Microsoft Defender for Endpoint vs SonicWall Capture Advanced Threat Protection comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Microsoft Defender for Endp...
Ranking in Advanced Threat Protection (ATP)
2nd
Average Rating
8.0
Number of Reviews
182
Ranking in other categories
Endpoint Protection Platform (EPP) (1st), Anti-Malware Tools (1st), Endpoint Detection and Response (EDR) (1st), Microsoft Security Suite (6th)
SonicWall Capture Advanced ...
Ranking in Advanced Threat Protection (ATP)
28th
Average Rating
7.8
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2024, in the Advanced Threat Protection (ATP) category, the mindshare of Microsoft Defender for Endpoint is 4.1%, up from 2.4% compared to the previous year. The mindshare of SonicWall Capture Advanced Threat Protection is 1.1%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP)
Unique Categories:
Endpoint Protection Platform (EPP)
12.6%
Anti-Malware Tools
23.2%
No other categories found
 

Featured Reviews

Doug Kinzinger - PeerSpot reviewer
Nov 28, 2023
Has good reporting and logging features
Defender should be more accessible for small and medium-sized businesses. You have some organizations that maybe have a hundred employees, and they're focused on making their widgets. That's their nine-to-five every day. They're not thinking about that security side, but maybe they're already invested in 365 or the Azure ecosystem and having Defender as an add-on makes sense from a price perspective. It's easy to deploy, but it could be easier for some of those smaller businesses to onboard endpoints. The onboarding and deployment could be more user-friendly, and there is room to grow in some of the reports. I don't want them to be oversimplified or overly complex, but there is room for improvement in the reporting it can do. It's relatively minor.
MG
Sep 26, 2019
When compared to other solutions, it is cheaper and more economical
We are migrating our firewall to the latest version: NSA 4650. We use this solution on cloud The most valuable feature is the alerting system. For a small to medium customer, it is a cost-effective value. It does all the basic requirements. It fulfills all of our requirements. We get alert…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"There are some competitive products on the market, but the best is Microsoft Defender because it's very easy to integrate. That's one reason a lot of clients want Microsoft Defender. It's also very easy to implement compared to other solutions."
"Microsoft Defender for Endpoint is scalable. Currently, we have 600,000 users in our organization."
"It has Kusto Query Language (KQL), so we can use our own queries to find anything."
"It's not really visible for the user - which is a benefit."
"The most valuable feature of Microsoft Defender for Endpoint is its ability to bring together all the data, providing more information than just antivirus hits."
"We are able to productively integrate with existing on-prem, hybrid, or cloud applications."
"Defender provides useful alerts and groups them. It sends an alert to your portal if it detects any malicious activity, and you can group multiple alerts to form an incident."
"The most important feature is the way it monitors the threats and blocks them. About 10 days ago, we were implementing SOC for a particular client. The SOC was not yet implemented, but they had Microsoft Defender. That organization was hit by some ransomware, but the hacker could not succeed. Because of the EDR, the hacker could not install the hacking tools. They were trying to do that, but Microsoft Defender completely blocked that. The hacker could log into the system, but they could not install anything."
"We use it for protection against viruses and ransomware attacks."
"Provides good protection and security."
"The stability of the solution is good. We haven't had any breaches or crashes. It's been very stable for us."
"The reporting that you get from it is the most valuable feature. You can see it via the appliance itself, and also via the MySonicWall account for the registered device. You are able to select the file if it's malicious, and you can select it in the reporting and see what triggered it, and things like that. I found that to be quite useful."
"The ATP (Advanced Threat Protection) on scanning is the most valuable feature."
"I like this setup for a firewall. You can set things up very easily and you can automate items as well. It's a very robust firewall solution for enterprise as well as small businesses."
"They have a large database of commonly known things that they can catch automatically, then they have anything which is questionable go to the sandbox and be examined there before going into our network."
"It also has an easy configuration. The feedback that we get from our customers is that it's a good product."
 

Cons

"The user interface could use some improvement."
"The management console is something that can be improved."
"I have accounts for administrators and corporate employees, but I also have accounts for students. I can't split these types of accounts. I need a separate configuration for both... I need to research how I can get alerts for only the administrative machines."
"With regards to the interface, a challenge I found was that there was not enough documentation on how to tune it. I had to read multiple sources on the internet to learn how to configure the tool appropriately."
"Microsoft Defender for Endpoint should have more transparency. In the latest edition of Windows, Windows 11, it is a compulsory requirement to connect to a Microsoft account, which in turn has implications for Defender. This should be removed."
"The anti-ransomware features need to be improved upon."
"The profiling method currently in use is not very user-friendly and has ample scope for improvement."
"The central management console should be improved because it provides limited options to configure Windows Defender."
"I would like to have better documentation before starting with deployment because the deployment is a bit complex."
"We would like to get immediate alerts from the alerting system without using third-parties."
"If anything at all, it would be some very minor updates that need to be done, but in terms of changes, nothing comes to mind."
"Could provide online training to allow customers to learn more about the product."
"The setup needs improvement. It needs to be made more user-friendly."
"SonicWall should promote their roadmap and improve their marketing to customers."
"Having an on-premise solution as well would be an option for some people, but they'll want to use a cloud solution for their sandboxing. Certain sites would want to keep all the checks done on an on-premise appliance. All the checking, rather than sending that up into a cloud engine."
"SonicWall had a recent layoff. This is a concern for us, because now we are missing the local presence from both the engineering and sales side."
 

Pricing and Cost Advice

"The price of Microsoft Defender for Endpoint is reasonable. Other solutions are more expensive, such as ClowdStrike."
"This solution is part of an enterprise license we have."
"The license for Microsoft Defender for Endpoint is included in the license for the Microsoft Windows operating system."
"The base price for an E5 license, which includes Enterprise Mobility + Security E5, is $57 per user per month."
"The cost is competitive and reasonable because most of the expense is log analytics, storage, and data consumption and ingestion. These things can be throttled and controlled, so they are highly flexible. Defender has a lot of advantages over competing products."
"The subscription is part of Windows, so we don't have to pay anything extra for this product."
"I don't know the standalone costs. It is my understanding that the M365 E5 is $56 a month or something close to that pricing. That would be for the full suite. Just Defender might be $8 a month. I can't say for sure."
"This is an expensive product and licensing for all Microsoft products is a big issue."
"When you compare it with other solutions, they are cheaper and more economical."
"The best deal from SonicWall is to buy the HA pair. When you buy the initial one, you receive the second one at a significant discount. If there is an event and something happens to one firewall, then you have the second firewall to roll into. For the price, it's pretty to tough to beat and not a lot of other firewall vendors offer it. You battle for a discount on both. Where with SonicWall, if you buy one, the second one is at half price. It's pretty straightforward."
"It's thirty dollars per user and we have 30 users."
"We get our value for our money."
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
787,817 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
23%
Computer Software Company
13%
Government
8%
Financial Services Firm
7%
Real Estate/Law Firm
18%
Financial Services Firm
13%
Computer Software Company
10%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...
Which offers better endpoint security - Symantec or Microsoft Defender?
We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
Ask a question
Earn 20 points
 

Also Known As

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus
No data available
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Petrofrac, Metro CSG, Christus Health
Wonder Cement, Foster Clark Products
Find out what your peers are saying about Microsoft Defender for Endpoint vs. SonicWall Capture Advanced Threat Protection and other solutions. Updated: May 2024.
787,817 professionals have used our research since 2012.