No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Entra ID Protection vs NetMon comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID Protection
Ranking in Identity Threat Detection and Response (ITDR)
2nd
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
22
Ranking in other categories
Identity Management (IM) (7th), Microsoft Security Suite (10th)
NetMon
Ranking in Identity Threat Detection and Response (ITDR)
12th
Average Rating
7.6
Reviews Sentiment
6.1
Number of Reviews
12
Ranking in other categories
Network Monitoring Software (50th)
 

Mindshare comparison

As of September 2026, in the Identity Threat Detection and Response (ITDR) category, the mindshare of Microsoft Entra ID Protection is 5.8%, down from 17.0% compared to the previous year. The mindshare of NetMon is 2.2%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Identity Threat Detection and Response (ITDR) Mindshare Distribution
ProductMindshare (%)
Microsoft Entra ID Protection5.8%
NetMon2.2%
Other92.0%
Identity Threat Detection and Response (ITDR)
 

Featured Reviews

MohammedTalukdar1 - PeerSpot reviewer
Enterprise Security Architect at PRS for Music
Identity protection has unified access control and delivers faster, risk-based threat response
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive. Occasionally, when we are trying to do something different in terms of integrating into a new vendor or platform, especially with some of the new SaaS platforms, there are not many out-of-the-box solutions available, so we have to build custom solutions.
SR
Pan India IT Infrastructure Management / End-user Services at Tata Group
Has supported real-time event detection and reporting accuracy while database integration has required extra effort
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to integrate NetMon with other databases. We can customize NetMon's monitoring views, but it is done by the team who handles it, as it is outsourced.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution helps us with authentication."
"The deployment process is straightforward. It takes a few hours to complete."
"Microsoft's support is commendable. Their response time is quick, and they handle inquiries effectively, ensuring ongoing support processes."
"We can solve many problems without deep knowledge of coding, and it's very quick to solve problems with the no-code, low-code solution of Microsoft for us."
"The multifactor authentication feature is effective, providing an additional layer of security."
"The reverse proxy feature provides additional security that is not available in other solutions such as SailPoint and Dell."
"The features we find most effective for identity security include access reviews, two-factor authentication, and modification."
"The valuable features include multifactor authentication, accessory capabilities, and conditional access for specific applications."
"But just having it there, it's incredibly smart, incredibly easy to use, and the breadth of information we get off it is really good for investigations for us."
"LogRhythm NetMon's most impressive feature is that it's a bundled package, so you're not just relying on monthly data; you get a six-month view for more comprehensive indicators of compromise. This dual approach is precious. We implement LogRhythm NetMon in our cybersecurity strategy mainly for compliance and correlation of network, user, and decision activities, particularly for network firewalls and access control."
"We were sold on the product based on the fairly narrow use cases that the sales reps gave us, and what we're seeing during our usage is that we can get there, and we're very excited about the potential."
"The protocols with which you see the traffic for a particular website that a client has in their environment, for example, are valuable. We can monitor whether the traffic is up to the mark or whether they need to add more bandwidth. Also, we can see if we're able to get real-time environment data as well. The customization dashboard is really good. LogRhythm NetMon has its own in-built dashboards which are helpful in guiding customization."
"It has a very strong artificial intelligence engine."
"The initial setup is straightforward because we can deploy an open server."
"NetMon's best feature is traffic analysis."
"The most valuable feature is the log, which can be analyzed by our SIEM solution."
 

Cons

"The product's initial setup phase is not easy."
"Integrating some notifications, not necessarily all, but at least for important events or alerts, would be beneficial as it would function as a team solution or something similar."
"Support or customer service with Microsoft Entra ID Protection can be challenging because you can get lost in the queue. You can open up a case, but sometimes it can be an hour or even a day between communications."
"The solution's sync should be faster since it can take about 30 minutes to two hours to complete a simple sync. The tool needs to sync instantly. It also needs to improve scalability, support, and stability."
"Identity protection and trust issues, particularly in hybrid environments, could be addressed better with Microsoft Entra ID Protection. This would aid connectivity concerns."
"Entra ID lacks a function to synchronize from the cloud to the local directory. This is a significant issue since there is no write-back feature from the cloud to local, which would allow me to use my own credentials from the cloud tenant securely."
"The experience is not very smooth for the user. This is an area where Microsoft could improve the authorization process."
"The recent CrowdStrike issue affected most systems."
"The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management."
"Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."
"Their technical support isn't so great."
"I would like to see better integration with multiple products. Integration is not something that is readily available for most of the products."
"Could use a topology diagram which would help get an exact visual."
"The platform's integration features often need to be improved."
"One thing that surprised me was the current version of LogRhythm does not natively support Windows 2016."
"Previously, it was typically every Monday that I was coming in - it would die over the weekend - and I would spend a day cleaning up databases."
 

Pricing and Cost Advice

"The pricing is competitive in the SMA segment and runs $5-$6 per user."
"The price of Azure AD is not expensive."
"The product cost is on the expensive side."
"Azure Active Directory Identity Protection is not very expensive."
"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."
"The price of this solution is too high, so it should be made more practical and more valuable for the customer."
"I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
"NetMon's licensing costs about $85k per year, with some extra costs for support."
"Pricing is okay. There were some competitors that were extremely expensive and there were some which were really inexpensive but LogRhythm stayed in the middle of them."
"LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."
"The product is expensive for smaller companies."
report
Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.
913,806 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
10%
Outsourcing Company
8%
Construction Company
8%
Construction Company
12%
Transportation Company
12%
Comms Service Provider
11%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise2
Large Enterprise5
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive.
What needs improvement with Azure Active Directory Identity Protection?
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. T...
What is your primary use case for Azure Active Directory Identity Protection?
I primarily use Microsoft Entra ID Protection as an Identity and Access Management platform. The primary use case for Microsoft Entra ID Protection is Identity Management, although there are numero...
What needs improvement with LogRhythm NetMon?
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to i...
What is your primary use case for LogRhythm NetMon?
We have outsourced our SIEM solutions at the moment, and we are using it.We have been using LogRhythm in our organization as a SaaS offering. We have outsourced it as part of the actual scope where...
What advice do you have for others considering LogRhythm NetMon?
We use AWS as our cloud provider in a private cloud environment.It completely depends upon when incidents happen. To find the root cause analysis, we need to first gather the logs from the team. It...
 

Also Known As

Azure Active Directory Identity Protection, Azure AD Identity Protection
LogRhythm Network Monitor
 

Overview

 

Sample Customers

Information Not Available
Sera-Brynn
Find out what your peers are saying about Microsoft Entra ID Protection vs. NetMon and other solutions. Updated: August 2026.
913,806 professionals have used our research since 2012.