Cisco XDR vs. Microsoft Sentinel

I enjoy how well it integrates Cisco systems to provide a single pane of glass for security events that are easily digestible to the SOC. However there is room for improvement to integrate more seamlessly with non Cisco products. XDR is great to identify where malicious processes are in the MITR kill chain and is useful for threat analysis.

Incentivized

If you're already a Microsoft shop, it is the option. That's the only one. If you're not a Microsoft shop or not very deep into it, like E5 licenses, I'd say you get much less out of it than you might from some other products.

Incentivized

• Providing visibility for threat risks
• Detecting holes in the network that have vulnerabilites
• Flagging ddos events and kicking off an incident response

Incentivized

• The visual presentation of data is terrific, so including what we had prior to Microsoft Sentinel, it presents data in a much more usable way, so that's been quite refreshing. It's not quite as complex to understand what you're looking at.

Incentivized

• XDR can improve with more integrations
• XDR can be improved with more programmability for the end user
• XDR can be improved with more options to mitigate events

Incentivized

• It's hard to pinpoint anything that's wrong with it. It's the only thing is the cost. Everyone wants stuff cheaper, right? Because the product itself is hard to find flaws in, it does exactly what it says it does. I'd love to use it more, but the cost is too expensive, so you have to use it in specific use cases to drive down the cost. If you could open the floodgates, then you would basically use it more.

Incentivized

it does the job reasonably well

Incentivized

User interface and overall usability are critical for any security platform, and Microsoft Sentinel performs very well in this area. The UX design makes core functions intuitive and easy to access, which enables analysts to work efficiently and use the platform’s capabilities effectively.

Incentivized

Microsoft support is one of the highest rated on the market. It has global and multilingual support. Calls can be made over the phone and the solution is virtually instantaneous with the help of Microsoft engineers. It's great!

Incentivized

While both products were both easy to use and would have fit our environment, we are a very heavy Cisco shop and Cisco Cisco XDR fit better with the rest of our software portfolio. Stellar Cyber has some additional functionality in addition to Cisco XDR but the cost difference didn't work with our budget.

Incentivized

These are all the Microsoft products. We have used Splunk. And again, I would say Microsoft Sentinel stacks up because it's a native tool that is more like an ecosystem. It's not a standalone tool. It's like if you're in the Microsoft stack, Microsoft Sentinel will stack up best to use these things. And of course, Microsoft Sentinel works across clouds as well. So I would recommend Microsoft Sentinel over Splunk or other options.

Incentivized

Did not use professional services

Incentivized

• The impact Cisco XDR has on our organization's overall business objectives is that, in our experience, Cisco XDR Accelerates incident detection

Incentivized

• As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team.

Incentivized