Azure Firewall Manager vs Microsoft Defender for Identity comparison

Azure Firewall Manager vs. Microsoft Defender for Identity

Download the complete report

Helped 902,894 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Azure Firewall Manager

Ranking in Microsoft Security Suite

25th

Average Rating

8.6

Reviews Sentiment

5.4

Number of Reviews

Ranking in other categories

Firewall Security Management (11th)

Microsoft Defender for Iden...

Ranking in Microsoft Security Suite

5th

Average Rating

8.8

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Advanced Threat Protection (ATP) (8th), Identity Threat Detection and Response (ITDR) (3rd)

Mindshare comparison

As of July 2026, in the Microsoft Security Suite category, the mindshare of Azure Firewall Manager is 1.2%, up from 0.5% compared to the previous year. The mindshare of Microsoft Defender for Identity is 3.6%, down from 6.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Microsoft Security Suite Mindshare Distribution
Product	Mindshare (%)
Microsoft Defender for Identity	3.6%
Azure Firewall Manager	1.2%
Other	95.2%

Microsoft Security Suite

Featured Reviews

Sikkander Batcha

DevOps Engineer at CloudIQ

Has managed traffic effectively but lacks visibility and advanced control features

Azure Firewall is typically behind other vendor firewalls because we don't see what kind of traffic is traveling through it. That is one drawback. The main drawback is that we need log support from Azure Firewall, which can be quite costly. There is no login feature in Azure Firewall because only the IAM feature is available in the Azure site; we manage it only through the Azure portal, not through any other portal. Other vendors, such as Palo Alto, provide GUI or CLI interfaces to manage their firewalls, whereas we only manage Azure Firewall through the Azure portal. In the future, I would like to see additional features in Azure Firewall Manager to make it more competitive, such as technologies like App-ID and User-ID that Palo Alto has. Azure Firewall currently only allows traffic based on layer four and sometimes layer seven, so they need to improve in those areas compared to other vendors.

Read full review

Peter Arabomen

Security Engineer at Fidelity Bank Plc

Has supported hybrid identity management while integrating well with cloud directory services

The only challenge I have with Microsoft Defender for Identity is the latency. I may not put that entirely on Microsoft, because latency could be network related. At times when trying to authenticate, the prompt is delayed. We tried implementing passwordless authentication, especially for on-premises workloads, but we haven't been able to achieve that. Passwordless authentication is part of the identity functionalities, particularly when it comes to enforcing passwordless for on-premises workloads. In terms of improvements, you can't create OUs on Azure AD. Regarding giving users privileges on what they can do across different OUs, I haven't seen that feature on Microsoft Defender for Identity. Microsoft Defender for Identity needs to be able to plug into third-party applications that are not Microsoft. For instance, with a human resource application used to manage users and leave requests, when staff leaves the organization, they are first exited from that application before AD. Integration between Azure AD and third-party applications would allow automatic syncing when removing staff. The initial setup of Microsoft Defender for Identity is not hard. However, setup is one thing, and getting value from the application end-to-end is another. It can be set up and running from the first day but not functioning optimally. Initially, when we did the setup, it wasn't optimal. Over time, with continuous improvement, which we're still doing, we've gotten to a comfortable level, but there's still room for improvement.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Azure Firewall Manager centralizes network security management with a hub and spoke architecture."

"We are utilizing Azure Entra ID for group labeling, so Active Directory, or now it is Entra ID, securing our application for everyone who accesses it, and Azure Firewall Manager is definitely securing our projects and all its features are fine."

"I would definitely recommend the solution to my clients, especially if one is using Azure Cloud."

"The solution is very easy to set up."

"The most valuable feature of Azure Firewall Manager is the testing and configuration."

"The most valuable feature is the web firewall, as it is easy to install and does not require any plugins for your browser."

"It has helped us in multiple ways; for example, we don't require different spaces to manage it, we can do a lot of automation integrations into the code, we could integrate it into the DevOps pipeline, and it has helped us with our time-to-market for a very specific product when we are actually deploying or upgrading."

"From a traffic management perspective, it's a good firewall because it's automatically scalable based on the traffic availability."

More Azure Firewall Manager pros

"The solution’s alerting is fairly efficient."

"In the security portfolio that we manage, Microsoft Defender for Identity is very important because it is the professional service that we sell the most."

"It is easy to set up. Based on the number of devices you would like to set up, you can use scripts, Group Policy, etc. It takes five minutes to set up."

"The most valuable features of Microsoft Defender for Identity include real-time information for threat detection, its inclusion of behavioral analytics, and vulnerability management."

"It gives you a holistic view of everything happening in your organization, and you can use it to do a lot of monitoring."

"One of our users had the same password for every personal and company account. That was a problem because she started receiving phishing emails that could compromise all of her accounts. Defender told us that the user was not changing their password."

"The most valuable aspect is its connection to Microsoft Sentinel and Defender for Endpoint, and giving exact timelines for incidents and when certain events occured during an incident."

"The most valuable feature is its hybrid artificial intelligence, which gathers forensic data to track and counteract security threats, much like the CSI series in effect."

More Microsoft Defender for Identity pros

Cons

"There should be a simple one-click deployment for a firewall, rather than a set of setup instructions that include steps such as the DNS configuration, et cetera."

"The price is okay. This said, the solution is certainly expensive in comparison with other cloud services."

"The cost is a significant concern because we are in a region where the dollar is not our default currency, and converting to dollars makes it very expensive."

"For Azure Firewall Manager, the learning curve for new people is a bit challenging, but the integration should be more straightforward for configuring a centralized system."

"Azure charges for many aspects including scaling, automated scaling deployment, and traffic management, which leads to higher costs."

"The configuration and settings require substantial time for learning, particularly for new users. Improvements in ease of configuration would benefit users significantly."

"The solution can improve the integration with open-source tools."

"The tool's security features need to improve. It needs also to include a monitoring system for logs. It is also complicated to find a query on the Azure firewall."

More Azure Firewall Manager cons

"There are issues with the alerts in Microsoft Defender for identity-related intra-protection detection anomalies. The alerts are missing some data, which makes it difficult to determine the exact sign-in event associated with the alert."

"I can't say that I've seen a return on investment since we have Microsoft Defender for Identity because we also have another security solution in place."

"One potential area for improvement could be exploring flexibility in the installation of Microsoft Defender for Identity agents."

"Defender for Identity gives us visibility, but we often get false positives from Azure that take us down the garden path. We go through 30 incidents each day and most of those are false positives or benign positive alerts. Occasionally, we get true positive alerts."

"Microsoft should look at what competing vendors like CrowdStrike and Broadcom are doing and incorporate those features into Sentinel and Defender. At the same time, I think the intelligence inside the product is improving fast. They should incorporate more zero-trust and hybrid trust approaches. They need to build up threat intelligence based on threats and methods used in attacks on other companies."

"The solution could be better at using group-managed access and they could replace it with broad-based access controls."

"When the data leaves the cloud, there are security issues."

"The impact of the sensors on the domain controllers can be quite high depending on your loads. I don't know if there's any room for improvement there, but that's one of the things that might be improved."

More Microsoft Defender for Identity cons

Pricing and Cost Advice

"The solution is certainly expensive in comparison with other cloud services."

"The price of the solution is reasonable but it is reasonable for the features."

"You won't be able to change your tenants from where you deploy them. For example, if you select Canada, they will charge you based on Canadian pricing. If you are also in London, when you deploy in Canada, the pound is higher than Canadian dollars, but your platform resources are billable in Canadian dollars. Using your pounds to pay for any of these things will be cheaper. Or, if you deploy in London, they will charge you based on your local currency."

"The product is costly, and we had multiple discussions with accounting to receive a discounted rate. However, on the open market, the tool is expensive."

"Microsoft Defender for Identity comes as part of the Microsoft E5 licensing stack."

"Defender for Identity is a little more expensive than other Microsoft products. Identity and Microsoft Defender for Cloud are both a bit costly."

"It is very affordable considering that other SIEM solutions are much more expensive and have many more licensing restrictions and fees."

See which vendors are best for you

Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.

See recommendations

902,894 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Construction Company

11%

Educational Organization

Computer Software Company

Financial Services Firm

13%

Computer Software Company

10%

Manufacturing Company

10%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	5
Large Enterprise	15

Questions from the Community

What is your experience regarding pricing and costs for Azure Firewall Manager?

The pricing for Azure Firewall Manager is expensive. In our project, we have used both Palo Alto Firewall and Azure Firewall. Azure charges for many aspects including scaling, automated scaling dep...

What needs improvement with Azure Firewall Manager?

What is your primary use case for Azure Firewall Manager?

My customers are using Azure Firewall Manager, so I'm learning from both documentation and practical knowledge. I usually recommend Azure Firewall Manager for projects such as an animal hospital pr...

What needs improvement with Microsoft Defender for Identity?

I really would have to sit down to think about how Microsoft Defender for Identity can be improved. I didn't take stock in what needs to be improved because I appreciated having the tools right the...

What is your primary use case for Microsoft Defender for Identity?

My main use cases for Microsoft Defender for Identity include Conditional Access, checking risky users, remediating risky users, and user sign-ins. I can easily remediate or determine what the user...

What advice do you have for others considering Microsoft Defender for Identity?

I don't really use Microsoft Defender for Identity a lot because my new role doesn't allow me to take time to do so. I don't really use the threat intelligence feature of Microsoft Defender for Ide...

Azure Firewall vs Azure Firewall Manager

Comparisons

Compared 17% of the time

FortiGate Cloud-Native Firewall (FortiGate CNF) vs Azure Firewall Manager

Compared 14% of the time

Microsoft Defender for Cloud vs Azure Firewall Manager

Compared 12% of the time

AlgoSec vs Azure Firewall Manager

Compared 11% of the time

Palo Alto Networks Panorama vs Azure Firewall Manager

Compared 9% of the time

More Azure Firewall Manager Competitors

CrowdStrike Falcon vs Microsoft Defender for Identity

Compared 6% of the time

Microsoft Entra ID Protection vs Microsoft Defender for Identity

Compared 5% of the time

SentinelOne Singularity Identity vs Microsoft Defender for Identity

Compared 5% of the time

Microsoft Defender for Office 365 vs Microsoft Defender for Identity

Compared 4% of the time

Huntress Managed ITDR vs Microsoft Defender for Identity

Compared 4% of the time

More Microsoft Defender for Identity Competitors

Product Reports

Azure Firewall Manager

Download Azure Firewall Manager product report

Microsoft Defender for Identity

Download Microsoft Defender for Identity product report

Also Known As

No data available

Azure Advanced Threat Protection, Azure ATP, MS Defender for Identity

Overview

Azure Firewall Manager offers easy configuration, centralized management, and automatic scalability. Its integration with Azure Entra ID provides secure access, while Power BI facilitates centralized monitoring, contributing to its cloud-native benefits and reliable network management.

Azure Firewall Manager is recognized for its efficient security policy management and the ability to configure and test firewall settings across multiple locations. Its integration with Azure Kubernetes supports cloud environment security and the seamless migration of on-premise components to the cloud. With its hub-and-spoke architecture, users can detect threats and orchestrate policies more effectively, although integration with open-source tools and technical support responsiveness could be enhanced. Improvements in NAT capabilities and an AI-driven phishing prevention system would enhance its offering.

What are Azure Firewall Manager's key features?

Easy Configuration: Simplifies firewall setup without additional plugins.
Centralized Security Management: Streamlines policy management across locations.
Automatic Scalability: Adjusts resources to meet changing demands seamlessly.
Integration with Azure Entra ID: Provides secure user access control.
Hub and Spoke Architecture: Enables efficient threat detection and policy orchestration.

What benefits and ROI should users evaluate?

Cloud-Native Benefits: Offers stability and seamless integration with cloud environments.
Fair Pricing: Competitive cost structure, despite currency conversion challenges.
Simplified Monitoring: Uses Power BI for comprehensive security insights.
Enhanced Security: Protects against phishing and ransomware threats.

Azure Firewall Manager is widely implemented in industries like finance to secure applications and manage B2B interactions. This tool supports endpoint security, traffic management, and seamless orchestrations within cloud environments, ensuring robust protection against various threats.

Microsoft

Microsoft Defender for Identity offers real-time threat detection and protection for hybrid Active Directory environments. It integrates with Microsoft 365 components for seamless security and monitors advanced behaviors, enhancing identity protection across cloud and on-premises environments.

Microsoft Defender for Identity provides detailed threat insights and user behavior analytics to detect unauthorized access and notify anomalies. It allows setting custom detection rules, enhancing threat response automation. While it needs improvements in cloud security, SIEM integration, and access controls, users leverage its ability to mitigate identity threats like suspicious logins and ransomware. Enhanced integration with Microsoft security products ensures a coordinated threat response for identity control and privilege management.

What are the key features of Microsoft Defender for Identity?

Active Directory Federation: Seamlessly integrates with Microsoft 365 for comprehensive security.
Real-time Security Monitoring: Provides immediate insights into advanced user behaviors and potential threats.
Threat Insights: Delivers detailed analysis of threats with the ability to customize detection rules.
User Behavior Analytics: Analyzes user activities to detect anomalies and potential risks.
Identity Protection: Offers comprehensive protection in both cloud and on-premises environments.

What benefits should users expect from reviews of Microsoft Defender for Identity?

Unauthorized Access Prevention: Identifies potential unauthorized activities with advanced detection mechanisms.
Anomaly Notification: Alerts users to unexpected activities within their environments.
Threat Response Automation: Facilitates rapid response to threats with automated solutions.
Enhanced Cloud Security: Strengthens identity management across hybrid and cloud frameworks.

In specific industries, organizations implement Microsoft Defender for Identity to secure on-premises and hybrid Active Directory environments through user and entity behavior analytics, malicious activity detection, and integration with Microsoft security tools. This approach enhances security posture assessment and helps mitigate identity threats like identity harvesting and unauthorized access.

Microsoft

Sample Customers

Information Not Available

Microsoft Defender for Identity is trusted by companies such as St. Luke’s University Health Network, Ansell, and more.

Azure Firewall Manager vs. Microsoft Defender for Identity