product report

Microsoft Defender for Cloud Apps

Download Microsoft Defender for Cloud Apps product report

Microsoft Defender for Cloud Apps report

Download Symantec CloudSOC CASB product report

Symantec CloudSOC CASB

December 2024

Also Known As

iBoss Cloud Platform

MS Cloud App Security, Microsoft Cloud App Security

CloudSOC, Symantec CloudSOC

Learn More

iboss

Microsoft

Broadcom

Overview

iboss offers a comprehensive security platform designed for diverse use cases such as web filtering, data loss protection, corporate proxy services, and URL filtering.

iboss integrates advanced features to address dynamic security needs, leveraging its strength in SASE, ZTNA, AI initiatives, and cloud integration, while ensuring seamless operations for remote work. It excels in historical forensics, malware protection, and flexible cloud deployments. Users benefit from comprehensive traffic scanning, robust malware detection, and PaaS capabilities that reduce hardware management. An intuitive admin console ensures efficient management with content filtering and low false positives. SSL decryption enhances security, while DLP protects data in AI conversations. Deployment is rapid and scalable, allowing effortless integration with emerging technologies.

What features does iboss offer?

Granular Web Filtering: Provides precise control over web content access.
Traffic Scanning: Monitors data through multiple ports for security breaches.
Malware Detection: Ensures superior protection against malware threats.
PaaS Capabilities: Eliminates need for hardware management.
SSL Decryption: Enhances data protection by decrypting secure connections.
DLP Capabilities: Safeguards data during AI interactions.

What benefits and ROI should users consider?

Scalability: Adapts quickly to growing demands and emerging tech integration.
Rapid Deployment: Reduces time to implement security measures.
User-Friendly Admin Console: Facilitates efficient operations management.
Low False Positives: Increases accuracy of threat detection systems.

iboss finds significant application in sectors such as education, where web filtering for K-12 is crucial, and in corporate environments requiring robust proxy services and URL filtering for network security. Its adaptability is essential in scenarios demanding flexible, decentralized security frameworks, particularly for remote work setups.

Microsoft Defender for Cloud Apps is a comprehensive security solution that provides protection for cloud-based applications and services. It offers real-time threat detection and response, as well as advanced analytics and reporting capabilities. With Defender for Cloud Apps, organizations can ensure the security of their cloud environments and safeguard against cyber threats. Whether you're running SaaS applications, IaaS workloads, or PaaS services, Microsoft Defender for Cloud Apps can help you secure your cloud environment and protect your business from cyber threats.

Microsoft Defender for Cloud Apps Benefits:

Provides comprehensive security for cloud applications
Integrates with other Microsoft security tools
Easy to use and deploy
Provides real-time threat detection and response
Strong protection against phishing attacks and other common threats
Highly customizable to meet specific needs of different organizations

Microsoft Defender for Cloud Apps Use Cases:

Governance, authentication, security, and compliance.
Detects shadow IT and anomalous user behavior
Controls access to applications
Provides auditing and filtering setups
Used for end-user compute devices, file monitoring, user investigation, and activity
Used for data governance, threat detection, and getting visibility over cloud applications
Used to identify information about applications beyond organizational boundaries
Prevent exfiltration and data filtration of corporate data
Used to deal with spam emails and detect shadow IT

Reviews from Real Users

Ram-Krish, Cloud Security & Governance at a financial services firm, says that Microsoft Defender for Cloud Apps "Integrates well and helps us in protecting sensitive information, but takes time to scan and apply the policies and cannot detect everything we need".

PeerSpot user, Senior Cloud & Security Consultant at a tech services, writes that Microsoft Defender for Cloud Apps "Great for monitoring user activity and protecting data while integrating well with other applications".

Simon Burgess,Infrastructure Engineer at SBITSC, states that Microsoft Defender for Cloud Apps is "A fluid, intelligent product for great visibility, centralized management, and increased uptime".

Symantec CloudSOC CASB is a cloud access security broker that provides visibility and control over cloud applications and services. It offers a comprehensive set of security capabilities, including data loss prevention, threat protection, and compliance management. With CloudSOC CASB, organizations can gain insight into cloud usage patterns, identify potential risks, and enforce policies to protect sensitive data. The solution integrates with leading cloud providers, such as Microsoft Office 365, Salesforce, and Box, to provide seamless protection across multiple cloud environments.

CloudSOC CASB also offers advanced analytics and reporting capabilities, enabling organizations to monitor and track cloud usage and security events in real-time. With its user-friendly interface and flexible deployment options, CloudSOC CASB is an ideal solution for organizations looking to secure their cloud environments and protect their sensitive data.

Symantec CloudSOC CASB Key Benefits:

Enhanced Cloud Visibility

CloudSOC CASB provides organizations with comprehensive visibility into cloud applications and services being used across their network. It helps identify shadow IT, unapproved cloud usage, and potential security risks associated with unsanctioned applications.

Data Protection and DLP

CloudSOC CASB enables organizations to enforce data protection policies and prevent sensitive data from being leaked or exposed in cloud applications. It helps detect and control data sharing, implements encryption, and offers data loss prevention (DLP) capabilities to safeguard critical information.

Access Controls and User Authentication

SOC CASB enforces granular access controls for cloud applications, ensuring that users have appropriate permissions and follow secure authentication practices. It helps organizations implement strong authentication methods, single sign-on (SSO), and multi-factor authentication (MFA) to enhance access security.

Threat Detection and Incident Response:

CloudSOC CASB incorporates threat intelligence and behavioral analytics to detect and respond to cloud-specific threats. It helps protect against account compromises, malware, data exfiltration, and other advanced threats targeting cloud environments. Real-time alerts and incident response capabilities enable organizations to take prompt action.

Compliance and Governance

CloudSOC CASB assists organizations in meeting regulatory compliance requirements and industry standards. It provides policy enforcement, auditing capabilities, and reporting functionalities to support compliance with data privacy and security regulations. This helps organizations demonstrate adherence to regulatory obligations.

Shadow IT Discovery and Control

CASB helps organizations identify unauthorized or risky cloud applications used by employees, offering insights into shadow IT. It enables IT teams to assess risks, enforce policies, and take appropriate actions to manage and control cloud usage effectively.

Cloud Security Assessments

CloudSOC CASB conducts security assessments of cloud applications and services, providing insights into their security posture and potential vulnerabilities. This enables organizations to make informed decisions about the adoption of specific cloud services and assess their overall risk exposure.

Sample Customers

More than 4,000 global enterprises trust the iboss Cloud Platform to support their modern workforces, including a large number of Fortune 50 companies.

Customers for Microsoft Defender for Cloud Apps include Accenture, St. Luke’s University Health Network, Ansell, and Nakilat.

Globe Telecom

Microsoft Defender for Cloud Apps vs. Symantec CloudSOC CASB