Cisco Secure Cloud Analytics vs Microsoft Defender for Endpoint comparison

Intrusion Detection and Prevention Software (IDPS)

Download the complete report

Helped 787,817 peers since 2012

Categories and Ranking

Cisco Secure Cloud Analytics

Average Rating

8.6

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (15th), Cisco Security Portfolio (5th)

Microsoft Defender for Endp...

Average Rating

8.0

Number of Reviews

182

Ranking in other categories

Endpoint Protection Platform (EPP) (1st), Advanced Threat Protection (ATP) (2nd), Anti-Malware Tools (1st), Endpoint Detection and Response (EDR) (1st), Microsoft Security Suite (6th)

Mindshare comparison

As of June 2024, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Cisco Secure Cloud Analytics is 0.9%, up from 0.4% compared to the previous year. The mindshare of Microsoft Defender for Endpoint is 2.1%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Intrusion Detection and Prevention Software (IDPS)

Unique Categories:

Cisco Security Portfolio

8.9%

Endpoint Protection Platform (EPP)

12.6%

Advanced Threat Protection (ATP)

4.1%

Featured Reviews

Sudhanshu Pandey

Security Analyst at Orange España

Sep 18, 2023

Efficiently generates alerts for suspicious activities and scales easily

There are two areas of improvement. Firstly, extend the log retrieval limit to at least three months. For example, there is a limit on the number of log messages that can be received. So, I would like to expand the log retrieval limit. And another thing, if we migrate these things to an event or send us an email if there is any critical event, I would like to configure these things on the initial launch. Because if a system is compromised, there will be a lot of data movement from one post to another post to the outside. Then, we should also get an alert on email as well. We have since we have integrated these things. But a direct email for critical alerts should be there. So, I would like to enhance the critical event configuration. If a new user wants to learn how it should work, how policies work, and where we can configure policies, there should be some learning material for this product.

Read full review

Doug Kinzinger

Director of Technologies Solutions at a retailer with 1-10 employees

Nov 28, 2023

Has good reporting and logging features

Defender should be more accessible for small and medium-sized businesses. You have some organizations that maybe have a hundred employees, and they're focused on making their widgets. That's their nine-to-five every day. They're not thinking about that security side, but maybe they're already invested in 365 or the Azure ecosystem and having Defender as an add-on makes sense from a price perspective. It's easy to deploy, but it could be easier for some of those smaller businesses to onboard endpoints. The onboarding and deployment could be more user-friendly, and there is room to grow in some of the reports. I don't want them to be oversimplified or overly complex, but there is room for improvement in the reporting it can do. It's relatively minor.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The product helps me to see malware."

"Cisco Stealthwatch Cloud is scalable because it is on the cloud."

"It tells you if there is any communication going to command and control servers, or if there is any traffic that violates your internal policy, or if any data hoarding is happening where data is being dumped from your machine to outside of the environment. It provides all such meaningful reports to help you understand what's happening."

"The logs in Cisco Stealthwatch Cloud are very good when doing the API integration in the team. It is able to give you important information for the correlations."

"The tool's best feature is its ability to monitor network traffic. It will also inform users whether the traffic generated by a network is legitimate. The tool helps to capture and analyze the network traffic."

"Monitoring the traffic, making sure you have the visibility."

"When it comes to scalability, there's no size limit. It varies based on licenses and requirements."

"It's not really visible for the user - which is a benefit."

"Technical support has been great."

"I've started to test it from the security point of view. There are plenty of features that are interesting, but at this time, the XDR functionality is most valuable. It is endpoint security on steroids."

"The fact that it's from Microsoft, you don't have many false positives, unlike products from other vendors might have."

"I like the fact that it has the ransomware solution in there. I'm glad that the ransomware solution is built into it. That's probably the biggest thing that I see in Microsoft Defender."

"Provides good security features and you can view it in the central console."

"Provides good vulnerability assessment."

"DFE organizational security posture has been a positive experience. We're a Microsoft house. It works. Once it's deployed and once it's configured, it works and our clients tend to be happy with it. I haven't really experienced anyone who has been so unsatisfied with the platform that they wanted to go a couple of different directions, that has never happened to me."

More Microsoft Defender for Endpoint pros

Cons

"The product's price is high."

"Cisco Stealthwatch Cloud could improve the graphical user interface. It could be a more user-friendly graphical user interface. so that. Not everybody's a cyber security professional, most of the customers that I deal with are not very skilled. The terms that they use in the solution are quite understandable for a normal CIO."

"If we migrate these things to an event or send us an email if there is any critical event, I would like to configure these things on the initial launch. Because if a system is compromised, there will be a lot of data movement from one post to another post to the outside. Then, we should also get an alert on email as well. We have since we have integrated these things. But a direct email for critical alerts should be there. So, I would like to enhance the critical event configuration."

"The initial setup is a bit complex in terms of deployment and configuration"

"The product needs to improve its user-friendliness. It is very tricky and you need to study it before using the standard functionalities."

"When I used to work on it, I just didn't see anything new happening for about a year and a half. Providing newer data and newer reports constantly would help. There should be more classifications and more interesting data."

"The initial setup of Cisco Stealthwatch Cloud is complex."

"The solution should be updated by Microsoft with new features from time to time."

"Microsoft Defender for Endpoint is secure but when it comes to security all solutions could improve security."

"Microsoft Defender for Endpoint does not offer default templates for alerts, requiring us to configure everything ourselves to avoid numerous false positives."

"Microsoft Defender for Endpoint could improve by providing more user-friendly dashboards. They may be complicated for some."

"Its user interface (UI) can be improved. Currently, in the console, you have to dig down for certain things. They've got many different layers to get to things instead of having it all on the surface. You have to go three folds lower to get to specific functionality or click a particular option. It would be good if we can manage the console through menus and instead of three clicks, we can do things in one click. They need to change the UI and work on it in terms of a better user experience."

"The solution could always be more secure."

"The product itself does not necessarily need improvement, but the support and implementation of the product are the disaster cases."

"Its interface can be improved a little bit. We would like to have some sort of centralization. It should have something like a central server that is managing all the other clients. There are solutions from Kaspersky or ESET NOD32 that are really doing this kind of thing currently. We would like to see something similar from Microsoft."

More Microsoft Defender for Endpoint cons

Pricing and Cost Advice

"Cisco Stealthwatch Cloud is an expensive enterprise solution."

"The solution is quite expensive."

"The price of Cisco Stealthwatch Cloud is expensive."

"The solution is free and comes with Windows."

"We mostly use Microsoft products. We use Office 365, and we use Azure. We're also a Microsoft partner. So, the licensing was much cheaper for us, and at the same time, a lot of the features that we were looking for were included in Defender."

"Licensing options vary. Some customers buy it as an enterprise agreement and pay yearly. Others buy it as a CSP, so they pay per month. It completely depends on the customer's needs."

"It's included with the Windows Operating System, I don't pay for any licensing fees."

"We went for Microsoft Defender once we were informed that it would be part of our Office 365 package. So, we combined the licensing for the OS with Office 365. Yeah. We thought it was a good bargain."

"This solution is part of an enterprise license we have."

"Microsoft Defender for Endpoint is an expensive solution."

"The solution comes as a part of Windows 10 and it is covered under its license."

More Microsoft Defender for Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.

See recommendations

787,817 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

41%

Financial Services Firm

Government

Manufacturing Company

Educational Organization

23%

Computer Software Company

13%

Government

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Cisco Stealthwatch Cloud?

When it comes to scalability, there's no size limit. It varies based on licenses and requirements.

What needs improvement with Cisco Stealthwatch Cloud?

What is your primary use case for Cisco Stealthwatch Cloud?

We are using Cisco Secure Cloud Analytics, also known as Cisco's WatchCloud, to monitor user activity in the cloud. Specifically, we are looking for users who are uploading or downloading data beyo...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...

Which offers better endpoint security - Symantec or Microsoft Defender?

We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...

How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?

The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...

Cisco Secure Network Analytics vs Cisco Secure Cloud Analytics

Comparisons

Compared 73% of the time

Cortex XDR by Palo Alto Networks vs Cisco Secure Cloud Analytics

Compared 6% of the time

Vectra AI vs Cisco Secure Cloud Analytics

Compared 5% of the time

Darktrace vs Cisco Secure Cloud Analytics

Compared 4% of the time

More Cisco Secure Cloud Analytics Competitors

Symantec Endpoint Security vs Microsoft Defender for Endpoint

Compared 8% of the time

Intercept X Endpoint vs Microsoft Defender for Endpoint

Compared 6% of the time

Cortex XDR by Palo Alto Networks vs Microsoft Defender for Endpoint

Compared 5% of the time

Trellix Endpoint Security vs Microsoft Defender for Endpoint

Compared 5% of the time

SentinelOne Singularity Complete vs Microsoft Defender for Endpoint

Compared 4% of the time

More Microsoft Defender for Endpoint Competitors

Product Reports

Cisco Secure Cloud Analytics

Download Cisco Secure Cloud Analytics product report

Microsoft Defender for Endpoint

Download Microsoft Defender for Endpoint product report

Also Known As

Cisco Stealthwatch Cloud, Observable Networks

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus

Learn More

Video not available

Cisco

Microsoft

Interactive Demo

Demo not available

Cisco

Microsoft

Overview

Cisco Secure Cloud Analytics is a cloud-based security solution that provides visibility and threat detection for cloud environments. It offers software mapping and automation for incident response, forensic analysis, and segmentation of IT architecture. The solution can be used on-premise or on the cloud and is used in various sectors such as insurance and government.

The logs in Cisco Secure Cloud Analytics are valuable for API integration in a team as they provide important information for correlations. The solution also offers automated incident response and integration with next-generation firewalls and antivirus solutions."

Microsoft Defender for Endpoint is a comprehensive security solution that provides advanced threat protection for organizations. It offers real-time protection against various types of cyber threats, including malware, viruses, ransomware, and phishing attacks.

With its powerful machine-learning capabilities, it can detect and block sophisticated attacks before they can cause any harm. The solution also includes endpoint detection and response (EDR) capabilities, allowing organizations to quickly investigate and respond to security incidents. It provides detailed insights into the attack timeline, enabling security teams to understand the scope and impact of an incident.

Microsoft Defender for Endpoint also offers proactive threat hunting, allowing organizations to proactively search for and identify potential threats within their network. It integrates seamlessly with other Microsoft security solutions, such as Microsoft Defender XDR, to provide a unified and holistic security approach. With its centralized management console, organizations can easily deploy, configure, and monitor the security solution across their entire network.

Microsoft Defender for Endpoint is a robust and scalable security solution that helps organizations protect their endpoints and data from evolving cyber threats.

Sample Customers

Options, Schneider Electric, Washington University in St Louis, Gotcha, Kraft Kennedy, PartnerRe, Sumologic, Veterans United, AFGE, Agraform, Artesys, Dynamic Ideas Financials, Department of Agriculture and Commerce

Petrofrac, Metro CSG, Christus Health

Intrusion Detection and Prevention Software (IDPS)