Azure Firewall Manager vs Microsoft Entra ID Protection comparison

Azure Firewall Manager vs. Microsoft Entra ID Protection

Download the complete report

Helped 902,894 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Azure Firewall Manager

Ranking in Microsoft Security Suite

25th

Average Rating

8.6

Reviews Sentiment

5.4

Number of Reviews

Ranking in other categories

Firewall Security Management (11th)

Microsoft Entra ID Protection

Ranking in Microsoft Security Suite

10th

Average Rating

8.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Identity Management (IM) (7th), Identity Threat Detection and Response (ITDR) (2nd)

Mindshare comparison

As of July 2026, in the Microsoft Security Suite category, the mindshare of Azure Firewall Manager is 1.2%, up from 0.5% compared to the previous year. The mindshare of Microsoft Entra ID Protection is 2.3%, down from 4.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Microsoft Security Suite Mindshare Distribution
Product	Mindshare (%)
Microsoft Entra ID Protection	2.3%
Azure Firewall Manager	1.2%
Other	96.5%

Microsoft Security Suite

Featured Reviews

Sikkander Batcha

DevOps Engineer at CloudIQ

Has managed traffic effectively but lacks visibility and advanced control features

Azure Firewall is typically behind other vendor firewalls because we don't see what kind of traffic is traveling through it. That is one drawback. The main drawback is that we need log support from Azure Firewall, which can be quite costly. There is no login feature in Azure Firewall because only the IAM feature is available in the Azure site; we manage it only through the Azure portal, not through any other portal. Other vendors, such as Palo Alto, provide GUI or CLI interfaces to manage their firewalls, whereas we only manage Azure Firewall through the Azure portal. In the future, I would like to see additional features in Azure Firewall Manager to make it more competitive, such as technologies like App-ID and User-ID that Palo Alto has. Azure Firewall currently only allows traffic based on layer four and sometimes layer seven, so they need to improve in those areas compared to other vendors.

Read full review

Luis Gabriel Mieles Benavides

Cloud Architect at Sonda S.A.

Identity protection has strengthened daily access control and improved passwordless security

The best features of Microsoft Entra ID Protection include the password dictionary, which we do not have in Active Directory. Conditional access is excellent because we can select the location from which users authenticate, and this is the best feature for me. Another valuable feature is the ability to identify critical or suspicious computers. If computers are too old or too suspicious, the system does not allow authentication, which is excellent. The effectiveness of automated remediation for handling identity threats is great. I use passwordless authentication with cellular phone authentication, which is excellent because we do not always need a password. Microsoft Entra ID Protection is a great solution overall because it improves security in the company through identity management. It improves integration with other solutions such as Google, Gmail, Hotmail, Outlook, and Facebook. We can create different applications and integrate with different services.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution has improved our organization with its firewall."

"The most valuable feature of Azure Firewall Manager is the testing and configuration."

"The solution is very easy to set up."

"The most valuable feature is the web firewall, as it is easy to install and does not require any plugins for your browser."

"I would definitely recommend the solution to my clients, especially if one is using Azure Cloud."

"The tool's support is good."

"The best feature of Azure Firewall Manager is that it is easy to maintain and configure."

"From a traffic management perspective, it's a good firewall because it's automatically scalable based on the traffic availability."

More Azure Firewall Manager pros

"These features ease the job of security analysts, providing a better vision of user activities and potential risks."

"We've integrated our other software with Microsoft, and we log into other software using Microsoft. That's very helpful."

"The reverse proxy feature provides additional security that is not available in other solutions such as SailPoint and Dell."

"Microsoft Entra ID Protection's features are suitable for all sizes of companies; it's a must-have product because traditionally Active Directory was used for identity and authentication on computers, and now with hybrid capabilities, every company of any size needs these features and tools."

"The primary and most valuable aspect of Azure AD identity is its ability to function seamlessly on both on-premise and cloud infrastructure, eliminating the need for extensive updates. However, this dual solution can pose vulnerabilities that require substantial support and security measures in the on-premise environment. Despite the challenges, it is currently not feasible to completely abandon AD, especially for companies in the sales and energy sectors. The integration with Microsoft Defender is crucial for enhancing security, making identity and security the primary focus and purpose of Azure AD."

"I recommend this product overall."

"For me, automatization is most valuable."

"I find the most valuable feature to be conditional access. It allows for comprehensive security controls, network security, and application label security."

More Microsoft Entra ID Protection pros

Cons

"Microsoft was unable to fully solve the problem with email phishing and spamming."

"There should be a simple one-click deployment for a firewall, rather than a set of setup instructions that include steps such as the DNS configuration, et cetera."

"The cost is a significant concern because we are in a region where the dollar is not our default currency, and converting to dollars makes it very expensive."

"The solution can improve the integration with open-source tools."

"The price is okay. This said, the solution is certainly expensive in comparison with other cloud services."

"We could do only one-way NAT-ing, where the traffic comes from outside to internal, to Azure, which is fine. However, when we actually do NAT-ed traffic to hit the firewall, that way is not working."

"With Azure Firewall, the problem is that the NAT-ing still has to be improved."

"For Azure Firewall Manager, the learning curve for new people is a bit challenging, but the integration should be more straightforward for configuring a centralized system."

More Azure Firewall Manager cons

"Identity protection and trust issues, particularly in hybrid environments, could be addressed better with Microsoft Entra ID Protection. This would aid connectivity concerns."

"Microsoft has not offered control over how they calculate high or low-risk scenarios. While they mention if a low risk is found by Microsoft, the triggered policy isn't customizable."

"The recent CrowdStrike issue affected most systems."

"The solution's sync should be faster since it can take about 30 minutes to two hours to complete a simple sync. The tool needs to sync instantly. It also needs to improve scalability, support, and stability."

"Identity labeling and sensitivity needs improvement to be comparable to Dell."

"Integrating some notifications, not necessarily all, but at least for important events or alerts, would be beneficial as it would function as a team solution or something similar."

"The pricing could be improved."

"A potential area of improvement in Microsoft Entra ID Protection could include backup-level capability or snapshot capability."

More Microsoft Entra ID Protection cons

Pricing and Cost Advice

"The solution is certainly expensive in comparison with other cloud services."

"The price of the solution is reasonable but it is reasonable for the features."

"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."

"Azure Active Directory Identity Protection is not very expensive."

"The pricing is competitive in the SMA segment and runs $5-$6 per user."

"The product cost is on the expensive side."

"The price of Azure AD is not expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.

See recommendations

902,894 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

11%

Construction Company

11%

Educational Organization

Computer Software Company

Financial Services Firm

15%

Computer Software Company

10%

Manufacturing Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	1
Large Enterprise	5

Questions from the Community

What is your experience regarding pricing and costs for Azure Firewall Manager?

The pricing for Azure Firewall Manager is expensive. In our project, we have used both Palo Alto Firewall and Azure Firewall. Azure charges for many aspects including scaling, automated scaling dep...

What needs improvement with Azure Firewall Manager?

What is your primary use case for Azure Firewall Manager?

My customers are using Azure Firewall Manager, so I'm learning from both documentation and practical knowledge. I usually recommend Azure Firewall Manager for projects such as an animal hospital pr...

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?

The pricing for Microsoft Entra ID protection is not expensive. It varies based on the company's size and quality.

What needs improvement with Azure Active Directory Identity Protection?

I do not think there are any areas that could be improved with Microsoft Entra ID Protection at this time.

What is your primary use case for Azure Active Directory Identity Protection?

I use Microsoft Entra ID Protection and provide support for features such as multifactor authentication and conditional access. I work with this solution every day.

Azure Firewall vs Azure Firewall Manager

Comparisons

Compared 17% of the time

FortiGate Cloud-Native Firewall (FortiGate CNF) vs Azure Firewall Manager

Compared 14% of the time

Microsoft Defender for Cloud vs Azure Firewall Manager

Compared 12% of the time

AlgoSec vs Azure Firewall Manager

Compared 11% of the time

Palo Alto Networks Panorama vs Azure Firewall Manager

Compared 9% of the time

More Azure Firewall Manager Competitors

One Identity Manager vs Microsoft Entra ID Protection

Compared 8% of the time

Microsoft Defender for Identity vs Microsoft Entra ID Protection

Compared 7% of the time

SailPoint Identity Security Cloud vs Microsoft Entra ID Protection

Compared 4% of the time

Oasis vs Microsoft Entra ID Protection

Compared 3% of the time

BloodHound Enterprise vs Microsoft Entra ID Protection

Compared 3% of the time

More Microsoft Entra ID Protection Competitors

Product Reports

Azure Firewall Manager

Download Azure Firewall Manager product report

Microsoft Entra ID Protection

Download Microsoft Entra ID Protection product report

Also Known As

No data available

Azure Active Directory Identity Protection, Azure AD Identity Protection

Overview

Azure Firewall Manager offers easy configuration, centralized management, and automatic scalability. Its integration with Azure Entra ID provides secure access, while Power BI facilitates centralized monitoring, contributing to its cloud-native benefits and reliable network management.

Azure Firewall Manager is recognized for its efficient security policy management and the ability to configure and test firewall settings across multiple locations. Its integration with Azure Kubernetes supports cloud environment security and the seamless migration of on-premise components to the cloud. With its hub-and-spoke architecture, users can detect threats and orchestrate policies more effectively, although integration with open-source tools and technical support responsiveness could be enhanced. Improvements in NAT capabilities and an AI-driven phishing prevention system would enhance its offering.

What are Azure Firewall Manager's key features?

Easy Configuration: Simplifies firewall setup without additional plugins.
Centralized Security Management: Streamlines policy management across locations.
Automatic Scalability: Adjusts resources to meet changing demands seamlessly.
Integration with Azure Entra ID: Provides secure user access control.
Hub and Spoke Architecture: Enables efficient threat detection and policy orchestration.

What benefits and ROI should users evaluate?

Cloud-Native Benefits: Offers stability and seamless integration with cloud environments.
Fair Pricing: Competitive cost structure, despite currency conversion challenges.
Simplified Monitoring: Uses Power BI for comprehensive security insights.
Enhanced Security: Protects against phishing and ransomware threats.

Azure Firewall Manager is widely implemented in industries like finance to secure applications and manage B2B interactions. This tool supports endpoint security, traffic management, and seamless orchestrations within cloud environments, ensuring robust protection against various threats.

Microsoft

Microsoft Entra ID Protection enhances security through features like conditional access and multifactor authentication, optimizing identity management for enterprises. This robust solution ensures efficient control over access policies, supporting seamless integration and operational efficiency.

Microsoft Entra ID Protection provides advanced identity management, authentication, and authorization capabilities, supporting multifactor authentication and single sign-on to control digital identities effectively. It utilizes adaptive machine learning for security enhancements and automated risk-based actions, with seamless Microsoft Defender integration. Connectivity with third-party applications and real-time monitoring offers improved operational efficiency for managing large user bases. While it is a powerful tool, there is room to grow in areas such as identity labeling, password management, faster synchronization, better Mac compatibility, and improved scalability. Desired features include enhanced course availability for security training, streamlined implementation processes, and clarified interfaces.

What are the key features of Microsoft Entra ID Protection?

Conditional Access: Control access policies to secure identity-related activities.
Multifactor Authentication: Strengthen sign-in security with multiple verification methods.
Single Sign-On: Simplify access to applications with a single set of credentials.
Identity Governance: Maintain compliance and manage identities efficiently.

What benefits should be considered in reviews?

Enhanced Security: Adaptive machine learning and risk-based actions reduce vulnerabilities.
Operational Efficiency: Integration and monitoring capabilities facilitate large-scale management.
Compliance Support: Aids in maintaining security compliance strategies.
Seamless Integration: Works effectively with Microsoft Defender and third-party apps.

Organizations leverage Microsoft Entra ID Protection to manage identities and access across sectors such as finance, healthcare, and technology. They integrate hybrid environments, enforcing multifactor authentication and conditional access policies, which enables them to secure digital identities and align with compliance operations. Many synchronize on-premises Active Directory with cloud services, effectively managing users, groups, and licenses.

Microsoft

Azure Firewall Manager vs. Microsoft Entra ID Protection