Action1 vs. Microsoft Sentinel

If you need a solution to help you remotely manage your endpoints this is a no-brainer. I highly recommend signing up for the trial and pushing the agent out to a few endpoints to test

I'll go with where it's very suited in certain industries, including ours where the data resides or where it's being sent is incredibly important. So because the data stays within Microsoft World Garden, we are able to piggyback off of a lot of those certifications and meet certain requirements that allow us to expand where we sell our product to outside of scopes that we couldn't reach ourselves.

Incentivized

• Customer service and support team are easy to reach and response time is really fast
• Interface is really user friendly and easy to use

• It is a good tool for threat detection and analysis of the threats. We are using this tool for real time threat detection on our employee machines as well as some servers.
• It provides various options for collecting data sources by leveraging multiple sources using data connectors. This helps us in gathering data from multiple sources such as our servers as well as our employee machines.
• One good thing about this tool is automated incident response thereby increasing the security of servers.

Incentivized

• I wish the remote connection has a file transfer feature.
• I hope Action1 will implement DLP and Secure Web Gateway features in the future.

• It takes some time to learn how to use and install it properly, and it does not connect effectively with external PaaS systems such as Salesforce CRM, Salesforce Commerce Cloud, and so on.
• Microsoft can simplify the display of the logs to make them easier to study, and the user interface occasionally delays, which can also be enhanced.

Incentivized

Price, functionality, and continuous improvement of the product.

Incentivized

Action1 is intuitive. The menu items to the left are self-explanatory and easy to navigate. The learning curve is minimal to get started. It is worth exploring guides for deploying custom or pre-built scripts from the library.Automations are also very simple to understand and navigate. Again, reading an overview or a guide gives you a better understanding all the options available.To get the full benefit of Action1, consult the how-to articles and documentation.

Incentivized

The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.

Incentivized

I never contacted support services

Incentivized

Azure Sentinel is very easy to use and configure. If you are stuck somewhere, Microsoft support is excellent in assisting and solving your issue.

Incentivized

very easy to start using it.

Incentivized

Action1 Cloud Remote Monitoring and Management Solution may not be as feature rich as SCCM and Intune, but it does its job without having to set up and support additional infrastructure on your network. It's more user friendly than ManageEngine's Desktop Central but does most of the same tasks you would be getting from ManageEngine's cloud version of their desktop management system.

I use most of the Sims that are out there, but RSAs, old Sim Log, logic, elastic, a lot of them. Sumo, we checked out Sumo too. We're a Microsoft shop and live almost entirely on top of a Microsoft ecosystem. We are considering other Microsoft security products to integrate with it. So it made a lot of sense to really drive as hard as we could Microsoft Sim at least for a few years to make sure it would fit us.

Incentivized

Did not use professional services

Incentivized

• ROI = Time saved for us.
• The Action1 agent has allowed us to maintain the security of our endpoints by allowing us to update all software on our fleet of devices.

• Log Management is a little difficult in-house as everything is situated on the cloud.
• Paying according to the throughput of the data can be costlier for some organizations.
• Excellent integration and log parsing for Microsoft products save many man-hours for the SIEM admin to focus on other things.

Incentivized