Azure Monitor vs. Microsoft Defender for IoT

We were able to get a single pane of glass for all our monitoring needs on Azure Monitor. However, we would like to see it improve to auto scale out and scale in depending on the load without human intervention. This can help us get to the No Ops model and rely on automated processes rather than manual intervention.

Incentivized

Suited in almost all situations as it has a server less option where if your end device cannot bear the load of an agent, it could be used to protect the network. The comprehensive dashboarding and its integration with Microsoft Defender 365 and Sentinel allows automated remediation and full incident investigation at a single pane. If you don't have a 24*7 SOC team this ca come handy as you can automate workbooks and scripts to run with custom triggers. I haven't faced any scenario where it is not a suitable choice.

Incentivized

• It supports all the Azure PAAS services.
• Can monitor both infrastructure and application

Incentivized

• Easy Integration in the form of multiple deployment options including On Prem, Azure or Hybrid Cloud
• All round protection/ Real time analytics with absolutely no performance hits
• Interoperability with Microsoft SIEM/SOAR. This helps in global threat protection with automated and cross domain network security

Incentivized

• Custom metrics
• Ease of use

Incentivized

• The deployment when new to the system is not an easy task.
• Multiple big project information securing.
• Migrating large amount of different data.

Incentivized

I have not had to work with Azure Monitor support, so it is difficult to say how well the support team is. I assume that Azure has a well-versed team on the customer service side to assist with any issues customers may have. I may need them in the feature.

Incentivized

While other tools have their own unique capability, Azure Monitor helps us monitor essential PAAS services that are not supported by other tools. So even though we have one other APM tool, we still rely on Azure Monitor for some of the special PAAS services, this is a huge advantage.

Incentivized

Defender being native to MS was the decision maker for us.

Incentivized

• We are able to react quickly to the issues.
• Debugging sessions are yielding quicker results to generate RCA.

Incentivized

• Positive: With the influx of IoT device organisations in general, we have seen significant demand of the product and hence a good revenue
• Negatively, sometimes, some preview features may significantly change or stop working, which causes client frustration
• Overall, keeping the distrust in preview features aside, 99% of the times, defender hits the right spot!

Incentivized