Likelihood to Recommend **Well Suited:**- **Enterprise Environments:** - Ideal for large-scale enterprise environments with a diverse IT infrastructure, offering comprehensive coverage across endpoints, networks, and cloud services.- **Integrated Microsoft Ecosystem:** - Excellently suited for organizations heavily invested in the Microsoft ecosystem, providing seamless integration with other Microsoft security tools and services.- **Proactive Threat Detection:** - Well-suited for organizations that prioritize proactive threat detection and response, leveraging advanced analytics and machine learning for early anomaly identification.- **Regulated Industries:** - Particularly beneficial for businesses in regulated industries, such as finance or healthcare, where compliance with stringent data protection regulations is crucial.**Less Appropriate:**- **Small Businesses with Limited Resources:** - Might be less appropriate for small businesses with limited resources or those with a simpler IT infrastructure, as the comprehensive features may exceed their specific needs.- **Highly Specialized Security Requirements:** - In scenarios where a business has highly specialized security requirements that necessitate specific, niche solutions, Microsoft Defender XDR might be less flexible compared to specialized security tools.- **Non-Windows Environments:** - Less appropriate for organizations predominantly using non-Windows operating systems, as it is optimized for integration within the Microsoft ecosystem.- **Organizations with Strict Bandwidth Constraints:** - In environments with strict bandwidth constraints, continuous monitoring and analysis by Defender XDR could potentially impact network performance.
Read full review Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.
Read full review Pros I am a huge fan of Microsoft Defender for Endpoint within Microsoft 365 Defender. It is one of the most professional and reliable EDR (Endpoint Detection and Response) tool out there providing excellent features like vulnerability management, baseline assessments, device discovery etc. Microsoft Defender for Office365 (Email Security) is yet another class apart product in this Microsoft 365 Defenderr stack. It is one of the easiest to use tools among all the other Microsoft security products yet at the same time offers such a wide variety of features like threat policies (anti-spam, anti-malware, anti-phishing etc.), attack simulation, message trace etc. Incident Management is the main USP of Microsoft 365 Defender due to which it can actually be considered as a true XDR. The intuitive and user-friendly UI, the very useful attack story view, broad classifications, automated investigation etc. etc. etc.; the list of awesome features just goes on. Read full review With Nessus we can find the missing critical patches for a server or workstations. Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up. Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties. Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation. Read full review Cons Setting up Microsoft 365 Defender integration with other tools or platforms might be challenging and require technical know-how. Improving its third-party security tools integration and simplifying the setup process would offer a smoother experience for security teams. A simpler way to improve security operations is by having a more cohesive way of detecting and responding to threats across different security solutions. Read full review Could use an upgrade within reports. Scans can take a long time to complete. Have to break them down in small sections. Read full review Likelihood to Renew Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.
Read full review Usability Too complicated sometimes, doesn't explain the meaning of certain features or problems encountered.
Read full review It's very much a plug and play application that the user can go into with limited knowledge and set-up scans in minutes.
Read full review Support Rating Microsoft Support is really good in calls and uptime availability and they are helpful in understanding and fixing issues and reporting the bugs, also the first line support is amazing in fixing bugs and releasing the new patches.
Read full review I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.
Read full review In-Person Training Good and hard to find someonme who can explain everything for you beside Microsoft they provide you everything you need.
Read full review Online Training Microsoft Provides a good training for the Microsoft 365 Defender and has a good learning paths to learn and take the exams and get your Certifications.
Read full review Alternatives Considered We used the MS XDR as this is a bundle that we bought when we subscribed to the M365 platform, so having it was a bonus as we stated earlier, but due to limitation on licenses in Sentinelone, having this is just a blessing for us, so we can reduce around 200 licenses and can utilize it for other users
Read full review Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with
Metasploit in order to show to the IT managers the importance of the software/hardware hardening.
Read full review Return on Investment Depending on the licensing you pay for, Defender is included and a great ROI cost wise In terms of time spent, Defender can be a large time suck but yield positive results for end users Generally, it pays to learn and train in Defender BEFORE there is a problem and you need to really use it. Read full review Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners. The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan. Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews. Read full review ScreenShots Microsoft Defender XDR Screenshots