No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Entra ID Protection vs NetMon comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID Protection
Ranking in Identity Threat Detection and Response (ITDR)
3rd
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
22
Ranking in other categories
Identity Management (IM) (7th), Microsoft Security Suite (11th)
NetMon
Ranking in Identity Threat Detection and Response (ITDR)
15th
Average Rating
7.6
Reviews Sentiment
6.1
Number of Reviews
12
Ranking in other categories
Network Monitoring Software (50th)
 

Mindshare comparison

As of August 2026, in the Identity Threat Detection and Response (ITDR) category, the mindshare of Microsoft Entra ID Protection is 4.9%, down from 13.3% compared to the previous year. The mindshare of NetMon is 2.1%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Identity Threat Detection and Response (ITDR) Mindshare Distribution
ProductMindshare (%)
Microsoft Entra ID Protection4.9%
NetMon2.1%
Other93.0%
Identity Threat Detection and Response (ITDR)
 

Featured Reviews

MohammedTalukdar1 - PeerSpot reviewer
Enterprise Security Architect at PRS for Music
Identity protection has unified access control and delivers faster, risk-based threat response
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive. Occasionally, when we are trying to do something different in terms of integrating into a new vendor or platform, especially with some of the new SaaS platforms, there are not many out-of-the-box solutions available, so we have to build custom solutions.
SR
Pan India IT Infrastructure Management / End-user Services at Tata Group
Has supported real-time event detection and reporting accuracy while database integration has required extra effort
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to integrate NetMon with other databases. We can customize NetMon's monitoring views, but it is done by the team who handles it, as it is outsourced.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"As an end-user, I find the experience to be quite seamless. My main advantage is that I only need to manage one login and one two-factor authentication method to access all the necessary tools. I don't have to set up separate logins and authentication for each application."
"The most valuable features are the API apps, which I use to connect to my cloud Protection."
"For me, automatization is most valuable."
"Microsoft Entra ID Protection's features are suitable for all sizes of companies; it's a must-have product because traditionally Active Directory was used for identity and authentication on computers, and now with hybrid capabilities, every company of any size needs these features and tools."
"I use conditional access most of the time."
"We've integrated our other software with Microsoft, and we log into other software using Microsoft. That's very helpful."
"The multifactor authentication feature is effective, providing an additional layer of security."
"The features we find most effective for identity security include access reviews, two-factor authentication, and modification."
"Compared to many other products in the market, I think LogRhythm has the highest cost to performance ratio in terms of its value."
"It is a stable solution...It is a scalable solution."
"LogRhythm NetMon's most impressive feature is that it's a bundled package, so you're not just relying on monthly data; you get a six-month view for more comprehensive indicators of compromise. This dual approach is precious. We implement LogRhythm NetMon in our cybersecurity strategy mainly for compliance and correlation of network, user, and decision activities, particularly for network firewalls and access control."
"The initial setup is straightforward because we can deploy an open server."
"The analytics feature is the most valuable feature."
"The most valuable feature is the log, which can be analyzed by our SIEM solution."
"Visibility is a valuable feature, the ability to see even if the traffic is not going into the firewall"
"In general, this is a good product."
 

Cons

"The platform's pricing and scalability need improvement."
"Microsoft has not offered control over how they calculate high or low-risk scenarios. While they mention if a low risk is found by Microsoft, the triggered policy isn't customizable."
"Integrating some notifications, not necessarily all, but at least for important events or alerts, would be beneficial as it would function as a team solution or something similar."
"Entra ID lacks a function to synchronize from the cloud to the local directory. This is a significant issue since there is no write-back feature from the cloud to local, which would allow me to use my own credentials from the cloud tenant securely."
"Microsoft has room for improvement in simplifying their integration with third-party solutions and making the licensing model more understandable."
"I did have some trouble finding specific documentation, particularly for troubleshooting."
"The experience is not very smooth for the user. This is an area where Microsoft could improve the authorization process."
"The recent CrowdStrike issue affected most systems."
"Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."
"The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management."
"Our customers would always like to see additional features."
"I would like to see better integration with multiple products. Integration is not something that is readily available for most of the products."
"Sometimes it's hard to find the network devices' self-audit logs."
"Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time."
"Could use a topology diagram which would help get an exact visual."
"One thing that surprised me was the current version of LogRhythm does not natively support Windows 2016."
 

Pricing and Cost Advice

"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."
"The price of Azure AD is not expensive."
"The product cost is on the expensive side."
"Azure Active Directory Identity Protection is not very expensive."
"The pricing is competitive in the SMA segment and runs $5-$6 per user."
"I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
"NetMon's licensing costs about $85k per year, with some extra costs for support."
"The price of this solution is too high, so it should be made more practical and more valuable for the customer."
"Pricing is okay. There were some competitors that were extremely expensive and there were some which were really inexpensive but LogRhythm stayed in the middle of them."
"The product is expensive for smaller companies."
"LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."
report
Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
9%
Computer Software Company
9%
Construction Company
8%
Construction Company
13%
Transportation Company
13%
Financial Services Firm
11%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise2
Large Enterprise5
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive.
What needs improvement with Azure Active Directory Identity Protection?
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. T...
What is your primary use case for Azure Active Directory Identity Protection?
I primarily use Microsoft Entra ID Protection as an Identity and Access Management platform. The primary use case for Microsoft Entra ID Protection is Identity Management, although there are numero...
What needs improvement with LogRhythm NetMon?
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to i...
What is your primary use case for LogRhythm NetMon?
We have outsourced our SIEM solutions at the moment, and we are using it.We have been using LogRhythm in our organization as a SaaS offering. We have outsourced it as part of the actual scope where...
What advice do you have for others considering LogRhythm NetMon?
We use AWS as our cloud provider in a private cloud environment.It completely depends upon when incidents happen. To find the root cause analysis, we need to first gather the logs from the team. It...
 

Also Known As

Azure Active Directory Identity Protection, Azure AD Identity Protection
LogRhythm Network Monitor
 

Overview

 

Sample Customers

Information Not Available
Sera-Brynn
Find out what your peers are saying about Microsoft Entra ID Protection vs. NetMon and other solutions. Updated: June 2026.
909,725 professionals have used our research since 2012.