CrowdStrike Falcon Identity Protection vs. ManageEngine ADAudit Plus

Identity Protection is well suited for organizations that need to be monitor AD/Entra for suspicious activity. During a Penetration Test our MDR didn't alert on some odd protocol implementations, but ITDR did. It is also simple to setup for MFA on RDP as well. There are other solutions for it, but found I got more out of ITDR than I did from Duo. ITDR is less suited for smaller organizations since it has a 250-seat minimum. They should lower it to at least 100.

Incentivized

I would recommend ADAuditPlus (and/or Log360) to any org that is trying to achieve PCI DSS Compliance and is struggling with some of the monitoring and reporting aspects, provided that the org is prepared to spend a little time and effort in truly understanding the requirements and is prepared to document requirements and match them to the ADAuditPlus product features.

Incentivized

• The MFA component has worked great when it comes to privileged accounts accessing RDP.
• We wanted to stop lateral movement between endpoints and with CrowdStrike Falcon Identity Protection we were able to do that.
• Identity has done a great job at supplementing our MDR service with telemetry.

Incentivized

• ManageEngine ADAudit Plus changes for user and group management can be looked up in builtin reports
• You can build your own reports based on almost every logic you can think of
• You have the ability to create alerts based on logic and filters and sendout custom alerts to email, SMS or other means.
• First you need to understand the basics of the software, after that the software itself is very helpfull in configuring specific items.
• I really love the support that ManageEngine is giving the customer, for all questions I use the chat on their website. This is for me the best remote support I ever saw, and I saw a lot in my 20 years of experience in IT.

Incentivized

• It's not really a fault of the product, but unless you have Falcon installed on all your endpoints your visibility is limited.
• I've yet to get MFA working on CIFS and Powershell traffic.
• The interface could be streamlined a little. CrowdStrike Falcon Identity Protection keeps changing where things are.

Incentivized

• It's based on Java engine that is slow -- reports are often difficult to build (we are going to upgrade the machine it's running on to see if this is the issue)
• Keeping this software up to date is a pain; there should be a better "update" function
• The naming and navigation are terrible -- it's never clear which feature you're looking for and where it's hidden in the menus
• Adding machines is not as easy as it should be; occasionally there are IP conflicts that are nearly impossible to resolve

Incentivized

It works great for everything we need and use. Any issues in the software are pretty easy to resolve with tech support. And they are very responsive to resolving issues. Even ones where a fix/patch are required. At present, the software does everything we need it to for compliance, audit, and account review.

Incentivized

While the product is solid, I do find there are an excessive number of sections you can navigate to. It takes some time getting used to, but it is a very powerful product. It's not something you'll master right off the bat.

Incentivized

ADAudit with its cloud and on prem install option allows any organization to get in on AD report management. Whether you need to report internally only for for external audit controls its a great tool with flexibility to handle most any user or group report capability. Since this also includes m365 integration it enables IT pros to administer usage, license, cost control and permission access to most anything in Microsoft's portfolio. Its a great tool all around for AD integrated access needs.

Incentivized

uptime good

Incentivized

Integration/overlap between products could be improved

Incentivized

I'd give their support a 10 if it weren't for the fact that sometimes, the support team (I believe they are overseas) can take a little bit to respond, but not too long. I may submit a ticket in the morning and won't hear about it until later in the afternoon. However, my tickets were not "urgent," so that may have been the reason for the delay. Other than that, support is great, and the ManageEngine account team has visited us in the past. It's always nice to see your product representatives take a white-glove approach like that.

Incentivized

knowledgable and prompt response

Incentivized

The remote setup team helped when i needed it and setup weas very straight forward and easy. The advanced setup for an external db and customizations for our latest version AD environment went pretty easy once they found documentation on customization.

Incentivized

When comparing to Cisco Duo, I felt like the product offered more than just MFA on RDP. When comparing to Silverfort, it came down to pricing. Silverfort was double the cost and I didn't like how Silverfort had separate SKUs. If you wanted MFA on everything the cost increased dramatically.

Incentivized

In terms of features, ADAudit Plus offers a comprehensive set of features for monitoring and auditing Active Directory, including real-time alerts, detailed reports, and user behavior analytics. The platform also offers support for multiple platforms, including Windows, UNIX, and Linux, as well as integration with other ManageEngine tools.

Incentivized

updates are effective and system is reliable

Incentivized

• Being able to see right away during a Penetration Test that the product detected anomalies, but our MDR service didn't. It allowed us to go back to the MDR service to show them the results and fix the issue from slipping through the cracks.
• By satisfying the requirements from our insurance provider, our premiums didn't go up (MFA on RDP).

Incentivized

I like the ability to customize reports and provided great visibility to AD and some servers.

• It helped greatly with customer support issues when we used ADAudit with the hundreds of customer accounts used for SSON to the LOB application server to users over Citrix.
• It saved time on some issues with accounts and Group Policy changes that affected customer experience.