Microsoft Defender for Office 365 Reviews

We utilize Microsoft Defender for Office 365 to enhance our email protection.

All of our Office 365 solutions are stored in the cloud. We have recently acquired multiple licenses for Microsoft Defender for Office 365.

We also use DMS. I believe that integration comes out of the box because both products are from Microsoft and I haven't taken any steps to do any integration myself.

The comprehensiveness of DMS and Microsoft Defender for Office 365 has been incredibly helpful, particularly concerning email attachments. They have successfully identified numerous suspicious attachments, some of which were reported. The integration of these two solutions has proven to be extremely beneficial. Additionally, they have been effective in detecting phishing links and untrusted sites in emails on several occasions.

I remember what actually prompted us to switch to using Microsoft Defender for Office 365. We had several people who were not tech-oriented receiving loads of phishing emails, and their credentials were almost compromised. It wasn't just them; we had many other users in the organization facing similar issues. To address this, we conducted a phishing simulation, and unfortunately, a lot of people failed the simulation. After analyzing the situation, we realized the need to provide better training and implement additional security measures in case someone made a mistake or failed to follow proper procedures. That's why we decided to go with Microsoft Defender for Office 365. So far, it has been effective in identifying a lot of threats. Previously, we received several complaints about compromised credentials, mainly due to phishing emails. However, since we started using Microsoft Defender for Office 365, the number of complaints has drastically reduced. Although some people still fail our phishing simulation during in-house tests, externally, Microsoft Defender for Office 365 has proven valuable in filtering out numerous threats. I'm confident that without it, many accounts would have been compromised.

Microsoft Defender eliminates the need for multiple dashboards. When I'm on the Office 365 dashboard, I don't see any reason why I would need to access another dashboard.

Microsoft Defender for Office 365 identifies various threats and notifies us whenever it detects something suspicious. Without Microsoft Defender for Office 365, it would be quite time-consuming. We used to receive numerous complaints about credential tests, but since its deployment, those complaints have drastically reduced. Microsoft Defender for Office 365 has saved me a considerable amount of time.

It indirectly helps our organization reduce costs. We encountered a situation where one of our financial officers had their credentials stolen, and someone attempted to impersonate them, trying to transfer funds to other accounts. However, the system flagged the suspicious activity, and we were able to prevent the unauthorized transfer.

Microsoft Defender for Office 365 improves our ability to detect and respond to threats. It easily identifies all potential threats and promptly notifies us. I can only imagine the consequences if it weren't in place. Numerous suspicious links and attachments might have gone through, resulting in additional work and time spent on finding ways to remediate, resolve, and contain the situation.

The two main features that prove most beneficial for us are URL scanning and attachment scanning.

URL scanning involves an automatic scan of links and emails. When a user clicks on a link within an email, the system promptly checks the link's safety. If the link is deemed safe, access is granted automatically. However, if it is flagged as unsafe, we receive feedback and notification to caution us about the potentially harmful link. At this point, we are presented with the option to proceed or return. I have personally witnessed the system identify a few unsafe links, making this the primary advantage of using the solution.

The second crucial aspect is the scanning of attachments. When an email containing an attachment arrives, we receive a notification of the new email, along with information that the attachment is being scanned for threats. This additional layer of security provides peace of mind for our organization.

While Microsoft Defender for Office 365 offers numerous features, these two stand out as particularly impressive and valuable to us.

Microsoft Defender for Office 365 should be more proactive. As a major global player, Microsoft possesses the platform to gather more information than any other company. Utilizing this information would enable them to make the system much more proactive. It would be sensible for Microsoft Defender for Office 365 to send occasional notifications, acting as advisories on how to prevent the latest threat trends. Similar to a newsletter, these notifications could guide users to take appropriate measures and review their organization's configurations, thereby ensuring maximum security.

I have been using Microsoft Defender for Office 365 for around four years.

Microsoft Defender for Office 365 is extremely stable. I have not seen any downtime.

Microsoft Defender for Office 365 is scalable. We only need to add licenses to include more users.

Eighty percent of the time, the technical support is good. There are occasions when we are redirected, which can be annoying, but for the most part, they are good.

Positive

The initial setup was straightforward. There wasn't much to do for Defender. We simply purchased the licenses and applied them to the users. It was a seamless deployment. As for Office 365, we had a couple of E3 licenses and had to install Office on the users' desktops. That proved to be a tedious task. 

To deploy Microsoft Defender for Office 365, we simply wrote a script to assign licenses to users in bulk. Three people, including myself, handled the deployment.

For small and medium organizations, the pricing might not be affordable. Although Microsoft Defender for Office 365 is a good product; something all organizations should have. However, the question is, can all organizations afford it? For large enterprise organizations, they can definitely afford it, but for small and medium organizations, they might struggle to cover the expenses. 

We also assessed Sophos Email before implementing Microsoft Defender for Office 365. Since we were already using Office 365, we believed it would be a seamless and more effective option to proceed with Microsoft Defender for Office 365.

I would rate Microsoft Defender for Office 365 a seven out of ten. The solution meets my expectations, but I would appreciate information on current threats and an increase in the level of intelligence gathering to be more proactive. It would be helpful to receive information on steps I can take to prevent potential threats, as our organization might be a target based on the threat intelligence it has gathered.

I have had a couple of Microsoft resellers try using Sentinel with my organization. Perhaps it was due to the configuration, but it didn't seem like there was much setup required. Essentially, we weren't able to see as many details as we expected, likely because we already have an in-house sync solution, and we were attempting to integrate Sentinel alongside it. Consequently, we also continued using the other solution. However, what we obtained from Sentinel, didn't provide us with much information compared to our existing solution. This is why we decided not to proceed further with the Proof of Concept for Sentinel. It's possible that the reseller didn't configure something properly, or maybe it didn't demonstrate some of the things it was supposed to. But based on our end-user experience, we didn't receive sufficient information from Sentinel as we do with our current solution. Hence, we made the decision not to move forward with the POC for Sentinel.

It is not advisable to engage with different vendors. This is because there will be instances where issues arise, and a particular vendor may not take responsibility for the problem. Dealing with multiple vendors makes it challenging to accomplish tasks efficiently, as we often find ourselves unsure about which vendor is accountable for each aspect. On the other hand, opting for a single vendor, even if they cannot fulfill all our requirements, is still preferable. This choice allows us to have a clear point of contact when something goes wrong, and the integrations are smoother. Additionally, using multiple vendors can lead to integration problems.

To properly utilize Microsoft Defender for Office 365, we must first acquire an Office 365 subscription. If we are already using Office 365 and seeking enhanced protection, Microsoft Defender for Office 365 becomes an obvious choice. It offers seamless integration and straightforward usage. To proceed effectively, we need a clear understanding of the users requiring protection and precise guidance on configuring the policies to ensure they provide the necessary protection effectively. 

We use Microsoft Defender for Office 365 to protect our Outlook 365 inboxes. When opening links in emails, Defender's URL defense verifies the legitimacy of the URL, ensuring it's not a spam link. This protection is active whenever clicking on any link within Outlook 365.

Our organization's security has been strengthened with Microsoft Defender for Office 365. Regardless of the specific tools we use for our daily office tasks, our data remains protected.

It provides great visibility into vulnerabilities compared to its competitors. Its insights and timely identification of Common Vulnerabilities and Exposures enable proactive threat mitigation, making it the preferred choice for comprehensive security.

Microsoft Defender for Office 365 is critical for our organization's security and privacy because it helps prioritize enterprise-wide threats and protects our sensitive data. Data breaches pose a significant financial risk, potentially costing millions or even billions of dollars, making Defender's role in safeguarding our data vital.

It automates routine tasks and prioritizes high-value alerts, providing automated insights to our security team. This allows us to proactively block harmful activities like anonymous calls and intrusions, significantly enhancing our overall security automation.

Microsoft Defender for Office 365 provides threat intelligence, enabling proactive threat mitigation. It monitors all network traffic, both incoming and outgoing, allowing us to track data and protect our network perimeter. This comprehensive monitoring includes network calls, enhancing our overall system security.

Microsoft Defender for Office 365 has helped to save us time and money and has reduced our time to detect and respond.

The most valuable feature of Microsoft Defender for Office 365 is its spam filter. This filter effectively reduces wasted time by automatically identifying and blocking spam emails before they reach our inboxes, moving them directly to the spam folder. This prevents the constant need to manually review and delete these unwanted messages.

Microsoft needs to broaden its global support presence by establishing teams of subject-matter experts in all regions.

I have been using Microsoft Defender for Office 365 for six months to one year.

Microsoft Defender for Office 365 is stable.

Microsoft Defender for Office 365 offers excellent scalability, as evidenced by Microsoft's support of nearly all Fortune 10 companies.

The technical support is good, providing a clear channel for submitting requests. Based on the severity level, C1, C2, or C3, they consistently provide appropriate responses within the agreed-upon four-hour service level agreement.

Positive

As a technical user of Microsoft Defender for Office 365, I've seen a positive return on investment in how it helps secure our environment and ecosystem. The insights and intelligence provided have also been invaluable to our security team in securing our enterprise's information.

I would rate Microsoft Defender for Office 365 nine out of ten.

I am the IT director for my organization, a small municipality with a population of 20,000 located in New Mexico. We employ 250 staff members. Our cybersecurity measures encompass a wide range, including endpoint management and the utilization of Windows Defender for Office 365. This software is internally deployed and primarily focuses on monitoring our email systems. This is where the most intricate configuration is applied. It examines our email traffic, aiming to prevent a significant amount of spam and numerous phishing attempts, although it cannot catch everything due to inherent limitations, it effectively performs tasks such as antivirus and antimalware functions within our email communication.

I would rate the visibility into threats eight out of ten.

Microsoft Defender for Office 365 assists to some extent in prioritizing threats across our enterprise, but it is not our primary tool for this purpose. I would rate the significance of this capability in Microsoft Defender for Office 365 a five out of ten.

I also utilize Windows Defender for both our desktops and mobile devices running on iOS and Android. Additionally, we employ Azure AD for authentication. All of these solutions have been seamlessly integrated into a unified dashboard. This integration process is highly straightforward and occurs automatically during the setup phase.

Our integrated solutions all work natively together to deliver coordinated threat responses.

Microsoft Defender for Office 365 assists in automating routine tasks and identifying high-value alerts. This has led to a 100 percent improvement in our security operations, as we had not implemented anything prior to the adoption of Microsoft Defender for Office 365.

Microsoft Defender for Office 365 has aided in decreasing the number of dashboards we need to monitor, although it does not eliminate all of them. As a cybersecurity practitioner, I still require external vulnerability management for certain third-party risk assessments; Microsoft Defender for Office 365 does not cover those aspects. Consequently, I utilize a separate product for that purpose.

It currently lacks built-in security awareness features. However, efforts are being made to develop such features. The initial stages of the security awareness program can already be observed in the Microsoft platform. Defender for Office 365 provides us with a tool called Safe Links, which enables us to analyze attachments, including both files and data. If someone attempts to access content that is later identified as malicious, we receive a notification. This allows us to identify users who may have interacted with harmful content to some extent, addressing active and potentially harmful interactions. If an individual receives a suspicious link, Safe Links examines the link for potential phishing characteristics. Although the link's malicious nature might not be immediately apparent, it is delivered within a protective Safe Links wrapper. Consequently, if the recipient clicks on the link, this action is logged within the Microsoft environment. Later, if the link is identified as part of a credential phishing attack, appropriate measures are taken. This includes deleting the associated email and notifying the user who clicked on the link. Subsequent actions may involve remediation, such as password changes if deemed necessary. This integration works seamlessly and proves to be highly effective.

Microsoft Defender for Office 365 has helped our organization save around 20 hours of work time.

It saves our organization money. No one would accuse the Microsoft product of being cheap or inexpensive. However, the reality is that most of the security functionality is included in the licensing that I need to purchase to support my operation. In other words, I'm not buying these security products separately; I'm obtaining them as part of my Microsoft 365 licensing. It's not an add-on; they are required components of the government cloud licensing that I have purchased. Therefore, I must acquire Microsoft 365 to access applications such as Office, SharePoint, OneDrive, Exchange, and others. The security features are all integrated within this package; I don't need to source them from elsewhere. Additionally, I would have had to pay for the performance products regardless.

There are several features that I consider valuable. These include anti-malware and anti-phishing capabilities, along with certain remediation abilities for addressing issues once identified. Moreover, the system allows for easy reporting of problems. In the event of a phishing attack, we can conveniently initiate a comprehensive search to identify all related elements of the campaign and remove them from users' mailboxes.

Additionally, the platform offers anti-spoofing measures targeting well-known high-value targets. This proactive approach helps in mitigating business email compromise by designating our high-value personnel. Consequently, any communication purporting to originate from these individuals undergoes a more rigorous verification process to ascertain its authenticity and whether it genuinely stems from a valid account associated with the respective individual.

Microsoft Defender for Office 365 lacks proactivity in assisting us with preparing for potential threats before they occur. While they employ a substantial amount of threat intelligence to preemptively prevent incidents, their effectiveness diminishes when it comes to delivering proactive threat intelligence alerts from Microsoft. Their focus primarily revolves around managing the internal environment. On the other hand, my other vendor, Check Point, along with my membership in MS-ISAC, supplements me with this type of information. 

The phishing and spam filters could use some improvement. It is adequate, but it doesn't match the quality of Proofpoint or Mimecast. However, it comes close in effectiveness. Plus, if we're obtaining it for free, investing in the other products seems impractical.

I have been using Microsoft Defender for Office 365 for around seven years.

Obtaining technical services is challenging.

Negative

I would rate Microsoft Defender for Office 365 eight out of ten.

I would rate the comprehensiveness of our integrated Microsoft products for threat protection a six out of ten.

Over 4,000 employees across my organization use all of the products under Office 365, as it is super pervasive. Everybody uses them every day in my organization. My organization is a manufacturing company, where Office 365 has become a daily necessity.

I am a little biased towards Microsoft Teams because it is what I use and helps me pay my bills. In Microsoft Teams, file-sharing options and ease of collaboration or meetings allow for quick collaborations and chats.

I work in my company's IT department, so I use all of the products under Office 365 daily, including Microsoft Word, Microsoft PowerPoint, Microsoft Teams, and all the other components in the product. My company can't make it through a day or go by without using the products offered under Office 365. Some of our manufacturing workers may use Office 365 a lot less, but it is still necessary for things like Microsoft Outlook and Exchange.

I found Microsoft Teams to be the most valuable feature of the solution, along with all of the products and features offered under Office 365. My organization has remote workers, and we can't run the company without meetings organized with the help of Microsoft Teams.

It seems like Microsoft has begun to roll out products before they are fully baked. Microsoft wants its well-paying customers to finish testing some of its half-baked products, find bugs, and report bugs back to Microsoft's team, which is a little frustrating for those who have to manage it and roll it up to thousands of people across the organization. I would say that Microsoft should release or launch better or fully baked products before going ahead with the GA phase.

I use Office 365 in my company as we have an enterprise contract with Microsoft from 2020 that ends in 2025, but it may get extended.

It is tough to speak about the stability-related area of the solution, especially considering that the newly released Microsoft Teams is not so great. The classic version of Microsoft Teams was relatively stable compared to its new version, but in our company, we faced some challenges with network performance. I don't know if there were any network performance issues at our end, with the ISPs, or at Microsoft's end, making it tough to pin it down.

The product's scalability is good.

Microsoft's support was great during the rollout period, especially since it was the product's operational phase. Microsoft's support team has scaled back, so my company has Microsoft365DSC for Microsoft Teams specifically. My company sometimes struggles with getting direct answers and real insights from Microsoft's support team, especially when we need a higher level of insight while no super technical questions need to be answered, leading to some frustrations.

I rate the technical support a seven out of ten.

Neutral

I was involved in the deployment of Microsoft Teams but not the rest of Office 365. Nowadays, everything is complex, but the deployment of Microsoft Teams was pretty straightforward since my company got a lot of help from Microsoft directly.

My company received direct help from Microsoft during our organization's deployment phase of Microsoft Teams.

I have seen a return on investment from the use of the product. With the product in place, my company no longer needs to rely on paper and pen in many ways, which has helped us save time, energy, effort, and money while ensuring an increase in productivity.

I know that the product is incredibly expensive. I know that my company has high expectations from Microsoft because of the high cost. I also know that Microsoft delivers tremendous value for our company in terms of productivity and collaboration. With Copilot coming along, the value Microsoft provides to my company will be even higher than what it was previously, owing to the productivity gain and the reformulation of how we work because of AI.

I believe that my organization will get ready to start looking into other solutions in the market because our contract with Microsoft will come to an end in 2025. I think that the evaluation process will be something that is on the horizon next year. My company may evaluate all of the available options in the market against Microsoft.

Unfortunately, I can't speak much about the visibility into threats that Microsoft's security solution provides.

I am unsure if the solution helps our organization prioritize threats across our enterprise, but I think it does. I get to leave the security part to be handled by the smart security personnel in my company.

I believe that Microsoft's security solution helps automate routine tasks and routine finding of high-value alerts. It is not my area of expertise, but the security team in my company seems to be pretty happy with the vendor.

I think the solution's threat intelligence helps my company prepare for potential threats before they hit us and helps us take some active steps.

I know that my company's security team is very aware of what Microsoft does, especially with Microsoft Defender and its related products. My company's security team is better equipped to stay at the front of any curve. My company's security team had approached me to speak about Microsoft Teams and asked me to tweak certain settings based on industry standards and the developments Microsoft has been coming forward with lately. The aforementioned aspects explain how threat intelligence affected my company's security operations.

Microsoft's security solution has helped my company save a lot of time, as we believe in being more proactive than cleaning up the mess at a later stage.

I am sure that the product helps my company save money, especially since it aids us in finding threats before they actually become a reality. Probably, my company saves millions in terms of money since we don't have to clean up any mess as the product has already prevented it.

I believe that the solution has helped my organization decrease the time to detect and respond to threats, but I can't explain how or how much.

I would suggest that others who plan to use it just find the right contact within Microsoft, work very closely with them, and lean on them as much as needed.

I rate the overall tool an eight out of ten.

We use Microsoft Defender for Office 365 for our endpoint security.

Microsoft Defender for Office 365's visibility is good.

Microsoft Defender for Office 365 helps prioritize threats across our enterprise by using an endpoint.

Integrating with other Microsoft solutions is generally straightforward, as everything can be managed from a single console. However, there are some cases where the integration process can be complex, such as when it requires accessing a different dashboard. Overall, the benefits of managing multiple Microsoft solutions from a single place outweigh the occasional complexity of integration.

Our solutions work together natively to provide coordinated detection and response across our entire environment. This coordinated detection provides high-quality results because it is easy to check emails and endpoints for threats. We chose to bundle the solutions because of their ability to integrate.

Coordination and integration are essential in cybersecurity because there are many resources to monitor. The ability to coordinate and integrate from a single source makes it easier and helps to eliminate the need for multiple products.

Microsoft Defender for Office 365 has improved our security posture, especially around email. It integrates easily with our other Microsoft solutions and provides good visibility into our systems.

Microsoft Defender for Office 365 helps automate routine tasks.

Automation allows us to focus our resources on critical issues instead of the standard security tasks that can be automated.

Microsoft Defender for Office 365 saved our organization time.

Microsoft Defender for Office 365 increased our productivity, which resulted in cost savings.

Microsoft Defender for Office 365 helped decrease our time for detection and response. 

Microsoft Defender for Office 365's most valuable feature is its performance.

The ransomware protection is good.

Microsoft Defender for Office 365 is a comprehensive security solution, but it could be improved. Compared to other solutions, Microsoft Defender for Office 365's security reports are not as detailed and the visibility into our network coverage could be better.

The IOC scanning has room for improvement.

The XDR dashboard has room for improvement. The dashboard needs more of a single pane of glass because currently, Microsoft Defender for Office 365 does not give me any options to scan an email thread or attachment for IOCs on my endpoint. I need to manually download the file from the email and then scan it with Microsoft Defender for Office 365. I think Microsoft Defender for Office 365 should be able to scan email threads and attachments directly, without the need for manual intervention.

Secondly, the Data Loss Prevention functionality in Microsoft Defender for Office 365 is very limited. It can only scan for certain types of data. Microsoft Defender for Office 365 should be able to scan for a wider variety of data types, such as customer lists and intellectual property.

Attack process management and breach attack simulation should be included in Microsoft Defender for Office 365.

I have been using Microsoft Defender for Office 365 for six years.

Microsoft Defender for Office 365 is stable.

Microsoft Defender for Office 365 is scalable.

Technical support is generally helpful, but we often need to escalate tickets to resolve issues.

Neutral

I previously used Kaspersky Security for Mail Server, Trend Micro Email Security, CrowdStrike, and Mandiant. However, my organization now uses Microsoft Defender for Office 365. This is because we are a Microsoft customer and it makes sense in terms of cost and integration.

We have seen a return on investment using Microsoft Defender for Office 365.

Compared to other brands, Microsoft Defender for Office 365's pricing is competitive.

I give Microsoft Defender for Office 365 an eight out of ten.

The maintenance is seamless.

A single-vendor approach is better than a best-of-breed approach because it provides a more integrated and seamless solution. This means that there is no need to worry about compatibility issues or data silos and the overall security posture is better.

Microsoft works hard to provide customers with a single pane of glass so they can easily manage, scale, and maintain their solutions. I recommend Microsoft Defender for Office 365.

We are using Microsoft Defender for Office 365 primarily for security purposes.

The integration with Office 365 is seamless, and we don't need a large IT team to manage it. It helps in maintaining the basic security functions without additional complexity.

Since we are using the basic version, we find that it covers most of our requirements without needing additional configurations. It’s easy to handle integrations, and we don't need a lot of people in our IT team.

Sometimes, phishing emails manage to pass through the filter, so the system needs to enhance its phishing email detection capabilities. We also need alerting features for abnormal actions like unusual logins or abnormal activities in the mailbox.

We have been using Microsoft Defender for Office 365 for seven to eight years.

Stability is generally good; I would rate it an eight out of ten.

Scalability is also quite good. I would rate it an eight out of ten.

Technical support from Microsoft is reliable and meets our expectations. I would rate it an eight out of ten.

Positive

We chose Microsoft Defender as it integrates easily with our existing Office 365 setup, and we do not need to pay extra for security functions.

The setup was easy and not time-consuming. We didn’t need to set up much as it was integrated with Office 365.

The installation was handled by two engineers in our team.

Since we are using the basic functions, we don't need to invest a lot of money. It does help in cost reduction.

The pricing is reasonable since it comes integrated with our Office 365 license.

In our current situation, we are not considering other vendors for this purpose.

Integration with Office 365 is one of the strongest points. I recommend it for easy handling and less need for additional IT resources.

I'd rate the solution eight out of ten.

Microsoft Defender for Office 365 is used to protect our organization from attacks.

Our deployment is a hybrid model with 80 percent being on the cloud.

The visibility into threats is excellent. A dashboard provides real-time information on emails, blocked emails, blocked files, and blocked URLs.

We integrated Microsoft Sentinel and Microsoft Intune with Microsoft Defender for Office 365. Integrating Intune was a little difficult but we managed.

The solutions work natively together to provide coordinated detection and response across our environment. This is important.

The integrated Microsoft solutions provide comprehensive insights into threat issues through threat analytics.

Microsoft Sentinel allows us to ingest data from our entire ecosystem. This is important because it provides us with a vital security feature that allows our organization to monitor and respond to alerts and threats detected in our enterprise via Sentinel. We have configured custom alerts and triggers in Sentinel, which gives us a better understanding of the threats in our organization.

Microsoft provides a comprehensive view of alerts to help investigate issues and address malicious emails. We can investigate and share feedback in our message tracking log and the threat explorer in Defender to mitigate and resolve the root cause of the issues.

Microsoft Defender for Office 365 saves us time with our investigations.

We now use the cloud to maintain our email as a gateway which has saved us money by not requiring on-prem hardware.

Our time to detect and respond to malicious emails was decreased. The solution provides the CPU resources needed to scan emails for malicious content, and it also makes it easy to track the number of administrative emails sent to users.

Microsoft Defender for Office 365's most valuable features are safe attachments and safe links.

The GUI is sometimes slow to fetch the device report and could be improved.

It would be great if Microsoft Defender for Office 365 were priced at the tenant level, rather than the user level. This is because the feature is used by all users in the tenant, not just individual users.

I have been using Microsoft Defender for Office 365 for two years.

Microsoft Defender for Office 365 is stable.

Microsoft Defender for Office 365 is scalable.

Technical support is often unsatisfactory. When I open a ticket, the initial engineer I speak to often has no hands-on experience and needs to escalate the issue to someone else. This can take a long time, as the engineer needs to check with the internal team before they can provide any assistance. In the end, the issue is eventually resolved.

Neutral

We previously used Barracuda Email Security Gateway, but it did not sandbox emails. After careful consideration, we decided to switch to Microsoft Defender for Office 365.

The initial setup was straightforward. We just follow Microsoft's documentation and fine-tune the default custom policies as well as new days on custom policies for data management and checking. Two people were required for the deployment.

The implementation was completed in-house.

We have seen a return on investment.

The license is expensive because the cost is based on the number of users. The more users there are, the higher the cost.

I give Microsoft Defender for Office 365 a nine out of ten.

We have four people that directly access the solution.

There is no maintenance required from our end.

Before using Microsoft Defender for Office 365, organizations must ensure that the policies are configured correctly to fit their specific needs.

It is better to choose a single vendor with high expertise in a specific area, rather than a best-of-breed strategy.

365 Defender is a critical tool for mitigating attacks and preventing threats. We use it for email filtering and blocking phishing attacks throughout the entire enterprise. We have around 1,500 users. 

365 Defender has improved our security across multiple categories. It's effective against advanced attacks like phishing and ransomware. Defender's attack disruption works well if you have a strong policy configuration. It will automatically block threats and filter them in most cases without the need to investigate. It will remedy the threat immediately. 

The automated response reduces the manual work, saving our security team time. I would estimate it saves about six hours per day. 

Defender is a SaaS platform, so it offers more flexibility. Managing the permissions is easier. The solution's automated detection and response features are scalable. It's a unified solution that doesn't just cover Microsoft products. We're a multi-cloud shop, and having that coverage is critical. It also includes the latest IAM features like two-factor and multifactor authentication, giving us the most robust solution.

You should be able to deploy Defender for every subscription without the need to add servers. 

I have used 365 Defender for almost six years

I rate Microsoft 365 Defender nine out of 10 for stability.

I rate Microsoft 365 Defender nine out of 10 for scalability.

I rate Microsoft support nine out of 10. Their support is excellent. 

Positive

We migrated to 365 Defender from a McAfee solution.

365 Defender is a cloud-based solution deployed on Azure. You can set it up in two days with some help from Microsoft support using two people.

365 Defender is worth what we paid for it. 

I rate Microsoft 365 Defender nine out of 10. It's the most economical product you can buy, offering a range of features for safeguarding your enterprise.