BitLocker Drive Encryption vs. Microsoft Defender for Endpoint

It can be used if you are already familiar with other Microsoft System Center tools, it will provide integration and it will be easy to use from an Administrator's perspective. However, if you want more detailed information related to the troubleshooting, specific fields, or data, it will not be that granular.

Incentivized

I can definitely tell you where it’s more suited, because we haven’t come across any less appropriate scenarios. But definitely in regard to how we centrally manage our user space and our endpoints, it’s been beneficial from an API perspective and is really transferable, with strong collaboration with our Azure stack. It works very well.

• It is fairly easy to use, from both a technician and users point of view. The install itself is pretty simple, and setup of the software is also fairly simple. For users, it is easy to use the software to encrypt the computer.
• It doesn't seem to use a whole lot of system resources when the encryption is enabled on the computer. You shouldn't experience any slowness of the computer, other than the time it takes to first encrypt the computer.
• It serves its main purpose very well, and that is to protect computers from intrusions/data breaches. It is particularly good for protecting computers that are accessing/storing sensitive/confidential data.

Incentivized

• It really protects our endpoints. We've used other antivirus programs in the past, and they haven't had that full confidence in those products compared to what Microsoft Defender for Endpoint does for us.
• Another pro is that it's easy to manage the management console through Intune to see Microsoft Defender for Endpoint up in the cloud and see the state of our devices.
• Another pro is we haven't had an incident since we installed it.

Incentivized

• Even if it's the best we tested, I think write performance could be improved. Maybe with dedicated hardware inside the TPM?
• No integration with OS password is a shame as most others have it and it is Microsoft on Microsoft so they can probably do it better then anyone else and safer.
• I wish they would support multiple passwords like FileVault on macOS. If it's a shared computer, you have to give the only password to Bitlocker to both users.

Incentivized

• It would be good to continue to minimize the amount of resources needed during a scan
• Provide more integration with Outlook to scan attachments with a notification that everything is good
• Provide a Click to Fix option when listing issues or high-risk problems on systems

Incentivized

Microsoft Defender is closely catching -up in market with existing competitors they have added DLP endpoint & DLP Network and Cloud DLP solution last year with OCR capabilities. I would say Microsoft Defender is not legacy Vendor in end point security, the need to learn from other vendors in market and focus on new XDR technologies, which is going to be new battle for all vendors

Incentivized

Very easy to enable.

Microsoft Defender for Endpoint is a great EDR to have that works quickly and silently in the background and it integrates well with other Microsoft services. As an IT manager, I can appreciate that I do not get bombarded by alerts for every small detail. On the flipside, the management site can use some work in being more clear and should be more streamlined so I'm not clicking through multiple pages to figure out what happened

Incentivized

Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.

Incentivized

Microsoft Defender for Endpoint is easy on memory and resources on clients.

Incentivized

Not good nor bad, BitLocker encryption is a symptom of our era, we need to protect ourselves and our data, BitLocker is a tool, as an IT we have to deal with it but it doesn't bring any benefit to my daily operations.

Incentivized

Overall support is really good for this product. Since it's a Microsoft product, you will get good support from a number of different resources, including knowledgebase articles on the web, support from Microsoft technicians, and documentation (which tends to very thorough). Also, there is a vast user support community for this product, so user support forums would also be another valuable channel to get help if needed. I don't envision too many people will have issues/problems with the product, as it tends to run good overall.

Incentivized

Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.

Incentivized

This was formerly called Symantec PGP encryption. We selected BitLocker since this is what the University has deployed and is currently supporting. BitLocker has many advantages over Symantec PGP, as BitLocker is built-into all Windows computers. With PGP, this was a commercial product that had to be installed on each machine. That product also was not as easy or intuitive to use as BitLocker, and there were also more issues/problems that occasionally occurred with PGP.

Incentivized

I've used Sophos, Bitdefender, SentinelOne, and, of course, Microsoft Defender for Endpoint. We chose this at the time because we were such a Microsoft shop that it just seemed to integrate well with all the other things that we had set up with Microsoft.

Incentivized

Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises.

Incentivized

• Protects against data loss and theft, which can be very expensive if PII, SPI, PHI is involved. Fines for this type of loss can be very high, along with the costs of notification, and discovery.
• Cost is included in Windows O/S, without needing additional licensing costs.

Incentivized

• Another positive impact is that Microsoft Defender for Endpoint is built into the Windows OS. So naturally, it is much easier to load it out and manage it, rather than acquiring it through party ER, deploying it, and managing it separately. So that's definitely on the positive side that we observe there's a byproduct of changing Microsoft Defender for Endpoint.

Incentivized