Executive SummaryUpdated on Dec 1, 2024
Symantec Advanced Threat Protection and Microsoft Defender Threat Intelligence are key players in the threat protection market. Symantec offers broader external integration capabilities while Microsoft’s solution benefits from seamless integration within its ecosystem.
Features: Symantec Advanced Threat Protection provides robust end-to-end protection with features like real-time threat analysis, email security, and zero-day protection, all enhanced by a vast network that supports comprehensive threat insights. Microsoft Defender Threat Intelligence retains data within the user’s tenant, integrates seamlessly across Microsoft products like Office 365 and Azure, and offers collaborative threat intelligence sharing with extensive global threat insights.
Room for Improvement: Symantec Advanced Threat Protection needs enhancements in customization, improved storage and support for new operating systems, and better alert systems for network-based protections. Microsoft Defender Threat Intelligence could benefit from lower pricing for non-E5 users, improved support efficiency, better handling of false positives, and clearer licensing models.
Ease of Deployment and Customer Service: Symantec Advanced Threat Protection supports flexible deployments across on-premises, public cloud, and hybrid environments but has faced criticism for less reliable customer service post-Broadcom acquisition. Microsoft Defender Threat Intelligence offers similar deployment options with more consistent customer support, largely due to its integration within the Microsoft ecosystem.
Pricing and ROI: Symantec Advanced Threat Protection, while considered expensive by some, offers competitive pricing with flexible licenses and good ROI over time. Microsoft Defender Threat Intelligence, bundled with E5 licensing, provides integrated value for users within the Microsoft ecosystem though licensing costs can be high for SMEs.
