Microsoft Defender for Endpoint vs. StormShield Endpoint Security

I think for your average user's experience, it's perfectly fine. I think when you're dealing with more advanced people within the cybersecurity space, where they may deal with applications or tooling, other situations like that, or malicious-type files, that might be problematic for them to use.

Incentivized

It is a very good device to use on a small and medium size company (0-400 users). However I wouldn't use it for very big companies.

Incentivized

• The big thing for us is on endpoint, it kind of integrates with everything else that we already have because we use Microsoft completely. And so that helps us with being able to integrate, and send things over to Azure Sentinel as we need to as well.

Incentivized

• Easy to manage on a daily basis
• It goes very deep into analyzing the trafic and the configuration is very thin.
• The first configuration is not so complex

Incentivized

• I'd say building out summaries and log reviews for analysts reviewing incidents. So, pivoting from the alerts themselves to actually getting the detail underneath. Trying to understand what caused an alert, where they went from there, et cetera, et cetera. And then trying to get into deeper log review to take that investigation further can be a pain point.

Incentivized

• Not everything is possible on the web administration page. We need to use the ssh console to do many things.
• The logs viewer is not as helpful as on other brands (like ASTARO, SOPHOS,...)

Incentivized

Cost add-ons for Security features is nickel and diming the process to keep pace with cybercrime. Limited Education budgets require us to be more pro-active in finding cost-effective measures to protect our devices, staff and students. Defender is a strong, well-featured product that is pricing itself out of the education market

Incentivized

It just works. It's easy. I mean, even if you didn't have much background in it, you could figure out what you need to do to get the information that you need. The dashboards are comprehensive. The information that it aggregates on the screen, your first initial screen, is very comprehensive and telling. So, usability.

Incentivized

Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.

Incentivized

Microsoft Defender for Endpoint is easy on memory and resources on clients.

Incentivized

The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session

Incentivized

Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.

Incentivized

Falcon. I will say this: Falcon was way easier to deploy. We deployed 36,000 endpoints in about 40 hours. It took us two years to get Microsoft Defender for Endpoint deployed. So deployment was a pain. Falcon, what else we've got? Trellix or McAfee Endpoint. And that's about it.

Incentivized

Installation and day to day use is more friendly.

Incentivized

Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises.

Incentivized

• I think the positive impact overall is that we do a lot of sitting in front of assessors- federal assessors, government assessors. And it really comes down to when the assessor has to think about another product that you're bringing in that's not Microsoft, it creates a lot of confusion, more paperwork, more explanation. But the positive impact is that they know it, everybody kind of knows Microsoft. And so when you tell them you have this endpoint for Microsoft Defender for Endpoint, they're like, okay. The questions go away, and it makes the overhead a lot less during an assessment.

Incentivized

• It does the job very well once it is correctly configured. By that I mean, it is functioning with the least waste of time and effort for network administrators.
• If needed the support is efficient.

Incentivized