Item: Microsoft Defender for Endpoint
Rating: 9
Author: Verified User

Use Cases and Deployment Scope

We currently use Microsoft Defender for Endpoint on all our endpoints, sometimes in conjunction with other AV. Being that Microsoft Defender for Endpoint is already built into our windows agents, it makes sense to use since A) it's already installed and B) most of the time the client is already paying for it via other M365 liscensing. Also utilizing it with Huntress EDR offering.

Pros and Cons

Accurate, not alot of false positives
Easy to maintain after initial setup

Onboarding can be tricky if you don't have the right tools or a large deployment
Much like other MS products, logs and settings are buried all over the UI

Return on Investment

We don't pay for another AV tool

Key Differentiators

Scalability
Integration with Other Systems
Ease of Use

Mainly Huntress and their endorsement. In my opinion, Microsoft Defender for Endpoint used to have a bad reputation but now they are on the top of the heap

Components

AV and EDR, logging

Protection Scope

~1200

Alternatives Considered

Webroot Endpoint Protection

Not a fair comparison as, I believe, Webroot has severely declined over the past few years while Microsoft Defender for Endpoint has risen from the bottom

Key Insights

Do you think Microsoft Defender for Endpoint delivers good value for the price?

Yes

Are you happy with Microsoft Defender for Endpoint's feature set?

Yes

Did Microsoft Defender for Endpoint live up to sales and marketing promises?

Yes

Did implementation of Microsoft Defender for Endpoint go as expected?

Yes

Would you buy Microsoft Defender for Endpoint again?

Yes

Likelihood to Recommend

Microsoft Defender for Endpoint is already on your client's Windows machines, this next step up means 0 difference to the end user and they are familiar with it as it is used on their personal machines as well. Another added bonus, when working with 3rd party support vendors, they will always start by asking to disable or remove antivirus, which could inadvertently expose your client. I've never ben asked to uninstall Microsoft Defender for Endpoint since that's not easily done and *so far* it has never been an issue or in the way of any 3rd party software

Microsoft Defender for Endpoint has come a long way and the journey has improved it

Overall Satisfaction with Microsoft Defender for Endpoint