Do we need to Defender for Identity if I am using Microsoft Entra ID

N-Open 160 Reputation points
2023-11-29T17:19:23.1633333+00:00

Dear Team,

Hope you are doing well. We need your support in product selection from Microsoft.

I have recently taken up a new position as old person has left the company.

we are using Microsoft Entra ID with 500 users and we use office 365.

I currently see exchange online protection when i look at at the

Entra ID details as shown in the attached file.

I see Exchange online (Plan 1) - Does it mean Exchange online protection which comes free with subscription??

What products do you recommend to provide end to end protection for user from cyber attacks

  1. for office 365 by protecting from downloading bad attachments
  2. protect Entra ID
  3. and if they click by mistake a URL how do we protect them

Please guide.

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
175 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,353 questions
0 comments
Accepted answer
  1. Givary-MSFT 30,251 Reputation points Microsoft Employee
    2023-11-30T03:22:44.68+00:00

    @N-Open Thank you for reaching out to us, As I understand you are looking for details on which product should be used to provide end to end protection for user from cyber attacks, currently you have Exchange online (Plan 1).

    The core of Office 365 security is EOP protection. Microsoft Defender for Office 365 P1 contains EOP in it. Defender for Office 365 P2 contains P1 and EOP.

    Reference: https://video2.skills-academy.com/en-us/office365/servicedescriptions/office-365-advanced-threat-protection-service-description

    https://video2.skills-academy.com/en-us/answers/questions/649097/eop-and-defender

    https://www.youtube.com/watch?v=FFRgZiVKmug

    Also, when you access https://security.microsoft.com (Policies & rules - Threat policies)

    To answer your below queries, What products do you recommend to provide end to end protection for user from cyber attacks

    1. for office 365 by protecting from downloading bad attachments
    2. if they click by mistake a URL how do we protect them

    To protect against downloading bad attachments, you can use the Safe Attachments feature in Microsoft Defender for Office 365. Safe Attachments provides protection against unknown and zero-day malware in email attachments and files in SharePoint, OneDrive, and Microsoft Teams.

    To protect against users clicking on malicious URLs, you can use the Safe Links feature in Microsoft Defender for Office 365. Safe Links provides protection against malicious links in email messages, Office documents, and other locations, such as Microsoft Teams.

    Regarding Protect Entra ID, could you elaborate more on this, so that I can guide you on what product/license is needed to add protection to your environment.

    Let me know if you have any further questions, feel free to post back.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest