Item: Microsoft Defender for Endpoint
Rating: 9
Author: Verified User

Use Cases and Deployment Scope

We use it to protect endpoints and also to get more data about behaviors. That's it.

Pros and Cons

It give us a really good vision of what a user might be doing. So if we think someone is not working, sometimes they will call us and tell us to do a review of what website they're visiting, etc.

On the detection side, I think we're missing some stuff. Sometimes we're missing an alert that should be alerted and we don't get it. But overall pretty good.

Return on Investment

It was really, really, really easy to integrate it, so it didn't cost for us. We already paid for the license, so it was seamless.
The integration took one day. It was harder to remove the old endpoint protection, so it was just like you turned the switch on and you got it.

Alternatives Considered

VMware Carbon Black EDR and SentinelOne Vigilance

Carbon black, SentinelOne, and EEP. I think Defender is good because it has a really user-friendly interface. I think it's pretty good. It has also given you a lot of details about processes and network connections.

Key Insights

Do you think Microsoft Defender for Endpoint delivers good value for the price?

Yes

Are you happy with Microsoft Defender for Endpoint's feature set?

Yes

Did Microsoft Defender for Endpoint live up to sales and marketing promises?

Yes

Did implementation of Microsoft Defender for Endpoint go as expected?

Yes

Would you buy Microsoft Defender for Endpoint again?

Yes

Other Software Used

Fortinet FortiGate, Security Onion

Likelihood to Recommend

For everything, let's say for the threat intelligence, it's pretty good because we have connections to advanced threat and defender, which is pretty good. Where it's lacking, not well suited, I say for signature-based, maybe weird attacks. Sometimes it might get to Defender.

Microsoft Defender for Endpoint Review

Overall Satisfaction with Microsoft Defender for Endpoint