Microsoft Defender for Cloud Apps vs. Skyhigh Secure Web Gateway

It is well suited if your team is working with Microsoft tools and Azure services. but if you are using other cloud service providers and don't want to spend efforts in learning integration with third-party software then this is not a great fit for you. overall we are very satisfied with the product. If your corporation with Microsoft tools then I would recommend it.

Incentivized

McAfee Web Gateway is best suited for all types of organizations if they wan to achieve the security for their users as it has the large intel database as well. The best part is its flexible hybrid deployment methods- it can be deployed on premises (hardware and virtual), in the cloud, or both for the high availability.

Incentivized

• Detect threats based on user activity logs.
• Set manual and automatic alert remediation.
• Implement activity policies.
• Detect threats based on user activity logs.

Incentivized

• Great malware protection.
• Excellent sandboxing.
• Great URL filtering.
• Very good pre-defined policies.

Incentivized

• Cloud discovery throws away found services not found in the MCAS database of SaaS apps.
• Many panes of glass required for a fully enabled implementation to administer, configure and utilize 100% of the product.
• Room for improvement in the reporting realm - not enough records are visible and exportable for high record count policy reports.

Incentivized

• Support response
• Better pricing
• Best practices guides

The interface is pretty simple and easy to use; however, you will need to do a lot of investigative research on your own to get comfortable with it. Originally, many of the Microsoft security tools had their own seperate consoles. Overtime, they have blended into one interface which is the ideal state. In some cases it is clear Microsoft had to pick which console a certain feature or setting was going to reside in and this leads to some confusion. For example, DLP is managed through Defender for Cloud Apps but you will also need to jump into Purview. For things like reverse proxy on your M365 tenant, you will need to go into Azure and setup conditional access rules. Not a big problem and I can understand why the settings are located where they are but for someone just starting out with Defender for Cloud Apps, it will take some time to figure out.

Incentivized

Excellent products based on all the needs we had. Most of our use cases has been able to implement. DLP is kind of difficult to implement but possible. However you needs a big team to handle the tools as it's capabilities and management is complex. Nevertheles you can find a way to leverage all the funcionality when needed.

I have not utilized actual support but the Sales and Product teams have been super helpful in moving our implementation forward and showing us the best practices.

Incentivized

Microsoft Defender for Cloud Apps was chosen primarily due to its ability to work perfectly within our mostly M365 environment. Given that this was an added feature of our E5 license, we chose to dive into it and use it due to it's good visibility into user actions and the ability to tie all M365 actions together into one place. We did not see similar visibility with other tools that we vetted

Incentivized

The configuration of the Cisco Secure Web Appliance of even worse than the one of Skyhigh's Secure Web Gateway. The detecction rate was slightly higher but the visibility worse.

Incentivized

• Cloud App Security saves us thousands of dollars finding and rectifying apps security issues
• Identity Security Posture helps the organization identity stay in shape, saving thousands of dollars on security consultations
• The cost of suffering a breach cannot be quantified, CAS helps minimize the chances of the attackers succeeding, with excellent historical logging for most operations

Incentivized

• An effective tool in enforcing Internet policies.
• Adds a necessary layer of Internet security over and above UTM Firewall offerings.

Incentivized