Item: Microsoft Defender for Endpoint
Rating: 8
Author: Verified User

Use Cases and Deployment Scope

We are using this as our endpoint AV. We migrated from Trellix to Defender very recently. This was not a pressing point for us except our org was moving from G-Suite and Microsoft a very good deal for the Collaboration and Security Infrastructure. We have only used the product for EDR and for ATP. The overall performance of our endpoints are good till now. There were slowness reported in the older versions of Defender but with M365, we did not notice any significant slowness of system performance. One major plus is the security dashboard which gives you a very good view of the reports for CISOs.

Pros and Cons

End Point Protection in real time
Security Dashboard for CISOs
End point detection and Response

Don't have any points to add here

Return on Investment

it's only 1 month now, so too soon to say

Key Differentiators

Integration with Other Systems
Ease of Use

Components

EDR, and ATP

Protection Scope

We are using Mac and Windows Laptops and Desktops. About 9500+ machines. We are using Trend Micro for our servers for now.

Alternatives Considered

Trellix Automated Response and Trend Micro Deep Security Smart Check

Microsoft Defender gels very well with the rest of the M365 suite of products. The security Dashboard gives one view for Email Security and Endpoint Security. The security events can be generated while getting integrated with SIEM solution or can use its own SIEM offering.

Key Insights

Do you think Microsoft Defender for Endpoint delivers good value for the price?

Yes

Are you happy with Microsoft Defender for Endpoint's feature set?

Yes

Did Microsoft Defender for Endpoint live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Microsoft Defender for Endpoint go as expected?

Yes

Would you buy Microsoft Defender for Endpoint again?

Yes

Other Software Used

Microsoft 365, Microsoft Intune, Azure AD Security Governance

Likelihood to Recommend

if you have significant no. Microsoft products in your ecosystem then Defender works extremely well. We onboarded defender as part of M365, which includes MDO and MDE both.
If your customers are spread across multiple geographies, then Defender can help you setup Compliance policies based on each reason which reduces the efforts from DPO significantly.
Apart from these, I feel it is a feature rich and stable EDR product.

Defender is the default choice for a Microsoft shop

Overall Satisfaction with Microsoft Defender for Endpoint