Microsoft states users can protect IoT/OT devices and get visibility into risk with Microsoft Defender for IoT (formerly Azure Defender for IoT), boasting agentless network monitoring for asset discovery, vulnerability management, and continuous threat detection across IoT/OT devices whether they’re unmanaged devices or managed devices provisioned via Azure IoT Hub. Features an integration with Azure Sentinel and third-party solutions. Deploy in either on-premises or Azure-connected…
N/A
SolarWinds Security Event Manager (SEM)
Score 8.0 out of 10
N/A
SolarWinds LEM is security information and event management (SIEM) software.
N/A
Pricing
Microsoft Defender for IoT
SolarWinds Security Event Manager (SEM)
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Microsoft Defender for IoT
SolarWinds Security Event Manager (SEM)
Free Trial
No
Yes
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
—
—
More Pricing Information
Community Pulse
Microsoft Defender for IoT
SolarWinds Security Event Manager (SEM)
Features
Microsoft Defender for IoT
SolarWinds Security Event Manager (SEM)
Security Information and Event Management (SIEM)
Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
Microsoft Defender for IoT
-
Ratings
SolarWinds Security Event Manager (SEM)
8.9
Ratings
14% above category average
Centralized event and log data collection
00 Ratings
9.00 Ratings
Correlation
00 Ratings
8.00 Ratings
Event and log normalization/management
00 Ratings
8.00 Ratings
Deployment flexibility
00 Ratings
10.00 Ratings
Integration with Identity and Access Management Tools
Companies that are not using Azure cloud exhaustively will struggle with maximizing the potential of Microsoft defender as multiple important features require the use of IoT Hub etc The product definitely shines though, when integrated with it's friends, i.e when used collectively within microsoft ecosystem. Paired with Intune and IoT Hub, it does a phenomenal job at providing global protection including automated threat protection and cross domain network security features
Solarwinds SEM is great for generating reports for investigation purposes. Once you set up the connectors you can walk away and the product runs without needing maintenance. It was however pretty difficult to create the reports and alerts when now starting out and it can be very intimidating for new users.
SolarWinds easily provides the much needed visibily into changes in an Active Directory (AD) environment. Email alerting can be configured to alert a team if an account is locked out, disabled by another users, or if users and/or computers accounts are created.
SolarWinds allowed a searchable audit feature. Microsoft Windows can be configured to log many different parts of a system, but search those logs can be difficult. SEM allows you to search for specific users or events.
To use it to it's full potential, multiple Azure services are required including but not limited to Intune, VM etc
Due to a heavy focus on UI rather than Code heavy approach, it sometimes limits itself in terms of features and adds additional complexity when looking for niche network security features.
Major features like Device inventory and alerting are still in preview mode, which of course can hamper an organisation's trust
Compared to other SIEMs, there are features that are missing. Machine learning, automatic event correlation, ability to correlate multiple sources together.
The UI is clunky, and the *New* event log analyzer page felt really disjointed from the rest of the product.
In my experience, the dashboards were almost unusable. They persisted across login per device, and even then they sometimes would reset and go back to the ''Getting Started'' look.
It is pretty likely that we will renew SEM when the time comes up. It is easy to use and maintain so there isn't much of a need to replace this product. It is also a pretty fair price for the capabilities provided by the SEM
It is very good - but you get what you pay for. The intent is not for a Fortune 500 that needs more "heavy lifting" with SolarWinds Security Event Manager & for whom the price tag is not (much of) a consideration.
The quality of support can vary depending on whom you end up speaking with. I was fortunate enough to work with a support representative who was very familiar with the product. He had even authored some of the support documentation on the website. On the flip side, I had two other experiences where I was simply directed to online training material.
The compare well against the others - the pricing models for all but Splunk (free version) are based on EPS/TB consumed... the problem they pose is guesstimating the price tag per month. SolarWinds Security Event Manager gets around that.
It saves a lot of time when we had issues trying to figure out where the user account lockout was coming from.
With it being an affordable SIEM, we are able to have the ability to do the actions associated with a SIEM and the advantages of not “breaking the bank account”.
