Try our new research platform with insights from 80,000+ expert users

Azure Firewall Manager vs Microsoft Defender XDR comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Azure Firewall Manager
Ranking in Microsoft Security Suite
28th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
8
Ranking in other categories
Firewall Security Management (12th)
Microsoft Defender XDR
Ranking in Microsoft Security Suite
5th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
102
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (2nd)
 

Mindshare comparison

As of September 2025, in the Microsoft Security Suite category, the mindshare of Azure Firewall Manager is 0.6%, up from 0.5% compared to the previous year. The mindshare of Microsoft Defender XDR is 6.5%, up from 5.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite Market Share Distribution
ProductMarket Share (%)
Microsoft Defender XDR6.5%
Azure Firewall Manager0.6%
Other92.9%
Microsoft Security Suite
 

Featured Reviews

MuhammadShakeel - PeerSpot reviewer
Manages multiple firewalls effortlessly but faces challenges with cost efficiency
Azure Firewall Manager is good most of the time, but it could be improved regarding cost. The cost is a significant concern because we are in a region where the dollar is not our default currency, and converting to dollars makes it very expensive. Microsoft should calculate and show the products in local currencies, such as PKR or Bangladesh currency, and also introduce Indian currency similarly for Pakistan. The technical support could be improved. When a resource is assigned, that resource should follow the ticket and respond swiftly, including sending an email to inform me that an agent has been assigned. I still find myself waiting for an agent to connect with me and resolve my issues. I have not been integrating Azure Firewall Manager with Azure Virtual WAN.
MohtesanShaikh - PeerSpot reviewer
Experience improves security management and simplifies threat protection
I have created automated investigations, and while they work, they operate rather slowly in the Microsoft portal. If I automate something, it takes considerable time; if I do it manually, I can complete it in a quarter of the time. The automation response being slow is the main concern; when an incident occurs or if I run a remediation, it takes significant time to complete the remediation. There are some limitations regarding the scalability of Microsoft Defender XDR with specific licensing. For SMB customers, there is only Microsoft Defender for Business, and if they want more features such as XDR features and automation investigation or incident response, they need to purchase Defender for Endpoint. We are currently using the EDR.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution has improved our organization with its firewall."
"Azure Firewall Manager centralizes network security management with a hub and spoke architecture."
"The most valuable feature of Azure Firewall Manager is the testing and configuration."
"The best feature of Azure Firewall Manager is that it is easy to maintain and configure."
"The solution is very easy to set up."
"Azure Firewall Manager centralizes network security management with a hub and spoke architecture."
"The tool's support is good."
"We are utilizing Azure Entra ID for group labeling, so Active Directory, or now it is Entra ID, securing our application for everyone who accesses it, and Azure Firewall Manager is definitely securing our projects and all its features are fine."
"You can configure the product very easily."
"The most valuable feature of the solution stems from the fact that Microsoft Defender XDR is easy to integrate with other Microsoft platforms or products."
"The advantage of Microsoft Defender XDR has over other XDRs in the market is that it's easy to use. You can quickly differentiate between alerts, incidents, devices, software, etc. It's easier to investigate an incident, and you have so many options. You can automate investigations and use playbooks. There's also the live response session, which is something you can't find in any other XDR."
"It has been great for us. Previously, we didn't have a solution to protect us, especially from malware, whereas now, we are getting protection up front, especially from the malware attacks coming through emails or endpoints."
"It has great stability."
"The EDR and the way it automatically responds to ransomware and other attacks are valuable features."
"I like how Microsoft XDR and the other Microsoft products are integrated into a single unified security stack covering identity access management, endpoint protection, email, cloud applications, etc."
"Having a single pane of glass for all Microsoft security services makes everything much easier. A security analyst can go to a single portal and see everything in one view. The integration of everything into one portal is a huge benefit."
 

Cons

"The solution can improve the integration with open-source tools."
"The configuration and settings require substantial time for learning, particularly for new users. Improvements in ease of configuration would benefit users significantly."
"The price is okay. This said, the solution is certainly expensive in comparison with other cloud services."
"For Azure Firewall Manager, the learning curve for new people is a bit challenging, but the integration should be more straightforward for configuring a centralized system."
"The tool's security features need to improve. It needs also to include a monitoring system for logs. It is also complicated to find a query on the Azure firewall."
"We could do only one-way NAT-ing, where the traffic comes from outside to internal, to Azure, which is fine. However, when we actually do NAT-ed traffic to hit the firewall, that way is not working."
"There should be a simple one-click deployment for a firewall, rather than a set of setup instructions that include steps such as the DNS configuration, et cetera."
"The configuration and settings require substantial time for learning, particularly for new users."
"The console is missing some features that would be helpful for a managed services provider, like device and user management."
"The solution could enhance the threat Intelligence feature by making it more relevant to specific industries. Much of the threat intelligence information isn't directly applicable to our environment. It would be beneficial if the threat intelligence were tailored to the industry, such as healthcare or fintech, where the solution is being used."
"I'd like to see a wider solution that includes not only desktop devices but also other devices, such as servers, storage cabinets, switching equipment, et cetera."
"The logs could be better."
"Correctly updated records are the most significant area for improvement. There have been times when we were notified of a required fix; we would carry out the fix and confirm it but still get the same notification a week later. This seems to be a delay in records being updated and leads to false reporting, which is something that needs to be fixed."
"The customer support aspect can be better because it's the biggest complaint I hear about Microsoft. They can improve the ease of support and licensing processes."
"Stability could be improved by avoiding frequent changes to the interface."
"Generally, antivirus products provide a central control to manage every device in terms of who is installing it or who is trying to disable it, but Microsoft doesn't have such a control center for the antivirus product it provides."
 

Pricing and Cost Advice

"The solution is certainly expensive in comparison with other cloud services."
"The price of the solution is reasonable but it is reasonable for the features."
"365 Defender is billed per account. I don't know the exact price, but my supervisor told me that Microsoft Defender is cheaper than the alternatives. It's bundled, so you get all the features in one place."
"Defender plan 1 is tenant-wise, and Defender plan 2 is per-user, which makes it more expensive. To have certain features, you would need to purchase the E5 license. For all of the capabilities that the tool provides, the price, though it can be high, is fair."
"The price of the solution is high compared to others and we have lost some customers because of it."
"Microsoft Defender XDR is already included in our Office 365 licensing. It is better because we're saving money by using it."
"Purchasing Microsoft Defender XDR as part of a Microsoft 365 bundle can be cost-effective, but acquiring it as a standalone product may be more expensive."
"While the standalone price of Defender XDR might seem high, its value becomes clear when considering the ease of implementation and smooth integration with our existing Microsoft infrastructure, especially when bundled with other Microsoft products."
"Sometimes 365 Defender is expensive, but it can be moderate, depending on the organization's size and the license type. We're satisfied with the cost because it gives us a product that protects our entire environment with DLP. To compromise some cost, of course, we are to complete the most secure environment."
"They have moved from a licensing model to pay-per-use... The question is: What happens if, for any reason, there's not enough budget to accept this model? That could be a great problem."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
867,445 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
20%
Computer Software Company
17%
Manufacturing Company
8%
Government
7%
Computer Software Company
16%
Financial Services Firm
9%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise23
Large Enterprise37
 

Questions from the Community

What do you like most about Azure Firewall Manager?
The most valuable feature of Azure Firewall Manager is the testing and configuration.
What is your experience regarding pricing and costs for Azure Firewall Manager?
The pricing for Azure Firewall Manager seems okay compared to its good features. Although extra expenses are incurred for additional services, these are not directly related to the firewall, and th...
What needs improvement with Azure Firewall Manager?
Azure Firewall Manager is good most of the time, but it could be improved regarding cost. The cost is a significant concern because we are in a region where the dollar is not our default currency, ...
What do you like most about Microsoft 365 Defender?
Microsoft Defender XDR provides strong identity protection with comprehensive insights into risky user behavior and potential indicators of compromise.
What is your experience regarding pricing and costs for Microsoft 365 Defender?
The pricing for Microsoft Sentinel operates on a pay-as-you-go model based on data ingestion. I recall that Defender XDR pricing is based on the number of endpoints.
What needs improvement with Microsoft 365 Defender?
For Microsoft Defender XDR ( /categories/extended-detection-and-response-xdr ), there is currently no ability to reset passwords for on-premises accounts, which is a key challenge. Incident managem...
 

Also Known As

No data available
Microsoft 365 Defender, Microsoft Threat Protection, MS 365 Defender
 

Overview

 

Sample Customers

Information Not Available
Accenture, Deloitte, ExxonMobil, General Electric, IBM, Johnson & Johnson and many others.
Find out what your peers are saying about Azure Firewall Manager vs. Microsoft Defender XDR and other solutions. Updated: July 2025.
867,445 professionals have used our research since 2012.