No more typing reviews! Try our Samantha, our new voice AI agent.

Azure Firewall Manager vs Microsoft Entra ID Protection comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Azure Firewall Manager
Ranking in Microsoft Security Suite
25th
Average Rating
8.6
Reviews Sentiment
5.4
Number of Reviews
9
Ranking in other categories
Firewall Security Management (11th)
Microsoft Entra ID Protection
Ranking in Microsoft Security Suite
11th
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
22
Ranking in other categories
Identity Management (IM) (7th), Identity Threat Detection and Response (ITDR) (3rd)
 

Mindshare comparison

As of August 2026, in the Microsoft Security Suite category, the mindshare of Azure Firewall Manager is 1.2%, up from 0.6% compared to the previous year. The mindshare of Microsoft Entra ID Protection is 2.3%, down from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite Mindshare Distribution
ProductMindshare (%)
Microsoft Entra ID Protection2.3%
Azure Firewall Manager1.2%
Other96.5%
Microsoft Security Suite
 

Featured Reviews

Sikkander  Batcha - PeerSpot reviewer
DevOps Engineer at CloudIQ
Has managed traffic effectively but lacks visibility and advanced control features
Azure Firewall is typically behind other vendor firewalls because we don't see what kind of traffic is traveling through it. That is one drawback. The main drawback is that we need log support from Azure Firewall, which can be quite costly. There is no login feature in Azure Firewall because only the IAM feature is available in the Azure site; we manage it only through the Azure portal, not through any other portal. Other vendors, such as Palo Alto, provide GUI or CLI interfaces to manage their firewalls, whereas we only manage Azure Firewall through the Azure portal. In the future, I would like to see additional features in Azure Firewall Manager to make it more competitive, such as technologies like App-ID and User-ID that Palo Alto has. Azure Firewall currently only allows traffic based on layer four and sometimes layer seven, so they need to improve in those areas compared to other vendors.
MohammedTalukdar1 - PeerSpot reviewer
Enterprise Security Architect at PRS for Music
Identity protection has unified access control and delivers faster, risk-based threat response
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive. Occasionally, when we are trying to do something different in terms of integrating into a new vendor or platform, especially with some of the new SaaS platforms, there are not many out-of-the-box solutions available, so we have to build custom solutions.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best feature of Azure Firewall Manager is that it is easy to maintain and configure."
"The solution is very easy to set up."
"The tool's support is good."
"The most valuable feature is the web firewall, as it is easy to install and does not require any plugins for your browser."
"Azure Firewall Manager centralizes network security management with a hub and spoke architecture."
"It has helped us in multiple ways; for example, we don't require different spaces to manage it, we can do a lot of automation integrations into the code, we could integrate it into the DevOps pipeline, and it has helped us with our time-to-market for a very specific product when we are actually deploying or upgrading."
"We are utilizing Azure Entra ID for group labeling, so Active Directory, or now it is Entra ID, securing our application for everyone who accesses it, and Azure Firewall Manager is definitely securing our projects and all its features are fine."
"The solution has improved our organization with its firewall."
"The features we find most effective for identity security include access reviews, two-factor authentication, and modification."
"I find the most valuable feature to be conditional access. It allows for comprehensive security controls, network security, and application label security."
"The multifactor authentication feature is effective, providing an additional layer of security."
"Microsoft's support is commendable. Their response time is quick, and they handle inquiries effectively, ensuring ongoing support processes."
"The solution helps us with authentication."
"The protections for handling identity threats in Microsoft Entra ID Protection, such as the automated remediation, are working effectively."
"Microsoft Entra ID Protection is a great solution overall because it improves security in the company through identity management."
"The valuable features of Entra ID Protection include providing me visibility of my entire estate, managing access, and having a level of control."
 

Cons

"The configuration and settings require substantial time for learning, particularly for new users. Improvements in ease of configuration would benefit users significantly."
"Microsoft was unable to fully solve the problem with email phishing and spamming."
"The solution can improve the integration with open-source tools."
"The cost is a significant concern because we are in a region where the dollar is not our default currency, and converting to dollars makes it very expensive."
"Azure charges for many aspects including scaling, automated scaling deployment, and traffic management, which leads to higher costs."
"The tool's security features need to improve. It needs also to include a monitoring system for logs. It is also complicated to find a query on the Azure firewall."
"The price is okay. This said, the solution is certainly expensive in comparison with other cloud services."
"There should be a simple one-click deployment for a firewall, rather than a set of setup instructions that include steps such as the DNS configuration, et cetera."
"Microsoft has not offered control over how they calculate high or low-risk scenarios. While they mention if a low risk is found by Microsoft, the triggered policy isn't customizable."
"The experience is not very smooth for the user. This is an area where Microsoft could improve the authorization process."
"The solution's sync should be faster since it can take about 30 minutes to two hours to complete a simple sync. The tool needs to sync instantly. It also needs to improve scalability, support, and stability."
"A potential area of improvement in Microsoft Entra ID Protection could include backup-level capability or snapshot capability."
"The platform's pricing and scalability need improvement."
"The pricing could be improved."
"Integrating some notifications, not necessarily all, but at least for important events or alerts, would be beneficial as it would function as a team solution or something similar."
"Azure AD could improve by enhancing the availability of specialized courses for security, such as NETSCOUT security or other relevant certifications. It would be beneficial to have specific courses for security, to provide in-depth knowledge and skills related to Azure AD. While there are micro-learning resources available for various concepts, many people in the IT industry may not have the time to go through all the courses to properly configure and utilize Azure Active Directory. Simplifying the implementation process and making it easier for individuals to join a company with Azure AD could also be considered areas for improvement."
 

Pricing and Cost Advice

"The solution is certainly expensive in comparison with other cloud services."
"The price of the solution is reasonable but it is reasonable for the features."
"Azure Active Directory Identity Protection is not very expensive."
"The pricing is competitive in the SMA segment and runs $5-$6 per user."
"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."
"The price of Azure AD is not expensive."
"The product cost is on the expensive side."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Financial Services Firm
10%
Computer Software Company
9%
Educational Organization
9%
Financial Services Firm
14%
Manufacturing Company
9%
Computer Software Company
9%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Firewall Manager?
The pricing for Azure Firewall Manager is expensive. In our project, we have used both Palo Alto Firewall and Azure Firewall. Azure charges for many aspects including scaling, automated scaling dep...
What needs improvement with Azure Firewall Manager?
Azure Firewall is typically behind other vendor firewalls because we don't see what kind of traffic is traveling through it. That is one drawback. The main drawback is that we need log support from...
What is your primary use case for Azure Firewall Manager?
My customers are using Azure Firewall Manager, so I'm learning from both documentation and practical knowledge. I usually recommend Azure Firewall Manager for projects such as an animal hospital pr...
What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive.
What needs improvement with Azure Active Directory Identity Protection?
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. T...
What is your primary use case for Azure Active Directory Identity Protection?
I primarily use Microsoft Entra ID Protection as an Identity and Access Management platform. The primary use case for Microsoft Entra ID Protection is Identity Management, although there are numero...
 

Also Known As

No data available
Azure Active Directory Identity Protection, Azure AD Identity Protection
 

Overview

Find out what your peers are saying about Azure Firewall Manager vs. Microsoft Entra ID Protection and other solutions. Updated: June 2026.
909,725 professionals have used our research since 2012.