Microsoft Defender XDR vs SolarWinds Security Event Manager comparison

"Microsoft 365 Defender is simple to upgrade."

"The best feature is probably the alert generation. When I do a security reset, the other session triggers instantly from the Defender console, and I can work on it. The policies are three times, but they are also ready to install it."

"You can configure the product very easily."

"The integration, visibility, vulnerability management, and device identification are valuable."

"Microsoft XDR's system of analysis and investigation is super convenient for our customers. It integrates with other Microsoft solutions like Defender for 365 to protect email traffic from malicious external web links and phishing."

"Scanning, vulnerability reporting, and the dashboard are the most valuable features."

"It has great stability."

"The incident threat response and its ability to facilitate effective remediation against threats are the standout features."

"The most valuable feature of this solution is the visibility into both attempted and failed logins."

"The product's most effective part in improving security stems from the fact that the solution is deployed for event management, log viewing, and information management."

"It performs network behavior monitoring, log monitoring, and disaster recovery monitoring."

"SolarWinds is easy to configure, and it provides timely alerts."

"It's extremely easy to deploy."

"It has in-depth monitoring capabilities and an easy way for setting up dashboards. I can expand in various areas, or I can reduce areas. It supports different types of breakdowns, filters, and rules. It is very simple for an out-of-the-box type of product. It doesn't take a lot of time to figure it out, which is unlike some of the solutions that I have looked at. It meets all the aspects."

"The solution helps you monitor database instances, application instances, other customer application things, Linux servers, IBM servers, and Oracle servers."

"We did previously use a different solution, but SolarWinds is much better. It's easy to interact with SolarWinds. It's easy to operate, easy to configure and is generally easier compared to what we were working with before."

"My client would like the solution to be more customizable without using code. You can only build on the default console, but we're not allowed to change it."

"The solution can improve the rules and privileges it offers."

"Sometimes, digging into the information and knowing where to go can be difficult. It would be better if much of that information were immediately visible, especially when looking at endpoints or users."

"The onboarding and offboarding need improvement. I work with other vendors as well, and they have an option to add a device or remove a device from the portal, whereas with Microsoft 365 Defender, we need to do that manually. However, once you do that, everything can be controlled through the portal, but getting the device onboarded and offboarded is currently manual. If we have an option to simply remove a device from the portal or get a device added from the portal, it would be more convenient. The rest of the features are similar. This is the only area where I found it different from others. I would also like to be able to simply filter with a few of the queries that are already there."

"There are a few technical issues with Defender XDR that can be improved. Sometimes, the endpoint devices are not reporting properly to the Defender 365 portal. When you're getting all the information from the Microsoft portal, the devices are sometimes not in sync. We have hundreds of endpoint devices, some needing to be onboarded again."

"Microsoft could improve on threat hunting and build more on threat detection and handling. The cybersecurity and cloud security posture features are a bit lesser than standard security products."

"The abundance of sub-dashboards and sub-areas within the main dashboard can be confusing, even if it all technically makes sense."

"Because of the training model, Defender XDR's automatic response sometimes blocks legitimate users and activities. Also, the UI sometimes responds slowly."

"The product should improve the ease with which you can create event alerts. They are not as hard now but you need to have an easier way."

"There is no correlation made between log entries, so no threat information is presented."

"The reporting could be more robust. It can be a lot more granular and that will make it a lot more useful in comparison to how it is incorporated at the moment."

"The company had to use a third party for the implementation of the solution."

"The only issue is the pricetag. SolarWinds is a costly solution."

"It is a very technical program. They can simplify it so that it isn't so hard to deal with."

"One of the drawbacks of being so flexible is that it is also a fairly complicated software application to install, configure, and maintain."

"Under the new system, it is not upgradable the way they say. When you try to do an upgrade, it doesn't really work unless you dump everything and start from scratch. You lose a lot of your nodes. Whenever you set your nodes up and everything else, they don't want to bring those nodes back in, so you have to really go back and restructure all your nodes. I went from version 6.5 to version 6.6 and then to version 6.7. I then went to version 2019, and now it is version 2020. It would be good if we can upgrade without having to delete everything and start from scratch. They can maybe build more KPIs and other things for the dashboard. Some of the other systems already have built-in KPIs. SolarWinds is starting to catch up, but it is not there yet. They can include some of the business or industry standards for tracking the time, that is, the meantime to detect (MTTD) and the meantime to resolve (MTTR). They can also find a way to build a KPI that measures the number of instances of port scans experienced in a week or a month."

"There are no issues with pricing, but sometimes, the clarity in licensing is a concern."

"The product is fairly priced for what we get from it."

"The license cost for a year is approximately forty-four thousand, and this annual saving is a significant factor in our decision to switch."

"We have a lot of problems in Latin America regarding the price of Microsoft 365 Defender, because the relationship between dollars and the money of the different countries, it's is a lot. Many customers that have small businesses say that they would like the solution but it is too expensive. However, large companies do not find the cost an issue."

"It can be complex to navigate since customers have varying licensing agreements across Microsoft. If they go straightforward with E5 for all users, it's simple, but combinations based on budget constraints can complicate things."

"The solutions price is fair for what they offer."

"Microsoft 365 Defender offers competitive pricing."

"Microsoft Defender XDR is priced high."

"Licenses can only be purchased in blocks of fifty at a time."

"The pricing model would benefit from having package deals with other SolarWinds products."

"We do a yearly license renewal. For a year, the solution costs roughly $500,000 USD. There are no costs beyond this yearly fee."

"The price of SolarWinds Security Event Manager is reasonable."

"The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten."

"It is in the appropriate mid-range. It is not as expensive as some of the other solutions. It is also not cheap."

"Licensing is on devices, so if you have many, then this may be high."