Microsoft Defender External Attack Surface Management vs Microsoft Defender XDR comparison

"Microsoft External Attack Surface Management helps improve the visibility of my exposed vulnerabilities and provides an overview of my security posture across the globe."

"It seems to be better at protecting from cyberattacks."

"Microsoft External Attack Surface Management helps improve the visibility of my exposed vulnerabilities and provides an overview of my security posture across the globe."

"Email protection is the most valuable feature of Microsoft Defender XDR."

"Among the most valuable features are the alert timeline, the alert story, which is pretty detailed. It gives us complete insight into what exactly happened on the endpoint. It doesn't just say, "Malware detected." It tells us what caused that malware to be detected and how it was detected. It gives us a complete timeline from beginning to end."

"I like Defender XDR's automation capabilities. XDR isn't automated by default, but you can automate it to respond. If an attack is performed anywhere within the organization, you can isolate that instance from the network. This is what I can figure out for it. When integrated with Sentinel, you can set up playbooks to automate all the alerts gathered on Sentinel from different Microsoft solutions. Sentinel has a wider range of capabilities than XDR."

"The EDR and the way it automatically responds to ransomware and other attacks are valuable features."

"The integration with other Microsoft solutions is the most valuable feature."

"The most valuable feature depends on the scenario. For compliance, I like Microsoft Purview Information Protection and Data Loss Prevention. Sentinel is the most helpful feature for security. 365 Defender helps us prioritize threats across an enterprise. It's a crucial feature for the managed services team."

"The biggest return on investment when using Microsoft Defender XDR for me is saving time for the most part."

"The most valuable features are spam filtering, attachment filtering, and antivirus protection."

"Further integration across different Microsoft products would be an improvement."

"With Microsoft, support is always crazy, it's not easy to get support."

"The integration is not as seamless compared to competitors like Palo Alto."

"For some scenarios, it provides good visibility into threats, and for some scenarios, it doesn't. For example, sometimes the URLs within the emails have destinations, and you do get a screenshot and all further details, but it's not always the case. It would be good if they did a better job of enabling that for all the emails that they identified as malicious. When you get an email threat, you can go into the email and see more details, but the URL destination feature doesn't always show you a screenshot of the URL in that email. It also doesn't always give you the characteristics relating to that URL. It would be quite good if the information is complete where it says that we identified this URL, and this is what it looks like. There should be some threat intel about it. It should give you more details."

"Troubleshooting in Microsoft 365 Defender can be inefficient."

"The management features could be improved, particularly in terms of better integration with Intune, Microsoft's cloud-based management solution."

"At times, there may be delays in the execution of certain actions and their effects."

"The data recovery and backup could be improved."

"For Microsoft Defender XDR, there is currently no ability to reset passwords for on-premises accounts, which is a key challenge."

"Microsoft tends to provide too many features, which makes the solution prone to bugs."

"I personally have not seen much evidence of how Defender can enhance the story of zero trust for enterprises."

"I find the pricing to be quite competitive, especially considering its inclusion in our E5 subscription, which provides a comprehensive set of functionalities."

"Microsoft Defender XDR's licensing is complicated."

"I would like to have more security features in the lower licenses because not every customer is able to buy E5 licenses. The bundling isn't always easy for our customers to understand. Compared to other tools, it's a good price."

"Microsoft 365 Defender offers competitive pricing."

"The bundling of software makes it easier to manage our setup, but Microsoft purposefully obfuscates this through marketing ploys to hide costs."

"The pricing of Microsoft 365 Defender is definitely on the costly side, but with the features and services that Microsoft provides, such as the seamless integration of all the Defender tools, while the price is on the higher side, there is no alternative."

"The solutions price is fair for what they offer."

"The solution is too expensive."