Try our new research platform with insights from 80,000+ expert users

Microsoft Entra ID Protection vs NetMon comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID Protection
Ranking in Identity Threat Detection and Response (ITDR)
2nd
Average Rating
8.8
Reviews Sentiment
6.8
Number of Reviews
21
Ranking in other categories
Identity Management (IM) (8th), Microsoft Security Suite (9th)
NetMon
Ranking in Identity Threat Detection and Response (ITDR)
16th
Average Rating
7.6
Reviews Sentiment
6.1
Number of Reviews
12
Ranking in other categories
Network Monitoring Software (51st)
 

Mindshare comparison

As of January 2026, in the Identity Threat Detection and Response (ITDR) category, the mindshare of Microsoft Entra ID Protection is 7.3%, down from 19.8% compared to the previous year. The mindshare of NetMon is 1.0%. It is calculated based on PeerSpot user engagement data.
Identity Threat Detection and Response (ITDR) Market Share Distribution
ProductMarket Share (%)
Microsoft Entra ID Protection7.3%
NetMon1.0%
Other91.7%
Identity Threat Detection and Response (ITDR)
 

Featured Reviews

Luis Gabriel Mieles Benavides - PeerSpot reviewer
Cloud Architect at Sonda S.A.
Identity protection has strengthened daily access control and improved passwordless security
The best features of Microsoft Entra ID Protection include the password dictionary, which we do not have in Active Directory. Conditional access is excellent because we can select the location from which users authenticate, and this is the best feature for me. Another valuable feature is the ability to identify critical or suspicious computers. If computers are too old or too suspicious, the system does not allow authentication, which is excellent. The effectiveness of automated remediation for handling identity threats is great. I use passwordless authentication with cellular phone authentication, which is excellent because we do not always need a password. Microsoft Entra ID Protection is a great solution overall because it improves security in the company through identity management. It improves integration with other solutions such as Google, Gmail, Hotmail, Outlook, and Facebook. We can create different applications and integrate with different services.
SR
Pan India IT Infrastructure Management / End-user Services at Tata Group
Has supported real-time event detection and reporting accuracy while database integration has required extra effort
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to integrate NetMon with other databases. We can customize NetMon's monitoring views, but it is done by the team who handles it, as it is outsourced.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Microsoft Entra ID Protection's features are suitable for all sizes of companies; it's a must-have product because traditionally Active Directory was used for identity and authentication on computers, and now with hybrid capabilities, every company of any size needs these features and tools."
"I find the most valuable feature to be conditional access."
"For me, automatization is most valuable."
"The tool is simple and you can find a lot of tutorials, and videos on YouTube that can help you."
"The reverse proxy feature provides additional security that is not available in other solutions."
"The valuable features of Entra ID Protection include providing me visibility of my entire estate, managing access, and having a level of control."
"The solution helps us with authentication."
"For me, automatization is most valuable."
"The initial setup is straightforward because we can deploy an open server."
"It has a very strong artificial intelligence engine."
"The analytics feature is the most valuable feature."
"Visibility is a valuable feature, the ability to see even if the traffic is not going into the firewall"
"LogRhythm NetMon's most impressive feature is that it's a bundled package, so you're not just relying on monthly data; you get a six-month view for more comprehensive indicators of compromise. This dual approach is precious. We implement LogRhythm NetMon in our cybersecurity strategy mainly for compliance and correlation of network, user, and decision activities, particularly for network firewalls and access control."
"NetMon's best feature is traffic analysis."
"The most valuable feature is the log, which can be analyzed by our SIEM solution."
"It is a stable solution...It is a scalable solution."
 

Cons

"The product's initial setup phase is not easy."
"There is a lot of confusion around the user interface."
"The solution's sync should be faster since it can take about 30 minutes to two hours to complete a simple sync. The tool needs to sync instantly. It also needs to improve scalability, support, and stability."
"I did have some trouble finding specific documentation, particularly for troubleshooting."
"The recent CrowdStrike issue affected most systems."
"Microsoft has room for improvement in simplifying their integration with third-party solutions and making the licensing model more understandable."
"The solution is not optimized to work with Mac devices on a granular level. They work seamlessly with Windows but have a lot to improve to work with Mac devices. It also needs to improve stability and scalability."
"Microsoft has not offered control over how they calculate high or low-risk scenarios."
"The platform's integration features often need to be improved."
"The training for this product is not very good and needs to be improved."
"Sometimes it's hard to find the network devices' self-audit logs."
"LogRhythm NetMon's pricing model is an area of concern that should be made a little bit cheaper in comparison to the other players in the market currently."
"There is an issue with tunneling in relation to how the connectivity is established between the end devices and where NetMon is installed. On the console, I often observe that there's a difference of a few seconds or maybe a minute, and this lag time should not be there."
"The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management."
"Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time."
"Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."
 

Pricing and Cost Advice

"The pricing is competitive in the SMA segment and runs $5-$6 per user."
"Azure Active Directory Identity Protection is not very expensive."
"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."
"The product cost is on the expensive side."
"The price of Azure AD is not expensive."
"The product is expensive for smaller companies."
"NetMon's licensing costs about $85k per year, with some extra costs for support."
"Pricing is okay. There were some competitors that were extremely expensive and there were some which were really inexpensive but LogRhythm stayed in the middle of them."
"The price of this solution is too high, so it should be made more practical and more valuable for the customer."
"LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."
"I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
report
Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.
881,114 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
14%
Manufacturing Company
9%
Government
8%
Transportation Company
19%
Performing Arts
13%
Financial Services Firm
11%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise1
Large Enterprise5
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The pricing for Microsoft Entra ID protection is not expensive. It varies based on the company's size and quality.
What needs improvement with Azure Active Directory Identity Protection?
We explore the possibilities to use Purview to control our applications, though not very deeply as it's not very helpful at this moment.For us, the most important problem is access; we need an easy...
What is your primary use case for Azure Active Directory Identity Protection?
We are still deep involved in the use of Microsoft technology for databases and business intelligence, and in the last three years with Power Apps and Power Automate, all that means Azure services,...
What do you like most about LogRhythm NetMon?
It has a very strong artificial intelligence engine.
What is your experience regarding pricing and costs for LogRhythm NetMon?
I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships.
What needs improvement with LogRhythm NetMon?
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to i...
 

Also Known As

Azure Active Directory Identity Protection, Azure AD Identity Protection
LogRhythm Network Monitor
 

Overview

 

Sample Customers

Information Not Available
Sera-Brynn
Find out what your peers are saying about Microsoft Entra ID Protection vs. NetMon and other solutions. Updated: December 2025.
881,114 professionals have used our research since 2012.