Microsoft Defender for Endpoint vs. Sophos Email

I can definitely tell you where it’s more suited, because we haven’t come across any less appropriate scenarios. But definitely in regard to how we centrally manage our user space and our endpoints, it’s been beneficial from an API perspective and is really transferable, with strong collaboration with our Azure stack. It works very well.

Sophos Email is ideal for protecting business email from advanced threats. It comes with features that make it easy to detect and block email threats, such as spam, phishing, ransomware, and data leaks. In addition, Sophos Email is ideal for email encryption and helps train teams to identify phishing threats.

Incentivized

• It really protects our endpoints. We've used other antivirus programs in the past, and they haven't had that full confidence in those products compared to what Microsoft Defender for Endpoint does for us.
• Another pro is that it's easy to manage the management console through Intune to see Microsoft Defender for Endpoint up in the cloud and see the state of our devices.
• Another pro is we haven't had an incident since we installed it.

Incentivized

• We could customize it to have a certain level of workflow. We manage to enforce certain email (based on key-phrases) to be quarantined before send it to the recipient. And the email needs to be approved (manually) before being released.
• For certain type (using regex) of email, we will encrypt it if it's sent outside our organization domain.
• Scalable

Incentivized

• It would be good to continue to minimize the amount of resources needed during a scan
• Provide more integration with Outlook to scan attachments with a notification that everything is good
• Provide a Click to Fix option when listing issues or high-risk problems on systems

Incentivized

• Reporting could be more granular, it's the most glaring weakness of the product.
• The ability to drill down into data from the dashboard would be very helpful for reporting as well.
• Reverse AD sync so when active directory users are removed, they are removed from Sophos as well would be helpful.

Incentivized

Microsoft Defender is closely catching -up in market with existing competitors they have added DLP endpoint & DLP Network and Cloud DLP solution last year with OCR capabilities. I would say Microsoft Defender is not legacy Vendor in end point security, the need to learn from other vendors in market and focus on new XDR technologies, which is going to be new battle for all vendors

Incentivized

It was easy to use and easy to implement. You don't need previous knowledge on the products, after we got this up and running, it took us hours to put everything together. The transition was easy and seamless.

Incentivized

Microsoft Defender for Endpoint is a great EDR to have that works quickly and silently in the background and it integrates well with other Microsoft services. As an IT manager, I can appreciate that I do not get bombarded by alerts for every small detail. On the flipside, the management site can use some work in being more clear and should be more streamlined so I'm not clicking through multiple pages to figure out what happened

Incentivized

The solution is very scalable, with a possibility to be customized; which means that Sophos Email can be configured depending on our own situation and context not on a general way. On the other hand, Sophos Email has a broad feature set; I mean, along with core spam and malware protection, Sophos offers advanced features such as real-time
link following, threat isolation, spoof protection, etc.

Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.

Incentivized

Microsoft Defender for Endpoint is easy on memory and resources on clients.

Incentivized

Overall support is really good for this product. Since it's a Microsoft product, you will get good support from a number of different resources, including knowledgebase articles on the web, support from Microsoft technicians, and documentation (which tends to very thorough). Also, there is a vast user support community for this product, so user support forums would also be another valuable channel to get help if needed. I don't envision too many people will have issues/problems with the product, as it tends to run good overall.

Incentivized

I have always found the answers I have needed in the documentation or online, and have not needed to contact Sophos Secure Email Gateways' support team. This, I think, bodes well for how their software is easy to use and has good documentation when you cannot find what you need in the basic interface.

Incentivized

Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.

Incentivized

I've used Sophos, Bitdefender, SentinelOne, and, of course, Microsoft Defender for Endpoint. We chose this at the time because we were such a Microsoft shop that it just seemed to integrate well with all the other things that we had set up with Microsoft.

Incentivized

Many other solutions are a complicated setup and take a lot of time for the configuration. With Sophos email we were setup and seeing data/emails within an hour. As I have described the ease of use from a high-level for someone like me a Director just peeking into the system or an analyst that can do a deep dive is one of the best users interfaces I have seen for any product.

Incentivized

Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises.

Incentivized

• Another positive impact is that Microsoft Defender for Endpoint is built into the Windows OS. So naturally, it is much easier to load it out and manage it, rather than acquiring it through party ER, deploying it, and managing it separately. So that's definitely on the positive side that we observe there's a byproduct of changing Microsoft Defender for Endpoint.

Incentivized

• The reality is that no product is a one stop shop for complete protection. The user will always be a potential weak point in the system. With that said, Sophos' disclaimers have been a huge help as they can immediately make suspicious emails known with a few simple tags. That alone can create a sort of checkpoint for our users that takes them out of the dangerous 'autopilot' mode.

Incentivized