No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Entra ID Protection vs NetMon comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID Protection
Ranking in Identity Threat Detection and Response (ITDR)
2nd
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
22
Ranking in other categories
Identity Management (IM) (9th), Microsoft Security Suite (10th)
NetMon
Ranking in Identity Threat Detection and Response (ITDR)
12th
Average Rating
7.6
Reviews Sentiment
6.1
Number of Reviews
12
Ranking in other categories
Network Monitoring Software (48th)
 

Mindshare comparison

As of October 2026, in the Identity Threat Detection and Response (ITDR) category, the mindshare of Microsoft Entra ID Protection is 5.9%, down from 16.0% compared to the previous year. The mindshare of NetMon is 2.3%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Identity Threat Detection and Response (ITDR) Mindshare Distribution
ProductMindshare (%)
Microsoft Entra ID Protection5.9%
NetMon2.3%
Other91.8%
Identity Threat Detection and Response (ITDR)
 

Featured Reviews

MohammedTalukdar1 - PeerSpot reviewer
Enterprise Security Architect at PRS for Music
Identity protection has unified access control and delivers faster, risk-based threat response
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive. Occasionally, when we are trying to do something different in terms of integrating into a new vendor or platform, especially with some of the new SaaS platforms, there are not many out-of-the-box solutions available, so we have to build custom solutions.
SR
Pan India IT Infrastructure Management / End-user Services at Tata Group
Has supported real-time event detection and reporting accuracy while database integration has required extra effort
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to integrate NetMon with other databases. We can customize NetMon's monitoring views, but it is done by the team who handles it, as it is outsourced.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The multifactor authentication feature is effective, providing an additional layer of security."
"The reverse proxy feature provides additional security that is not available in other solutions such as SailPoint and Dell."
"I use conditional access most of the time."
"The most valuable features are the API apps, which I use to connect to my cloud Protection."
"I find the most valuable feature to be conditional access. It allows for comprehensive security controls, network security, and application label security."
"The value is significantly beneficial."
"The valuable features include multifactor authentication, accessory capabilities, and conditional access for specific applications."
"The valuable features of Entra ID Protection include providing me visibility of my entire estate, managing access, and having a level of control."
"We were sold on the product based on the fairly narrow use cases that the sales reps gave us, and what we're seeing during our usage is that we can get there, and we're very excited about the potential."
"In general, this is a good product."
"It has a very strong artificial intelligence engine."
"The analytics feature is the most valuable feature."
"It is a stable solution...It is a scalable solution."
"The most valuable feature is the log, which can be analyzed by our SIEM solution."
"The initial setup is straightforward because we can deploy an open server."
"LogRhythm NetMon's most impressive feature is that it's a bundled package, so you're not just relying on monthly data; you get a six-month view for more comprehensive indicators of compromise. This dual approach is precious. We implement LogRhythm NetMon in our cybersecurity strategy mainly for compliance and correlation of network, user, and decision activities, particularly for network firewalls and access control."
 

Cons

"The platform's pricing and scalability need improvement."
"The recent CrowdStrike issue affected most systems."
"Support or customer service with Microsoft Entra ID Protection can be challenging because you can get lost in the queue. You can open up a case, but sometimes it can be an hour or even a day between communications."
"The solution is not optimized to work with Mac devices on a granular level. They work seamlessly with Windows but have a lot to improve to work with Mac devices. It also needs to improve stability and scalability."
"The product's initial setup phase is not easy."
"The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use."
"Microsoft has not offered control over how they calculate high or low-risk scenarios. While they mention if a low risk is found by Microsoft, the triggered policy isn't customizable."
"There is room for improvement in the ability for Entra ID Protection to inherit roles and configurations from whatever solution I am migrating from, so that these don't have to be built from the ground up during the implementation process."
"The training for this product is not very good and needs to be improved."
"LogRhythm's support team isn't responsive enough - it's common to wait a day or two for someone to deal with a case."
"LogRhythm NetMon's pricing model is an area of concern that should be made a little bit cheaper in comparison to the other players in the market currently."
"Their technical support isn't so great."
"I would like to see better integration with multiple products. Integration is not something that is readily available for most of the products."
"One thing that surprised me was the current version of LogRhythm does not natively support Windows 2016."
"Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."
"Our customers would always like to see additional features."
 

Pricing and Cost Advice

"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."
"The pricing is competitive in the SMA segment and runs $5-$6 per user."
"The price of Azure AD is not expensive."
"The product cost is on the expensive side."
"Azure Active Directory Identity Protection is not very expensive."
"The price of this solution is too high, so it should be made more practical and more valuable for the customer."
"NetMon's licensing costs about $85k per year, with some extra costs for support."
"Pricing is okay. There were some competitors that were extremely expensive and there were some which were really inexpensive but LogRhythm stayed in the middle of them."
"LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."
"I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
"The product is expensive for smaller companies."
report
Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Manufacturing Company
10%
Outsourcing Company
9%
Construction Company
8%
Construction Company
11%
Transportation Company
11%
Comms Service Provider
11%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise2
Large Enterprise5
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive.
What needs improvement with Azure Active Directory Identity Protection?
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. T...
What is your primary use case for Azure Active Directory Identity Protection?
I primarily use Microsoft Entra ID Protection as an Identity and Access Management platform. The primary use case for Microsoft Entra ID Protection is Identity Management, although there are numero...
What needs improvement with LogRhythm NetMon?
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to i...
What is your primary use case for LogRhythm NetMon?
We have outsourced our SIEM solutions at the moment, and we are using it.We have been using LogRhythm in our organization as a SaaS offering. We have outsourced it as part of the actual scope where...
What advice do you have for others considering LogRhythm NetMon?
We use AWS as our cloud provider in a private cloud environment.It completely depends upon when incidents happen. To find the root cause analysis, we need to first gather the logs from the team. It...
 

Also Known As

Azure Active Directory Identity Protection, Azure AD Identity Protection
LogRhythm Network Monitor
 

Overview

 

Sample Customers

Information Not Available
Sera-Brynn
Find out what your peers are saying about Microsoft Entra ID Protection vs. NetMon and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.