TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cisco Umbrella

    Score8.9 out of 10
    N/ACisco now offers OpenDNS Umbrella Web Filtering. Cisco acquired OpenDNS in August 2015, and rebranded the product as Cisco Umbrella.N/A

    Microsoft Defender XDR

    Score8.7 out of 10
    N/AMicrosoft 365 Defender combines SIEM and XDR capabilities for Microsoft 365 environments, encompassing threat detection, post-breach detection, automated investigation, and response for endpoints. Additionally, it protects cloud apps, emails and documents, and employee identities.N/A
    Pricing
    Cisco UmbrellaMicrosoft Defender XDR
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Cisco UmbrellaMicrosoft Defender XDR
    Free Trial
    YesYes
    Free/Freemium Version
    YesNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Cisco UmbrellaMicrosoft Defender XDR
    Considered Both Products
    Cisco
    No answer on this topic
    Microsoft
    Chose Microsoft Defender XDR
    We selected the Microsoft 365 Defender as we using Microsoft environment and integration with Microsoft 365 Services. Also its provide single dashboard from where we can manage and monitor security across different services, Which streamlines our security operations and …
    Incentivized
    Key User Insights
    Would buy again
    95%
    Would buy again
    91 Answers
    99%
    Would buy again
    85 Answers
    Delivers good value for the price
    98%
    Delivers good value for the price
    88 Answers
    98%
    Delivers good value for the price
    79 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    92 Answers
    99%
    Happy with the feature set
    85 Answers
    Lived up to sales and marketing promises
    95%
    Lived up to sales and marketing promises
    77 Answers
    98%
    Lived up to sales and marketing promises
    58 Answers
    Implementation went as expected
    92%
    Implementation went as expected
    84 Answers
    93%
    Implementation went as expected
    66 Answers
    Best Alternatives
    Cisco UmbrellaMicrosoft Defender XDR
    Small Businesses
    No answers on this topic
    Sophos Intercept X for Server
    Score9.5 out of 10
    Medium-sized Companies
    No answers on this topic
    InsightIDR
    Score8.6 out of 10
    Enterprises
    No answers on this topic
    Kaspersky EDR Optimum
    Score9.2 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cisco UmbrellaMicrosoft Defender XDR
    Likelihood to Recommend
    8.9
    (124 ratings)
    8.7
    (86 ratings)
    Likelihood to Renew
    8.0
    (15 ratings)
    9.7
    (5 ratings)
    Usability
    7.5
    (10 ratings)
    7.6
    (7 ratings)
    Availability
    8.7
    (11 ratings)
    9.0
    (1 ratings)
    Performance
    10.0
    (2 ratings)
    8.0
    (1 ratings)
    Support Rating
    6.9
    (63 ratings)
    9.0
    (3 ratings)
    In-Person Training
    -
    (0 ratings)
    9.1
    (1 ratings)
    Online Training
    8.0
    (1 ratings)
    9.1
    (1 ratings)
    Implementation Rating
    9.5
    (11 ratings)
    9.0
    (1 ratings)
    Configurability
    8.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    9.5
    (10 ratings)
    -
    (0 ratings)
    Product Scalability
    8.0
    (2 ratings)
    9.0
    (1 ratings)
    Vendor post-sale
    8.1
    (3 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    8.1
    (3 ratings)
    -
    (0 ratings)
    User Testimonials
    Cisco UmbrellaMicrosoft Defender XDR
    Likelihood to Recommend
    Cisco
    When a company has a distributed workforce, the produce works very well to unify a set of policies to apply against web bound traffic. Areas we have struggled with is getting value out of our cloud delivered firewall due to requirements to fully use it
    Incentivized
    Read full review
    Microsoft
    In our experience, Microsoft Defender XDR has been fantastic for phishing and account compromise scenarios, Endpoint Security, Automated threat detection and response and just generally giving a great overview through their dashboard, meaning the IT team doesn't need to switch between multiple tools to understand the full scope of an incident. In mostly remote organization like ours, it really helps to keep on top of any potential threats that we don't have the opportunity to spot in person. While it works great for us in a mostly Microsoft 365 environment, I can see how it would be less appropriate in an organization that is less integrated in the Microsoft ecosystem or uses a large number of third party tools.
    Incentivized
    Read full review
    Pros
    Cisco
    • As many companies think—they’re afraid of firewalls, but they want to keep something secure—and what it does best is it simplifies the approach from a cybersecurity perspective, especially from the user perspective. Users spend a lot of time on the web, trying to access sites, clicking links, scanning QR codes, and doing whatever. You can’t really stop them unless you have something in between that can check whether those links lead somewhere safe, or potentially run them in a sandbox if there are threats or specific use cases.
    • So I think one of its strongest points is that it’s very simple, and it’s not expensive compared to if you buy a firewall and licenses from other brands, where you have to configure it and spend engineer work hours or outsource the work. It’s the simplicity, and I think it just works. I had some issues five years ago, four years ago, but now it just works. I’m pretty happy.
    Read full review
    Microsoft
    • One of the greatest strength of Microsoft Defender XDR has the ability to convey alert and signal in the closing point, email, identity and cloud applications in an event. Instead of obtaining isolated alert from each tool, Microsoft Defender XDR consolidates them in a full attack story, which helps the security teams to understand the scope and impact of a danger very fast.
    • If a user clicks on the fishing link, Microsoft Defender XDR automatically can associate malicious emails with lateral movement efforts, suspected sine-in, and endpoint activity-to protect against hours of manual probes.
    • The defender uses AI-powered automation for investigating and treatment of Microsoft Defender XDR events. It can separate the infected closing points, can cancel the compromised tokens, or remove malicious email - without the need for human intervention.
    • When malware is detected on a device, the defender can separate the device, kill malicious processes, and automatically flag the same files throughout the environment, which can spread.
    • Because it is integrated deeply with Microsoft 365 defender, Entra ID (Azure Ad), Intune, and PurView, the defender provides native safety in the XDR Microsoft Stack. It simplifies deployment and maintenance, offering deep visibility in user activity and cloud data.
    Incentivized
    Read full review
    Cons
    Cisco
    • So we had in the past very general rule sets, very detailed rule sets for security rules. Like you can access this page but not this IP range and so on. So hundreds of specific rules for specific machines and the rule management in Cisco Umbrella is not that granular. So it was not possible to build up these rule sets in Cisco Umbrella, but now we see to access it's much better already. So that's why one reason why we are migrating to CQ access to have better API based possibility to manage these rule sets and synchronize them between different products that we are using and in the cloud. So yeah, we hope that with secure access it's a little bit more granular like with Cisco Umbrella currently.
    Incentivized
    Read full review
    Microsoft
    • Enhanced False Positive Mitigation:
    • Improved algorithms to minimize false positives in threat detection, reducing the impact on security teams and preventing unnecessary investigations into non-threatening incidents.
    • Advanced User-Friendly Interface:
    • Streamlined and intuitive user interface for the centralized dashboard, making it more accessible for security professionals with varying levels of expertise.
    • Greater Third-Party Integration:
    • Increased compatibility and integration capabilities with a broader range of third-party security tools
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    First off I never give anything a "10" unless it's perfect. LOL - I grade on the curve. I think OpenDNS/Umbrella is a very good product. I think that fact that Cisco absorbed them is one of the proofs of that. I have used the product back when it was free for companies our size. I have not always appreciated the cost - but in the post pandemic cyber chaos, I believe the cost benefit ratio is still very high. I have honestly not looked at other products because Umbrella continues to work to my satisfaction. I consider Umbrella to be one of the key layers in my cyber security strategy.
    Incentivized
    Read full review
    Microsoft
    We are pleased with the product and have no plans to look for alternatives. We are deeply invested in Microsoft ecosystem and Defender XDR provides seamless integration to other Microsoft products. For academic institution pricing is also quite affordable. In the contrary, we hope to extend the scope of the product for our entire environment.
    Incentivized
    Read full review
    Usability
    Cisco
    Better features and easy to manage system with great customer support and overall usability is great as it works for hybrid environment with ease as it is having features for on prem users as wells as cloud users with great customer support and great team of trained engineers to support our opeartions.
    Incentivized
    Read full review
    Microsoft
    Once configured, it's very usable for any security team or IT Analyst. It'll give you everything you need to know in a single consolidated dashboard, and while you can certainly dive deeper with a very feature rich platform, generally it's very usable. I gave it an 8 as some of the advanced features do have a very strong learning curve, while routine tasks are quite straightforward, some of the features such as threat hunting, custom detections and automated response workflows do have a bit of a learning curve and will require some research and experience to get to grips with
    Incentivized
    Read full review
    Reliability and Availability
    Cisco
    Cisco umbrella services in the cloud are always available. However, the weakness is the VM installed in the data center that are the first resolvers. If the VMs become unavailable for any reason or the vSphere goes down, then all DNS is affected
    Incentivized
    Read full review
    Microsoft
    In our experience there has been very little downtime for Microsot Defender XDR. For us there hasn’t been any single incident where we needed the product and it was not available.
    Incentivized
    Read full review
    Performance
    Cisco
    our experience with cisco products has always been awesome and same is the case with cisco umbrella .Under umbrella cisco provides flexible and scalable software solution to use across different dept and sites . These softwares are very user friendly ,pages load quickly as these applications are designed for minimum latency and reports are also provided quickely
    Incentivized
    Read full review
    Microsoft
    Most of the time the product is as responsive as you might expect from cloud product. Occasionly the product is little slugish, this has been at most a slight irritation. Reports generate quickly ennough for our needs. We also not have found that Defender XDR slows down systems that it is integrated with
    Incentivized
    Read full review
    Support Rating
    Cisco
    Whilst the support is good once you get through to them, it's email only and the response is slow. This is a issue, because its a core system that needs to work. We have had issues in the past where several of our companies have gone down due to Umbrella and support is nowhere to be seen. It is very difficult to know whether Umbrella is having service issues, since they do not regularly update customers on the status of their services, such as is seen by providers such as Microsoft (status.umbrella.com just seems to show up all of the time, I'm not sure it's even updated)
    Incentivized
    Read full review
    Microsoft
    Their support throughout our onboarding of the product was fabulous. They not only took the time to carefully explain to teams not as well equipped with the lingo but explained to the tech team how to teach the other teams to be successful. They never once seemed impatient or annoyed with basic questions and didn’t pretend to know something when they needed to research an answer
    Incentivized
    Read full review
    In-Person Training
    Cisco
    No answers on this topic
    Microsoft
    Good and hard to find someonme who can explain everything for you beside Microsoft they provide you everything you need.
    Incentivized
    Read full review
    Online Training
    Cisco
    Quite easy to understand training modules prepared by knowledgeable trainers. Training modules have included all the desired features of these softwares and the content delivery is very good from the respective module trainers and it explains in details the features and apart from that further training material support is also provided if needed.
    Incentivized
    Read full review
    Microsoft
    Microsoft Provides a good training for the Microsoft 365 Defender and has a good learning paths to learn and take the exams and get your Certifications.
    Incentivized
    Read full review
    Implementation Rating
    Cisco
    At the time we were forced to move from Cloud Web Security to Cisco Umbrella, Cisco Umbrella was far from being a direct replacement. It was frustrating and difficult to migrate due to the lack of functionality. This has since been addressed, however we now have legacy rulesets that were built as bandaids that cannot be removed. Hopefully the migration to Secure Access will address this.
    Incentivized
    Read full review
    Microsoft
    seemless and almost transparent. can be deployed by script if needed so every endpoint on our system get's it. if you have intune it gets dumped on the the endpoint by policy so nothing escapes it
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    Umbrella checked all the boxes for us (at the time) because it supported multiple domains and multiple IPs to protect (we have 20+ offices), and its configuration and policies cover a lot of different options for us. We used another product prior, and it worked well, but it didn't have all the features we needed at the time.
    Incentivized
    Read full review
    Microsoft
    Our product in that area, for instance as a security platform and for us it is for the moment really bad point. We started to move in that direction that there is that disconnect from the client management. So if there is some action that needs to be executed detected by security team, there is not an easy way to make that available to the team that is responsible for managing the identities as users, as the devices
    Incentivized
    Read full review
    Scalability
    Cisco
    Cisco umbrella provides fleaxible and scalable software solutions which are easy deploy across multiple departments and sites wherever needed and this softwares are very easy to use and provides the best interface along with cisco support for other devices apart from cisco infrastructure but still there is scope for improvement on the inclusion of latest features
    Incentivized
    Read full review
    Microsoft
    Azure cloud provides techical power to scale the product for whole organization. From organizational point of view scaling Defender XDR for various IT teams needs good collaboration and clear norms that all teams must agree to and follow.
    Incentivized
    Read full review
    Return on Investment
    Cisco
    • It's a costly product and we have to admit that, but security breaches are costlier, and they can take more than we can afford so we always had positive mindset over our security purchase and Cisco Umbrella had overall positive impact.
    Incentivized
    Read full review
    Microsoft
    • Security incident cannot be measured, once you down you down, hence the security applications like this is just a must have
    • The subscription model will be cheaper and can be a good point if you want to free resources within the IT Team
    • The SaaS model, if measured correctly can and will reduce long term cost in Infrastructure and Man Power
    Incentivized
    Read full review
    ScreenShots

    Microsoft Defender XDR Screenshots

    Screenshot of AH Advanced ModeScreenshot of AH Guided modeScreenshot of CD exampleScreenshot of CD Supported actions