Try our new research platform with insights from 80,000+ expert users
‎Microsoft Enterprise administrator at a comms service provider with 1,001-5,000 employees
Real User
Has prevented all viruses since we implemented it
Pros and Cons
  • "It's really stable. I've used a lot of stuff, a lot of products, like ESET and Kaspersky. None of them are comparable with this one. This one is much better."
  • "The end-user also cannot do some advanced actions on it. It's a little bit complicated for our end-user, so it needs to be simplified."

What is most valuable?

The solution is really fast. I have never experienced any viruses since I've been using it.

What needs improvement?

I think the console can be better.

The end-user also cannot do some advanced actions on it. It's a little bit complicated for our end-user, so it needs to be simplified.

I think the solution is complicated. This one is one of the concerns that I like to talk about because some end-users do not know how to navigate through the console and how to work with them. I think this is not such a big deal, but I know that there will be other things that may be important to us like, how we can centrally manage users and reports are really important for us. For example, in Kaspersky, we had a problem where we couldn't detect the attacks that we had in some of our zones in our data center. I think if Microsoft Windows Defender can report these things, it's going to be great.

For how long have I used the solution?

I've been using the solution for six years.

What do I think about the stability of the solution?

It's really stable. I've used a lot of products, like ESET and Kaspersky. None of them are comparable with this one. This one is much better.

Buyer's Guide
Microsoft Defender for Endpoint
December 2024
Learn what your peers think about Microsoft Defender for Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,067 professionals have used our research since 2012.

What do I think about the scalability of the solution?

To scale the solution, I think you need more licenses but I'm not sure. We have 100 to 1,000 users. We just use it for some end users, not for all the users. The users are mainly end-users and a few admins. We plan to increase users annually.

Which solution did I use previously and why did I switch?

We used other solutions, like ESET and Kaspersky. We had to change at first due to user complaints, especially about Kaspersky, because it used a lot of the resources. So we switched to ESET but after some time we just switched to Windows Defender

How was the initial setup?

The initial setup was really easy, a no brainer.

What about the implementation team?

I installed the solution on my own.

What other advice do I have?

I would recommend the solution because I can confidently tell everyone that this product is working very well and it's stable. You are always sure that they are able to deal with a virus or something else that may interrupt your work.

I would rate this solution nine out of 10.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Defendwind677 - PeerSpot reviewer
Associate System Engineer - Security Services at a educational organization with 10,001+ employees
Real User
Product has a decent detection rate, but there are some challenges related to reporting
Pros and Cons
  • "Within its class I think, it has a high and decent detection rate."
  • "There's a lot of manual effort involved to configure what we need."

What is our primary use case?

We use this as our antivirus solution.

What is most valuable?

Within its class I think, it has a high and decent detection rate.

What needs improvement?

There were a few detections that are not picked up, and then Microsoft picks up on that and they update it. That's just a normal thing you go through based on every antivirus solution. You're always going to have viruses and signatures that are coming out.

So, I wouldn't say it's the perfect solution because if you're looking at next-generation behavioral based things, for example, if you're going to use ATP, that's when you can get more methods out of it. With Defender, if you pay more you can get the ATP component, which is sold separately by Microsoft.

We do have some challenges in the reporting aspect of it. 

There's a lot of manual effort involved to configure what we need.

There are also a few issues with policies.

For how long have I used the solution?

I've been using this solution for six months.

What other advice do I have?

Defender by itself is not a solution. Defender is basically a functionality.

We have some issues with reporting, but I think it's just the way we've integrated right now, again not using ATP. So, we just use STC MS management. Then it's limited in terms of reporting.

From an operator's perspective, I think there are some policy detection issues where you've got a detection for a signature but how it translates into the FCCM dashboard where it doesn't really categorize that particular model. It picks something up as bad but it's just unknown.

So, I think that's a known issue with this particular thing. Because it doesn't know what it is classified as it doesn't really do anything. For it to do something, the policy has to recognize the category of that number. It could be a trojan horse or whatever it is, but it doesn't really do that. It could be what they call an autonomous detection where the system categorizes it as not recognized and hence it blocks it, but it's not going to let you delete it instantly. Usually, you can say if it's detected you want to block it, that's the first step. The second step is to be able to delete the file or quarantine the file. But it doesn't recognize that, so it doesn't know what it needs to do. Instead, it just blocks it. It only blocks it because it doesn't recognize it as being Malware.

I would rate this product a six out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Microsoft Defender for Endpoint
December 2024
Learn what your peers think about Microsoft Defender for Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,067 professionals have used our research since 2012.
John Edwards - PeerSpot reviewer
Manager Cyber Security at Dept. of the Premier and Cabinet
Real User
Good endpoint detection response, and technical support, but the pricing could be improved
Pros and Cons
  • "Microsoft Defender for Endpoint is a robust platform."
  • "In the next release, I would like to see better management reporting."

What is our primary use case?

We are a government organization, and we use Microsoft Defender for Endpoint Protection.

We also use it for vulnerability scanning and assessment, which is very useful.

What is most valuable?

Microsoft Defender for Endpoint is a robust platform. The endpoint detection response is quite good.

What needs improvement?

Some executive reporting is inefficient, and we're looking into ways to improve it.

In the next release, I would like to see better management reporting.

For how long have I used the solution?

I have been working with Microsoft Defender for Endpoint for two years.

What do I think about the stability of the solution?

Microsoft Defender for Endpoint is a stable solution.

What do I think about the scalability of the solution?

Microsoft Defender for Endpoint is definitely scalable.

How are customer service and support?

Technical support is quite good.

Which solution did I use previously and why did I switch?

Previously, we didn't work with anything as sophisticated. We used a pretty old-style endpoint detection response.

How was the initial setup?

On new devices, the initial setup is quite easy, while some of the older devices had some issues unpicking the old EDR product that had nothing to do with Defender.

What's my experience with pricing, setup cost, and licensing?

Pricing can always be lower.

What other advice do I have?

To achieve the best results holistically, consider the total cost of ownership of the Microsoft suite of products.

I would rate Microsoft Defender for Endpoint a seven out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Head, Information Security & Network Operations at a consumer goods company with 10,001+ employees
Real User
Nice interface and good reporting, but the alerts need to be more timely
Pros and Cons
  • "This is not an inventory solution, but it helps you take count of how many workstations you have, as well as what software is installed on each of them."
  • "Alerts need to be sent immediately because as it is now, you see some of them without delay and others arrive perhaps 30 minutes later, and it leaves important gaps in terms of information gathering."

What is our primary use case?

We combine Microsoft Defender with Advanced Threat Protection to manage, isolate, and scan our laptops and workstations for security threats. We have a dashboard that is embedded into Office 365 and it allows us to remotely scan for viruses and malware, so we don’t have to have the laptop present.

How has it helped my organization?

Using this product helps with device inventory. This is not an inventory solution, but it helps you take count of how many workstations you have, as well as what software is installed on each of them. It is important because any software installed on a workstation may be vulnerable to parts of the internet.

Microsoft Defender has features that have helped to add layers to our security posture. The most important of these features is visibility and the provision of detailed alerts. It correlates the data and using this information, I can identify a threat and see if any other workstation in the environment has been affected by it.

Using this product has not negatively affected our user experience. It is just like using Windows 10.

What is most valuable?

The GUI is very nice.

The reporting capabilities are fantastic.

In the future, I would like to have the ability to patch using this product. Specifically, in an enterprise environment, it would be very good if you could patch the workstations remotely.

What needs improvement?

The alerting is something that needs to be improved. Alerts need to be sent immediately because as it is now, you see some of them without delay and others arrive perhaps 30 minutes later, and it leaves important gaps in terms of information gathering.

For how long have I used the solution?

I have been working with Microsoft Defender Antivirus since it first came out, at least seven or eight years ago.

What do I think about the stability of the solution?

With respect to the stability of the product line, Microsoft has many products that do almost the same thing. The question becomes which one you want to use. This is a good product but at the same time, after a while, you don't know if it is the next one that Microsoft is going to stop releasing because of other products that practically do the same thing.

What do I think about the scalability of the solution?

Microsoft Defender is very scalable and there is a lot of room to expand and add extra layers. We have 2,500 endpoints and we plan to expand; however, we are thinking about using the Microsoft Endpoint Manager in place of it.

Once the decision is made to stay with this product or instead adopt Endpoint Manager, we will expand to cover 6,000 endpoints.

How are customer service and technical support?

I have not been in contact with technical support.

Which solution did I use previously and why did I switch?

Prior to Microsoft Defender, we tried quite a few different products from vendors such as Kaspersky and McAfee. One of the major reasons that we adopted Defender is because of the advantage that Microsoft owns the platform, Windows 10. As they have developed the operating system, it is believed that they understand how to guard it much better against a third party. An attacker has to learn a lot about Windows 10.

Another reason we selected Defender is the frequency of updates. Every other time that Windows is updated, Defender is updated. Again, this is because it is owned by Microsoft and exists on its platform.

We also use Microsoft ATP and we are currently looking at Microsoft Endpoint Manager.

How was the initial setup?

The initial setup is straightforward. Basically, once you have the competency with the product, it is straightforward and there are no surprises. It is not rocket science.

This product is built into the Windows 10 image that we install. As you roll out Windows 10, it is already set up and pre-configured, so there is no additional work required.

What was our ROI?

We saw a return on our investment within the first two years.

If I quantify the effort used for the setup and compare it with the pricing of the previous solution, value for the money was realized during the second year.

What's my experience with pricing, setup cost, and licensing?

We have an enterprise agreement so from my perspective, this is a product that ships with Windows and it is not priced standalone. It comes together with the other Microsoft products that we buy.

Which other solutions did I evaluate?

When we evaluated Kaspersky and McAfee, we found the scalability was better for Microsoft. You can do in-place upgrades of the endpoints with Defender but for the others, you would have to re-install the upgraded agents on the workstation. This takes a lot of time and it is not productive.

We are currently evaluating Microsoft Endpoint Manager by comparing the differences between it and Microsoft Defender. This is being done in advance of expanding our usage.

What other advice do I have?

My advice for anybody who is implementing this product is to first analyze their critical assets to have an understanding of what they are. Then, decide if they want a scalable solution. New threats are coming in every month and the way this is going, Microsoft is learning lessons from networks that have been compromised. With this information, they give updates and patches to everybody. In support of this product, you have to consider the patching, consider the visibility that it gives, and then consider the critical assets it is protecting.

I would rate this solution a seven out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Juan Jose Anaya - PeerSpot reviewer
Technical Manager at SAPEC
Real User
Top 10
Light on resources, easy installation, and reliable
Pros and Cons
  • "One of the main features is the solution is very light on resources and we do not have any problems with it."
  • "There is room to improve the security of the solution."

What is our primary use case?

We use this solution for business security protection.

What is most valuable?

One of the main features is the solution is very light on resources and we do not have any problems with it.

What needs improvement?

There is room to improve the security of the solution.

We have plans to add an email security solution because this solution does not provide us with what we want.

For how long have I used the solution?

I have been using this solution for approximately three years.

What do I think about the stability of the solution?

The solution is stable.

What do I think about the scalability of the solution?

I have found the scalability of the solution good.

Which solution did I use previously and why did I switch?

We were previously using the Avast security solution.

How was the initial setup?

The installation is very easy, it takes only one day.

What about the implementation team?

We did the implementation ourselves. We have approximately 10 engineers able to do the deployments and maintenance. 

What's my experience with pricing, setup cost, and licensing?

There is not a license required for this particular solution.

What other advice do I have?

I would recommend this solution to others.

I rate Microsoft Defender Antivirus an eight out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Nadeem Abdulla - PeerSpot reviewer
Assistant Manager IT Infrastructure at a manufacturing company with 501-1,000 employees
Real User
Top 20
Stable threat protection with good support but it's expensive and has license restrictions
Pros and Cons
  • "It shows us the risky sign-ins, and if a user's password has been compromised."
  • "I am not sure if I will be using this product in the future because of the price."

What is our primary use case?

We are using this solution for threat detection.

What is most valuable?

It shows us the risky sign-ins, and if a user's password has been compromised.

What needs improvement?

While have been using this solution for two years, I am not completely knowledgable. 

Due to license restrictions, we cannot use all of the features that are offered.

I am not sure if I will be using this product in the future because of the price.

I would like to see better pricing for this solution in the future.

For how long have I used the solution?

I have been working with Microsoft Defender ATP for two years.

We are always using the latest version because it's on the cloud.

What do I think about the stability of the solution?

With what we have seen, it's a stable solution.

What do I think about the scalability of the solution?

We are not using it widely because of the licensing limits.

We have three users only for Defender ATP, and if we are using the Microsoft ATA it applies to 500 users.

How are customer service and technical support?

Technical support is good.

Which solution did I use previously and why did I switch?

We did not use another solution previous to Microsoft Defender ATP.

How was the initial setup?

The initial setup is straightforward. It's included with the Windows 10 Operating System.

There is no time taken for deployment as it is included with the operating system.

What about the implementation team?

We completed the installation ourselves.

We have 15 administrators to deploy and maintain this solution.

What's my experience with pricing, setup cost, and licensing?

Microsoft Defender ATP is expensive.

What other advice do I have?

Because of my lack of knowledge or experience with the solutions full capacity, I cannot recommend this solution or offer any advice.

I would rate this solution a five out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Cloud Consultant at Brio Technologies Private Limited
Real User
Good with vulnerability assessment and integrates well with Office 365 and Azure
Pros and Cons
  • "Provides good vulnerability assessment."
  • "The GUI is very complex and could be more user friendly."

What is our primary use case?

This is an endpoint security product. It helps detect and prevent attacks and is very good when it comes to vulnerability assessment. It automatically detects attacks. It provides support for all the end devices, whether it is a Mac OS, Windows, mobiles, Android and iOS, it has support for all. I mostly deal with smaller and medium sized companies, I don't deal much with enterprises. I'm a customer of Microsoft and I work as a solution architect.

What is most valuable?

The product is very good when it comes to vulnerability assessment. It's a Microsoft flagship product and it integrates with Office 365. If my customers are using Office 365 or Azure or a Windows server, it helps to use Defender. Other products like Symantec or McAfee don't have that kind of integration with Microsoft products. In terms of identifying the attacks, it's far superior to Symantec. 

What needs improvement?

The GUI is very complex, particularly for normal users who work on it. It could be more user friendly. For future improvements, I'd be looking at internet security which we don't have as Microsoft does not distinguish whether a site is malicious or not. Kaspersky is very good at that but not Microsoft. It would be a big advantage for them if they were to include it. 

For how long have I used the solution?

I've been using this solution for seven months. 

What do I think about the stability of the solution?

It's a stable product. Microsoft only recently entered this market and nobody believed that Microsoft antivirus would be good. They are now trying to prove everyone wrong in that sense by having a good security product. 

What do I think about the scalability of the solution?

Scaling in or out is very easy. Scalability is really about licensing so you just have to request a registration license.

How are customer service and technical support?

Ninety-nine percent of the time, I'm able to solve the problem. I do not have access to Microsoft support so if I go to their open support page and try to login a request, it takes up to 24 hours for the support agent to get back to me. It's pretty average. If you have the premium support or if you're a support partner of Microsoft, they respond back in one or two hours, something like that.

Which solution did I use previously and why did I switch?

I tested the difference between Symantec and Defender by taking a malware from the internet and downloading it. Symantec allowed me to do it, even though it shouldn't have, but Defender, gave me notification and wouldn't allow me to do it. That said, Symantec is a very stable product that's been on the market for a long time. They have more expertise in endpoint protection than Microsoft. Symantec is not a cost-effective product for most customers. It's integrated with third party companies and is good in protecting endpoint. Because my customer base is companies that use Office 365 and Microsoft Azure so Microsoft integration with these products is very good.

How was the initial setup?

The initial setup is very simple, you just have to attach it to the user's email address. Once the user logs in, it automatically downloads and starts working. I do the implementation.  In terms of maintenance, sometimes my engagement with the client is one time but sometimes, I do maintenance as well. This is a subscription-based, cloud-based product. They have to call me every year to renew. 

What other advice do I have?

I would suggest that if you're already using Microsoft products, then I think it makes sense to go with Microsoft Defender over any other product.

I would rate this solution an eight out of 10. 

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
PeerSpot user
Navision Consultant and user support at NCPD
Real User
Leaderboard
If any viruses are found, they are cleaned automatically
Pros and Cons
  • "Automatic scanning and cleaning of viruses is the best and most valuable feature helping this tool to thrive. If any viruses are found, they are cleaned automatically."
  • "With increase of cyber threats and cybersecurity issues, I would recommend that the product be developed like an AI product with more features which can counter any threat in the coming eras."

What is our primary use case?

I have used Windows Defender to protect my computer from viruses or harmful websites on either flash drives and other removable devices when I am online which tend to attack my computer and corrupt it causing inefficiencies in my computer working processes. 

I usually check from time to time if the hard disks of my computer has been infected and remove the files that are harmful to my systems. Another purpose of this tool is blocking and filtering sites that are harmful or appear threatening to my system.

How has it helped my organization?

Windows Defender has improved my organisation's security in many ways which ensure that my systems are being safeguarded. Since we are mostly online doing our projects and research, we tend to enter into harmful sites that may damage our computers. But Windows Defender does great work in blocking and warning you of those sites. Another advantageous part is that when removable devices are connected to our systems they are scanned for viruses and cleaned immediately. Hence, it ensures no viruses from external devices enter into our systems. It automatically scans and checks for viruses on the hard drive from time to time ensuring good security in our systems.

I have used the solution for more than five years and the solution has greatly influenced my work. It gives good results in protecting my systems and data.

What is most valuable?

Automatic scanning and cleaning of viruses is the best and most valuable feature helping this tool to thrive. If any viruses are found, they are cleaned automatically.

Another feature is the ability to filter sites and block harmful ones, which makes it to enter sites with full protection. This ensures no harmful Trojans can be sent into our systems through those sites and are always blocked when detected.

Another great feature is the ability to warn the system user, making it easier to know when a virus has been found on our system.

It is easy to use and has a lot functionality to make systems safeguarded in the right manner.

What needs improvement?

The product should keep updating its software as to counter incoming threats since threats are becoming more advance with time. The product should be strong in all parts.

I would recommend if the product continues to be updated that the way it updates is faster for downloading and updating in our system. The stability is good and should continue to perform well in that way. 

With increase of cyber threats and cybersecurity issues, I would recommend that the product be developed like an AI product with more features which can counter any threat in the coming eras.

For how long have I used the solution?

I have used the product more than five years. It is a great tool.

What do I think about the stability of the solution?

The solution is very stable. It has good features that make it efficient in the security aspects of our systems.

What do I think about the scalability of the solution?

The product has performed very well in my computers. I don't have any complains about its functionality.

Which solution did I use previously and why did I switch?

I have never used any solution apart from Windows Defender when safeguarding my systems.

How was the initial setup?

The solution comes pre-installed in the Windows Operating System so you do not have to install it manually. You are required to connect to the Internet and update the solution to the latest version.

What about the implementation team?

I am just an end user of the solution.

I hired a technical guy to keep the solution up-to-date since it could be more stable and work more efficiently.

What was our ROI?

I invested in Windows Defender since it has good functionalities. 

What's my experience with pricing, setup cost, and licensing?

The product is free of charge and comes integrated into Windows. 

Which other solutions did I evaluate?

I chose Windows Defender for system safety, its ease of use, and the continuous update of the product.

What other advice do I have?

Windows is a great tool that I have used. It has helped my organisation in achieving what it does daily and protected our data in a great way.

I would recommend every user who has a computer or laptop to consider using Windows Defender since it is the best tool to safeguard your system from malware and attacks.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Download our free Microsoft Defender for Endpoint Report and get advice and tips from experienced pros sharing their opinions.
Updated: December 2024
Buyer's Guide
Download our free Microsoft Defender for Endpoint Report and get advice and tips from experienced pros sharing their opinions.