Item: Microsoft Defender for Endpoint
Rating: 9
Author: Verified User

Use Cases and Deployment Scope

We currently are in the process of migrating to Microsoft Defender for Endpoint as a EDR solution for our 3000+ devices. It integrates seamless in Windows and has made an enormous growth the last couple of years. This solution helps us enforce out last line of defense for our Security suite.

Pros and Cons

Protection to Zero-days
Great Security/XDR console
Vulnerability insights and remediation

Sometimes it takes a while to see remediations when you patched a device

Return on Investment

Because of our non-profit satus it finally is affordable for us as a healthcare institution
Vulnerability Management has opened our eyes and triggered to patch, patch and patch...
Feels save to access our patient registration software, even for employees working @ home

Key Differentiators

Cloud Solutions
Integration with Other Systems
Ease of Use

The new Security page has a great vulnerability management section. This is unlike anything I've ever seen before. When a vulnerability is deteced you are given great instructions on how to recolve these vulnerabilities and keep you devices patched and safe.
Also the Incidents and Alerts give a great trajectory when somethin is wrong.

Components

For now we use Microsoft Defender for Endpoint P1 and P2 and Servers. We have deployed Microsoft Defender for Endpoint to a test-collection via SCCM and the results are great. Because we use Microsoft 365 E3 we already had Microsoft Defender for Endpoint P1 in our license, but the addition of P2 is more than welcome.

Protection Scope

200 Windows Servers And now about 10 Windows 10 workstations, but after PoC about 3000. But during the onboarding process of these servers and endpoints, we got a wholo lot more devices that were detected. We had a simple appliance we couldn't even access because is was remote management, but Microsoft Defender for Endpoint saw a vulnerability. Directly informed the vendor and got it patched!

Alternatives Considered

Cisco Secure Endpoint and Palo Alto Networks Cortex XDR

Microsoft Defender for Endpoint has the best integration for us in our (mostly) Windows environment. Also we are using M365 E3 so this already included Microsoft Defender for Endpoint P1. The extra cost for Defender for Endpoint P2 is definitely worth it. You need to see these vulnerabilities and get patchin'. Als if you have the chance (and the money); get E5 Security.

Key Insights

Do you think Microsoft Defender for Endpoint delivers good value for the price?

Yes

Are you happy with Microsoft Defender for Endpoint's feature set?

Yes

Did Microsoft Defender for Endpoint live up to sales and marketing promises?

Yes

Did implementation of Microsoft Defender for Endpoint go as expected?

Yes

Would you buy Microsoft Defender for Endpoint again?

Yes

Other Software Used

Veeam Backup for Microsoft 365, Nutanix Unified Storage, Microsoft Defender for Identity

Likelihood to Recommend

Integrates nice in a Windows environment. Using GPO's, SCCM and Intune we can granually deploy the solution and protect our devices. We were already using M365 E3, but the extra Microsoft Defender for Endpoint P2 is a great addition! Seeing those vulnerabilities on your devices makes you want to secure them as fast as possible. Microsoft has made a great leap in Security solutions the last couple of years.

Boost up you Security with Microsoft Defender for Endpoint!

Overall Satisfaction with Microsoft Defender for Endpoint