Find out in this report how the two Microsoft Security Suite solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
The return on investment is primarily in time savings and better observability of what's happening.
Clients benefit from using a one-stop-shop solution, increasing their visibility across different platforms.
The level-one support seems disconnected from subject matter experts.
I rate Microsoft support 10 out of 10.
Due to our size, we don't have access to direct technical support, but the knowledge base, Microsoft Learn, and the articles available are really good.
Overall, it doesn't meet our expectations.
They're skillful people who know what they're doing in their space.
The support could be better, particularly with consulting.
We managed to scale it out in a short amount of time, with two months of planning and three months of implementation on 10,000 computers.
It's pretty easy to scale with Microsoft, as they make it easy if you look into the documentation.
Defender's scalability is phenomenal, and it's going to be one of the keys to resolving issues for the SOC.
With automation, you can label five documents or 50,000 with the same amount of clicks.
The product is scalable and works across multi-cloud and multi-platform environments.
I haven't seen any outages with Microsoft.
I rate Defender 10 out of 10 for stability.
Defender for Endpoint is extremely stable.
It can take seven days to 24 hours to determine whether a policy is effective.
Repeated interactions are necessary due to Level One's lack of tools and knowledge, hindering efficient problem-solving and negatively impacting our experience with Microsoft support.
We use Microsoft partners to help govern the platform, and as part of an alliance, we want to gather data from each tenant and combine them for a complete view.
You have to go through tons of documentation to find what you want.
It's essential to know if a feature isn't working due to missing licenses.
There are some problems with DLP rules, and it would be great if the security around DLP could be expanded.
A watermark feature or similar tools to help enhance security for end users could be added.
Given our extensive Microsoft licensing, transitioning to Defender for Endpoint did not affect licensing costs.
The pricing, setup, and licensing were very easy and simple.
The feature might be available in the console, but it won't work without the proper license, creating confusion.
The experience with pricing, setup costs, and licensing was smooth, as most Purview functionalities were included in the e5 licenses we migrated to for other reasons.
Defender for Endpoint's coverage across different platforms in our environment is pretty good. We have devices running Linux, Mac OS, Windows, iOS, and Android. It covers all of them.
Web filtering is the most valuable feature of Microsoft Defender for Endpoint because it effectively maintains security for website access.
Attack surface reduction and limiting attack surface vectors are valuable features.
It provides a comprehensive view of the entire ecosystem's threats and compliance in real time.
The sensitivity labeling is the most valuable feature because it is the foundation for automating the encryption process and ensuring proper data handling across the organization.
The feature that I find most valuable is its ability to block unintended data sharing, like forcing unencrypted emails to be encrypted.
Microsoft Defender for Endpoint is a comprehensive security solution that provides advanced threat protection for organizations. It offers real-time protection against various types of cyber threats, including malware, viruses, ransomware, and phishing attacks.
With its powerful machine-learning capabilities, it can detect and block sophisticated attacks before they can cause any harm. The solution also includes endpoint detection and response (EDR) capabilities, allowing organizations to quickly investigate and respond to security incidents. It provides detailed insights into the attack timeline, enabling security teams to understand the scope and impact of an incident.
Microsoft Defender for Endpoint also offers proactive threat hunting, allowing organizations to proactively search for and identify potential threats within their network. It integrates seamlessly with other Microsoft security solutions, such as Microsoft Defender XDR, to provide a unified and holistic security approach. With its centralized management console, organizations can easily deploy, configure, and monitor the security solution across their entire network.
Microsoft Defender for Endpoint is a robust and scalable security solution that helps organizations protect their endpoints and data from evolving cyber threats.
The new Microsoft Purview portal offers an enhanced governance experience, serving as a unified platform for managing and governing data across various sources, including Azure, Microsoft 365, on-premises, and multicloud environments. Designed to streamline governance, compliance, risk, and security efforts, the new portal provides a user-friendly interface and unlocks advanced features like live view and preset scans. Existing users of Microsoft Purview can upgrade to this enhanced experience, gaining access to improved user interface, enhanced capabilities, and consolidated management of data assets. Additionally, the upgrade sets the stage for future developments, including account consolidation and fine-grained access control.
We monitor all Microsoft Security Suite reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.