Azure Firewall Manager vs Microsoft Defender for Identity comparison

Azure Firewall Manager and Microsoft Defender for Identity are both solutions in the Microsoft Security Suite category. Azure Firewall Manager is ranked #25 with an average rating of 9.3, while Microsoft Defender for Identity is ranked #5 with an average rating of 8.7. Azure Firewall Manager holds a 1.2% mindshare in Microsoft Security Suite, compared to Microsoft Defender for Identity’s 3.5% mindshare. Additionally, 85% of Azure Firewall Manager users are willing to recommend the solution, compared to 100% of Microsoft Defender for Identity users who would recommend it.

Azure Firewall Manager

Read 9 Azure Firewall Manager reviews

1,563 Views
766 Comparison Views

85% willing to recommend

Microsoft Defender for Iden...

Read 28 Microsoft Defender for Identity reviews

8,396 Views
3,190 Comparison Views

100% willing to recommend

Azure Firewall Manager

Microsoft Defender for Iden...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Azure Firewall Manager and Microsoft Defender for Identity based on real PeerSpot user reviews.

Find out in this report how the two Microsoft Security Suite solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Azure Firewall Manager vs. Microsoft Defender for Identity Report (Updated: June 2026).

Buyer's Guide

Azure Firewall Manager vs. Microsoft Defender for Identity

June 2026

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Azure Firewall Manager

Ranking in Microsoft Security Suite

25th

Average Rating

8.6

Reviews Sentiment

5.4

Number of Reviews

Ranking in other categories

Firewall Security Management (11th)

Microsoft Defender for Iden...

Ranking in Microsoft Security Suite

5th

Average Rating

8.8

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Advanced Threat Protection (ATP) (8th), Identity Threat Detection and Response (ITDR) (2nd)

Mindshare comparison

As of August 2026, in the Microsoft Security Suite category, the mindshare of Azure Firewall Manager is 1.2%, up from 0.6% compared to the previous year. The mindshare of Microsoft Defender for Identity is 3.5%, down from 6.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Microsoft Security Suite Mindshare Distribution
Product	Mindshare (%)
Microsoft Defender for Identity	3.5%
Azure Firewall Manager	1.2%
Other	95.3%

Microsoft Security Suite

Featured Reviews

Sikkander Batcha

DevOps Engineer at CloudIQ

Has managed traffic effectively but lacks visibility and advanced control features

Azure Firewall is typically behind other vendor firewalls because we don't see what kind of traffic is traveling through it. That is one drawback. The main drawback is that we need log support from Azure Firewall, which can be quite costly. There is no login feature in Azure Firewall because only the IAM feature is available in the Azure site; we manage it only through the Azure portal, not through any other portal. Other vendors, such as Palo Alto, provide GUI or CLI interfaces to manage their firewalls, whereas we only manage Azure Firewall through the Azure portal. In the future, I would like to see additional features in Azure Firewall Manager to make it more competitive, such as technologies like App-ID and User-ID that Palo Alto has. Azure Firewall currently only allows traffic based on layer four and sometimes layer seven, so they need to improve in those areas compared to other vendors.

Read full review

Peter Arabomen

Security Engineer at Fidelity Bank Plc

Has supported hybrid identity management while integrating well with cloud directory services

The only challenge I have with Microsoft Defender for Identity is the latency. I may not put that entirely on Microsoft, because latency could be network related. At times when trying to authenticate, the prompt is delayed. We tried implementing passwordless authentication, especially for on-premises workloads, but we haven't been able to achieve that. Passwordless authentication is part of the identity functionalities, particularly when it comes to enforcing passwordless for on-premises workloads. In terms of improvements, you can't create OUs on Azure AD. Regarding giving users privileges on what they can do across different OUs, I haven't seen that feature on Microsoft Defender for Identity. Microsoft Defender for Identity needs to be able to plug into third-party applications that are not Microsoft. For instance, with a human resource application used to manage users and leave requests, when staff leaves the organization, they are first exited from that application before AD. Integration between Azure AD and third-party applications would allow automatic syncing when removing staff. The initial setup of Microsoft Defender for Identity is not hard. However, setup is one thing, and getting value from the application end-to-end is another. It can be set up and running from the first day but not functioning optimally. Initially, when we did the setup, it wasn't optimal. Over time, with continuous improvement, which we're still doing, we've gotten to a comfortable level, but there's still room for improvement.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution is very easy to set up."

"The most valuable feature of Azure Firewall Manager is the testing and configuration."

"The solution has improved our organization with its firewall."

"Azure Firewall Manager centralizes network security management with a hub and spoke architecture."

"The tool's support is good."

"I would definitely recommend the solution to my clients, especially if one is using Azure Cloud."

"It has helped us in multiple ways; for example, we don't require different spaces to manage it, we can do a lot of automation integrations into the code, we could integrate it into the DevOps pipeline, and it has helped us with our time-to-market for a very specific product when we are actually deploying or upgrading."

"From a traffic management perspective, it's a good firewall because it's automatically scalable based on the traffic availability."

More Azure Firewall Manager pros

"This solution has advanced a lot over the last few years."

"I would rate Microsoft Defender for Identity at nine out of ten."

"I recommend Microsoft Defender for Identity because it is easy to implement."

"The feature I like most is that you can create your own customized detection rules. It has a lot of default alerts and rules, but you can customize them according to your business needs."

"Defender for Identity has not affected the end-user experience."

"It is easy to set up. Based on the number of devices you would like to set up, you can use scripts, Group Policy, etc. It takes five minutes to set up."

"One of our users had the same password for every personal and company account. That was a problem because she started receiving phishing emails that could compromise all of her accounts. Defender told us that the user was not changing their password."

"Microsoft is a big company."

More Microsoft Defender for Identity pros

Cons

"Azure charges for many aspects including scaling, automated scaling deployment, and traffic management, which leads to higher costs."

"The price is okay. This said, the solution is certainly expensive in comparison with other cloud services."

"Microsoft was unable to fully solve the problem with email phishing and spamming."

"With Azure Firewall, the problem is that the NAT-ing still has to be improved."

"We could do only one-way NAT-ing, where the traffic comes from outside to internal, to Azure, which is fine. However, when we actually do NAT-ed traffic to hit the firewall, that way is not working."

"The tool's security features need to improve. It needs also to include a monitoring system for logs. It is also complicated to find a query on the Azure firewall."

"For Azure Firewall Manager, the learning curve for new people is a bit challenging, but the integration should be more straightforward for configuring a centralized system."

"The configuration and settings require substantial time for learning, particularly for new users. Improvements in ease of configuration would benefit users significantly."

More Azure Firewall Manager cons

"We observe a lot of false positives. Sometimes, when we go for a coffee break, we lock our screens. Locking the screen has a separate Windows event ID and sometimes I see it is detected as a failed login."

"When the data leaves the cloud, there are security issues."

"The documentation provided by Microsoft is often seen as a waste of time."

"The configuration process is time-consuming, with installation taking two minutes but prerequisites requiring two hours."

"The solution could be better at using group-managed access and they could replace it with broad-based access controls."

"For users operating in mixed environments, while Defender for Identity offers robust protection for on-premises AD, additional solutions or configurations might be necessary to ensure seamless security management across Azure and on-premises AD systems."

"The technical support needs significant improvement. Documentation for more minor issues in the form of guides or walkthroughs could help to resolve this issue. The number of tickets raised would decrease, removing some pressure from the support team and making it easier to clear the remaining tickets."

"They should improve the automation for impossible travel detection. When connected to Wi-Fi and then to VPN, the system sometimes interprets the IP address change as impossible travel."

More Microsoft Defender for Identity cons

Pricing and Cost Advice

"The solution is certainly expensive in comparison with other cloud services."

"The price of the solution is reasonable but it is reasonable for the features."

"Microsoft Defender for Identity comes as part of the Microsoft E5 licensing stack."

"You won't be able to change your tenants from where you deploy them. For example, if you select Canada, they will charge you based on Canadian pricing. If you are also in London, when you deploy in Canada, the pound is higher than Canadian dollars, but your platform resources are billable in Canadian dollars. Using your pounds to pay for any of these things will be cheaper. Or, if you deploy in London, they will charge you based on your local currency."

"Defender for Identity is a little more expensive than other Microsoft products. Identity and Microsoft Defender for Cloud are both a bit costly."

"The product is costly, and we had multiple discussions with accounting to receive a discounted rate. However, on the open market, the tool is expensive."

"It is very affordable considering that other SIEM solutions are much more expensive and have many more licensing restrictions and fees."

See which vendors are best for you

Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

11%

Financial Services Firm

10%

Computer Software Company

Educational Organization

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

10%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	5
Large Enterprise	15

Questions from the Community

What is your experience regarding pricing and costs for Azure Firewall Manager?

The pricing for Azure Firewall Manager is expensive. In our project, we have used both Palo Alto Firewall and Azure Firewall. Azure charges for many aspects including scaling, automated scaling dep...

See all answers

What needs improvement with Azure Firewall Manager?

See all answers

What is your primary use case for Azure Firewall Manager?

My customers are using Azure Firewall Manager, so I'm learning from both documentation and practical knowledge. I usually recommend Azure Firewall Manager for projects such as an animal hospital pr...

See all answers

What needs improvement with Microsoft Defender for Identity?

I really would have to sit down to think about how Microsoft Defender for Identity can be improved. I didn't take stock in what needs to be improved because I appreciated having the tools right the...

See all answers

What is your primary use case for Microsoft Defender for Identity?

My main use cases for Microsoft Defender for Identity include Conditional Access, checking risky users, remediating risky users, and user sign-ins. I can easily remediate or determine what the user...

See all answers

What advice do you have for others considering Microsoft Defender for Identity?

I don't really use Microsoft Defender for Identity a lot because my new role doesn't allow me to take time to do so. I don't really use the threat intelligence feature of Microsoft Defender for Ide...

See all answers

Comparisons

Azure Firewall vs Azure Firewall Manager

Compared 16% of the time

FortiGate Cloud-Native Firewall (FortiGate CNF) vs Azure Firewall Manager

Compared 12% of the time

Microsoft Defender for Cloud vs Azure Firewall Manager

Compared 11% of the time

AlgoSec vs Azure Firewall Manager

Compared 10% of the time

Palo Alto Networks Panorama vs Azure Firewall Manager

Compared 9% of the time

More Azure Firewall Manager Competitors

CrowdStrike Falcon vs Microsoft Defender for Identity

Compared 6% of the time

Microsoft Entra ID Protection vs Microsoft Defender for Identity

Compared 6% of the time

SentinelOne Singularity Identity vs Microsoft Defender for Identity

Compared 5% of the time

Microsoft Defender for Office 365 vs Microsoft Defender for Identity

Compared 4% of the time

BloodHound Enterprise vs Microsoft Defender for Identity

Compared 4% of the time

More Microsoft Defender for Identity Competitors

Product Reports

Buyer's Guide

Azure Firewall Manager

August 2026

Download Azure Firewall Manager product report

Buyer's Guide

Microsoft Defender for Identity

August 2026

Download Microsoft Defender for Identity product report

Also Known As

No data available

Azure Advanced Threat Protection, Azure ATP, MS Defender for Identity

Overview

Azure Firewall Manager offers easy configuration, centralized management, and automatic scalability. Its integration with Azure Entra ID provides secure access, while Power BI facilitates centralized monitoring, contributing to its cloud-native benefits and reliable network management.

Azure Firewall Manager is recognized for its efficient security policy management and the ability to configure and test firewall settings across multiple locations. Its integration with Azure Kubernetes supports cloud environment security and the seamless migration of on-premise components to the cloud. With its hub-and-spoke architecture, users can detect threats and orchestrate policies more effectively, although integration with open-source tools and technical support responsiveness could be enhanced. Improvements in NAT capabilities and an AI-driven phishing prevention system would enhance its offering.

What are Azure Firewall Manager's key features?

Easy Configuration: Simplifies firewall setup without additional plugins.
Centralized Security Management: Streamlines policy management across locations.
Automatic Scalability: Adjusts resources to meet changing demands seamlessly.
Integration with Azure Entra ID: Provides secure user access control.
Hub and Spoke Architecture: Enables efficient threat detection and policy orchestration.

What benefits and ROI should users evaluate?

Cloud-Native Benefits: Offers stability and seamless integration with cloud environments.
Fair Pricing: Competitive cost structure, despite currency conversion challenges.
Simplified Monitoring: Uses Power BI for comprehensive security insights.
Enhanced Security: Protects against phishing and ransomware threats.

Azure Firewall Manager is widely implemented in industries like finance to secure applications and manage B2B interactions. This tool supports endpoint security, traffic management, and seamless orchestrations within cloud environments, ensuring robust protection against various threats.

Microsoft

Microsoft Defender for Identity offers real-time threat detection and protection for hybrid Active Directory environments. It integrates with Microsoft 365 components for seamless security and monitors advanced behaviors, enhancing identity protection across cloud and on-premises environments.

Microsoft Defender for Identity provides detailed threat insights and user behavior analytics to detect unauthorized access and notify anomalies. It allows setting custom detection rules, enhancing threat response automation. While it needs improvements in cloud security, SIEM integration, and access controls, users leverage its ability to mitigate identity threats like suspicious logins and ransomware. Enhanced integration with Microsoft security products ensures a coordinated threat response for identity control and privilege management.

What are the key features of Microsoft Defender for Identity?

Active Directory Federation: Seamlessly integrates with Microsoft 365 for comprehensive security.
Real-time Security Monitoring: Provides immediate insights into advanced user behaviors and potential threats.
Threat Insights: Delivers detailed analysis of threats with the ability to customize detection rules.
User Behavior Analytics: Analyzes user activities to detect anomalies and potential risks.
Identity Protection: Offers comprehensive protection in both cloud and on-premises environments.

What benefits should users expect from reviews of Microsoft Defender for Identity?

Unauthorized Access Prevention: Identifies potential unauthorized activities with advanced detection mechanisms.
Anomaly Notification: Alerts users to unexpected activities within their environments.
Threat Response Automation: Facilitates rapid response to threats with automated solutions.
Enhanced Cloud Security: Strengthens identity management across hybrid and cloud frameworks.

In specific industries, organizations implement Microsoft Defender for Identity to secure on-premises and hybrid Active Directory environments through user and entity behavior analytics, malicious activity detection, and integration with Microsoft security tools. This approach enhances security posture assessment and helps mitigate identity threats like identity harvesting and unauthorized access.

Microsoft

Sample Customers

Information Not Available

Microsoft Defender for Identity is trusted by companies such as St. Luke’s University Health Network, Ansell, and more.

Buyer's Guide

Azure Firewall Manager vs. Microsoft Defender for Identity

June 2026

Free Report: Azure Firewall Manager vs. Microsoft Defender for Identity

Find out what your peers are saying about Azure Firewall Manager vs. Microsoft Defender for Identity and other solutions. Updated: June 2026.

DOWNLOAD NOW

909,725 professionals have used our research since 2012.

See our Azure Firewall Manager vs. Microsoft Defender for Identity report.

See our list of best Microsoft Security Suite vendors.

We monitor all Microsoft Security Suite reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.