No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Entra ID Protection vs NetMon comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID Protection
Ranking in Identity Threat Detection and Response (ITDR)
3rd
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
22
Ranking in other categories
Identity Management (IM) (11th), Microsoft Security Suite (15th)
NetMon
Ranking in Identity Threat Detection and Response (ITDR)
12th
Average Rating
7.6
Reviews Sentiment
6.1
Number of Reviews
12
Ranking in other categories
Network Monitoring Software (45th)
 

Mindshare comparison

As of November 2026, in the Identity Threat Detection and Response (ITDR) category, the mindshare of Microsoft Entra ID Protection is 5.9%, down from 14.1% compared to the previous year. The mindshare of NetMon is 2.4%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Identity Threat Detection and Response (ITDR) Mindshare Distribution
ProductMindshare (%)
Microsoft Entra ID Protection5.9%
NetMon2.4%
Other91.7%
Identity Threat Detection and Response (ITDR)
 

Featured Reviews

MohammedTalukdar1 - PeerSpot reviewer
Enterprise Security Architect at PRS for Music
Identity protection has unified access control and delivers faster, risk-based threat response
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive. Occasionally, when we are trying to do something different in terms of integrating into a new vendor or platform, especially with some of the new SaaS platforms, there are not many out-of-the-box solutions available, so we have to build custom solutions.
SR
Pan India IT Infrastructure Management / End-user Services at Tata Group
Has supported real-time event detection and reporting accuracy while database integration has required extra effort
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to integrate NetMon with other databases. We can customize NetMon's monitoring views, but it is done by the team who handles it, as it is outsourced.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Microsoft's support is commendable. Their response time is quick, and they handle inquiries effectively, ensuring ongoing support processes."
"I find the most valuable feature to be conditional access. It allows for comprehensive security controls, network security, and application label security."
"We've integrated our other software with Microsoft, and we log into other software using Microsoft. That's very helpful."
"Microsoft Entra ID Protection's features are suitable for all sizes of companies; it's a must-have product because traditionally Active Directory was used for identity and authentication on computers, and now with hybrid capabilities, every company of any size needs these features and tools."
"The valuable features include multifactor authentication, accessory capabilities, and conditional access for specific applications."
"Microsoft Entra ID Protection is a great solution overall because it improves security in the company through identity management."
"I recommend this product overall."
"The solution helps us with authentication."
"The protocols with which you see the traffic for a particular website that a client has in their environment, for example, are valuable. We can monitor whether the traffic is up to the mark or whether they need to add more bandwidth. Also, we can see if we're able to get real-time environment data as well. The customization dashboard is really good. LogRhythm NetMon has its own in-built dashboards which are helpful in guiding customization."
"LogRhythm NetMon's most impressive feature is that it's a bundled package, so you're not just relying on monthly data; you get a six-month view for more comprehensive indicators of compromise. This dual approach is precious. We implement LogRhythm NetMon in our cybersecurity strategy mainly for compliance and correlation of network, user, and decision activities, particularly for network firewalls and access control."
"Visibility is a valuable feature, the ability to see even if the traffic is not going into the firewall"
"The initial setup is straightforward because we can deploy an open server."
"Compared to many other products in the market, I think LogRhythm has the highest cost to performance ratio in terms of its value."
"The analytics feature is the most valuable feature."
"It is a stable solution...It is a scalable solution."
"NetMon's best feature is traffic analysis."
 

Cons

"A potential area of improvement in Microsoft Entra ID Protection could include backup-level capability or snapshot capability."
"There is room for improvement in the ability for Entra ID Protection to inherit roles and configurations from whatever solution I am migrating from, so that these don't have to be built from the ground up during the implementation process."
"The solution is not optimized to work with Mac devices on a granular level. They work seamlessly with Windows but have a lot to improve to work with Mac devices. It also needs to improve stability and scalability."
"The pricing could be improved."
"Entra ID lacks a function to synchronize from the cloud to the local directory. This is a significant issue since there is no write-back feature from the cloud to local, which would allow me to use my own credentials from the cloud tenant securely."
"The product's initial setup phase is not easy."
"Azure AD could improve by enhancing the availability of specialized courses for security, such as NETSCOUT security or other relevant certifications. It would be beneficial to have specific courses for security, to provide in-depth knowledge and skills related to Azure AD. While there are micro-learning resources available for various concepts, many people in the IT industry may not have the time to go through all the courses to properly configure and utilize Azure Active Directory. Simplifying the implementation process and making it easier for individuals to join a company with Azure AD could also be considered areas for improvement."
"The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use."
"Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."
"One thing that surprised me was the current version of LogRhythm does not natively support Windows 2016."
"Could use a topology diagram which would help get an exact visual."
"Our customers would always like to see additional features."
"There is an issue with tunneling in relation to how the connectivity is established between the end devices and where NetMon is installed. On the console, I often observe that there's a difference of a few seconds or maybe a minute, and this lag time should not be there."
"LogRhythm NetMon's pricing model is an area of concern that should be made a little bit cheaper in comparison to the other players in the market currently."
"Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time."
"Sometimes it's hard to find the network devices' self-audit logs."
 

Pricing and Cost Advice

"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."
"The price of Azure AD is not expensive."
"Azure Active Directory Identity Protection is not very expensive."
"The pricing is competitive in the SMA segment and runs $5-$6 per user."
"The product cost is on the expensive side."
"I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
"LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."
"NetMon's licensing costs about $85k per year, with some extra costs for support."
"Pricing is okay. There were some competitors that were extremely expensive and there were some which were really inexpensive but LogRhythm stayed in the middle of them."
"The product is expensive for smaller companies."
"The price of this solution is too high, so it should be made more practical and more valuable for the customer."
report
Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
12%
Financial Services Firm
12%
Outsourcing Company
10%
Construction Company
8%
Financial Services Firm
12%
Construction Company
10%
Transportation Company
10%
Comms Service Provider
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise2
Large Enterprise5
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
The cost could always be lower; at the moment, I would say it is reasonable, but to get the full suite, you need to go for at least an E5 license, which can be very expensive.
What needs improvement with Azure Active Directory Identity Protection?
The licensing for Microsoft Entra ID Protection is somewhat complex depending on whether you have an E5 or E3 licensing model, so improving the licensing models would make it a lot easier to use. T...
What is your primary use case for Azure Active Directory Identity Protection?
I primarily use Microsoft Entra ID Protection as an Identity and Access Management platform. The primary use case for Microsoft Entra ID Protection is Identity Management, although there are numero...
What needs improvement with LogRhythm NetMon?
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to i...
What is your primary use case for LogRhythm NetMon?
We have outsourced our SIEM solutions at the moment, and we are using it.We have been using LogRhythm in our organization as a SaaS offering. We have outsourced it as part of the actual scope where...
What advice do you have for others considering LogRhythm NetMon?
We use AWS as our cloud provider in a private cloud environment.It completely depends upon when incidents happen. To find the root cause analysis, we need to first gather the logs from the team. It...
 

Also Known As

Azure Active Directory Identity Protection, Azure AD Identity Protection
LogRhythm Network Monitor
 

Overview

 

Sample Customers

Information Not Available
Sera-Brynn
Find out what your peers are saying about Microsoft Entra ID Protection vs. NetMon and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.