Try our new research platform with insights from 80,000+ expert users

Microsoft Entra ID Protection vs NetMon comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID Protection
Ranking in Identity Threat Detection and Response (ITDR)
1st
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
17
Ranking in other categories
Identity Management (IM) (6th), Microsoft Security Suite (9th)
NetMon
Ranking in Identity Threat Detection and Response (ITDR)
14th
Average Rating
7.6
Reviews Sentiment
7.7
Number of Reviews
11
Ranking in other categories
Network Monitoring Software (58th)
 

Mindshare comparison

As of August 2025, in the Identity Threat Detection and Response (ITDR) category, the mindshare of Microsoft Entra ID Protection is 13.0%, down from 27.8% compared to the previous year. The mindshare of NetMon is 0.0%. It is calculated based on PeerSpot user engagement data.
Identity Threat Detection and Response (ITDR)
 

Featured Reviews

Mahender Nirwan - PeerSpot reviewer
Access to other software is just one click away and suitable for big organizations
Currently, we have limited use of Microsoft AD. We only use it to see if user blocks are available. If they are, we unblock the account and get access accordingly. AD has paid access control features. We can add access control over AD. For example, for documentation, we use an Outline tool. It's open source, and we add our company's knowledge base to it. It's an alternative to Confluence. We don't want everyone to have access to all documentation. If I create documentation for my team, only my team should have access, not support or sales. We can add these scopes or access controls over AD. Once integrated, the person will get the appropriate access control features upon logging in. Role-based access control is a great feature of Active Directory.
AshishDubey - PeerSpot reviewer
A stable and scalable tool useful for network behavior analysis, DPA, and network forensic services
I have not worked much on LogRhythm NetMon to be able to comment on what needs improvement in the product since there is another team in our company that is working on the solution presently. LogRhythm NetMon's pricing model is an area of concern that should be made a little bit cheaper in comparison to the other players in the market currently. With players like IBM QRadar that propose QNI or Darktrace in the market, LogRhythm NetMon needs to consider a reduction in its pricing model.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The valuable features of Entra ID Protection include providing me visibility of my entire estate, managing access, and having a level of control."
"The valuable features include multifactor authentication, accessory capabilities, and conditional access for specific applications."
"These features ease the job of security analysts, providing a better vision of user activities and potential risks."
"The deployment process is straightforward. It takes a few hours to complete."
"I find the most valuable feature to be conditional access."
"The features we find most effective for identity security include access reviews, two-factor authentication, and modification."
"For me, automatization is most valuable."
"As an end-user, I find the experience to be quite seamless. My main advantage is that I only need to manage one login and one two-factor authentication method to access all the necessary tools. I don't have to set up separate logins and authentication for each application."
"The initial setup is straightforward because we can deploy an open server."
"It has a very strong artificial intelligence engine."
"LogRhythm NetMon's most impressive feature is that it's a bundled package, so you're not just relying on monthly data; you get a six-month view for more comprehensive indicators of compromise. This dual approach is precious. We implement LogRhythm NetMon in our cybersecurity strategy mainly for compliance and correlation of network, user, and decision activities, particularly for network firewalls and access control."
"The most valuable feature is the log, which can be analyzed by our SIEM solution."
"The protocols with which you see the traffic for a particular website that a client has in their environment, for example, are valuable. We can monitor whether the traffic is up to the mark or whether they need to add more bandwidth. Also, we can see if we're able to get real-time environment data as well. The customization dashboard is really good. LogRhythm NetMon has its own in-built dashboards which are helpful in guiding customization."
"NetMon's best feature is traffic analysis."
"Visibility is a valuable feature, the ability to see even if the traffic is not going into the firewall"
"The analytics feature is the most valuable feature."
 

Cons

"Integrating some notifications, not necessarily all, but at least for important events or alerts, would be beneficial as it would function as a team solution or something similar."
"There is room for improvement in the ability for Entra ID Protection to inherit roles and configurations from whatever solution I am migrating from, so that these don't have to be built from the ground up during the implementation process."
"The solution's sync should be faster since it can take about 30 minutes to two hours to complete a simple sync. The tool needs to sync instantly. It also needs to improve scalability, support, and stability."
"Entra ID lacks a function to synchronize from the cloud to the local directory. This is a significant issue since there is no write-back feature from the cloud to local, which would allow me to use my own credentials from the cloud tenant securely."
"The solution is not optimized to work with Mac devices on a granular level. They work seamlessly with Windows but have a lot to improve to work with Mac devices. It also needs to improve stability and scalability."
"Entra ID lacks a function to synchronize from the cloud to the local directory. This is a significant issue since there is no write-back feature from the cloud to local, which would allow me to use my own credentials from the cloud tenant securely."
"Microsoft has not offered control over how they calculate high or low-risk scenarios. While they mention if a low risk is found by Microsoft, the triggered policy isn't customizable."
"I did have some trouble finding specific documentation, particularly for troubleshooting."
"There is an issue with tunneling in relation to how the connectivity is established between the end devices and where NetMon is installed. On the console, I often observe that there's a difference of a few seconds or maybe a minute, and this lag time should not be there."
"The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management."
"Could use a topology diagram which would help get an exact visual."
"Sometimes it's hard to find the network devices' self-audit logs."
"The training for this product is not very good and needs to be improved."
"I would like to see better integration with multiple products. Integration is not something that is readily available for most of the products."
"Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."
"The platform's integration features often need to be improved."
 

Pricing and Cost Advice

"The price of Azure AD is not expensive."
"Azure Active Directory Identity Protection is not very expensive."
"The product cost is on the expensive side."
"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."
"The pricing is competitive in the SMA segment and runs $5-$6 per user."
"NetMon's licensing costs about $85k per year, with some extra costs for support."
"I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
"The product is expensive for smaller companies."
"LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."
"The price of this solution is too high, so it should be made more practical and more valuable for the customer."
"Pricing is okay. There were some competitors that were extremely expensive and there were some which were really inexpensive but LogRhythm stayed in the middle of them."
report
Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.
865,384 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
13%
Manufacturing Company
9%
Government
9%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The pricing for Microsoft Entra ID protection is not expensive. It varies based on the company's size and quality.
What needs improvement with Azure Active Directory Identity Protection?
Protection with Microsoft Entra ID Protection could always improve, receiving a 9 out of 10 in effectiveness currently. Identity protection and trust issues, particularly in hybrid environments, co...
What do you like most about LogRhythm NetMon?
It has a very strong artificial intelligence engine.
What is your experience regarding pricing and costs for LogRhythm NetMon?
I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships.
What needs improvement with LogRhythm NetMon?
The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for ea...
 

Also Known As

Azure Active Directory Identity Protection, Azure AD Identity Protection
LogRhythm Network Monitor
 

Overview

 

Sample Customers

Information Not Available
Sera-Brynn
Find out what your peers are saying about Microsoft Entra ID Protection vs. NetMon and other solutions. Updated: July 2025.
865,384 professionals have used our research since 2012.