Microsoft Defender for Business EDR to XDR Security Upgrade Using Microsoft 365 Business Premium
Вставка
- Опубліковано 12 лип 2024
- You don't need all these 3rd party IT security systems. I'm going to end the madness for you.
Microsoft Defender for Business EDR is included with Microsoft 365 Business Premium and has nearly all the features of the enterprise-grade Microsoft Defender for Endpoint P2 EDR...the EDR system that Microsoft themselves use for their 180,000+ global employees. And...Microsoft Defender for Business is half the cost of Microsoft Defender for Endpoint P2, and you can get up to 300 licenses of it.
Do you think Microsoft uses Sentinel One or CrowdStrike for an EDR solution? Of course they don't. So why are you using it? The reason you aren't using it is because you don't understand all the different Microsoft 365 security and management services, the licensing, or the license bundles. I'm going to fix this for you in this video.
And...Microsoft Defender for Business is INCLUDED with Microsoft 365 Business Premium. If you combine all the security components included with Microsoft 365 Business Premium: Microsoft Defender for Business EDR, Microsoft Defender for Office 365 P1 (email link protection and attached/uploaded file detonation), Microsoft Intune device/app management and security, and Azure Active Directory Premium Plan 1, you move from EDR (Extended Detection and Response) to a full XDR (Extended Detection and Response) security solution where you have multiple security systems working together in layers. This makes Microsoft 365 Business Premium an incredible value. A value you can take advantage of for up to 300 users before you have to start purchasing Microsoft 365 E5 license. I explain this in depth in the video.
Stop buying the low-end version of Microsoft 365: Business Standard, Business Basic, E3, E1, ect. and cobbling them together with a mishmash of other 3rd party systems. I'm going to get you beyond not knowing what you don't know. We are in this together.👍
Microsoft 365 Security and Management Modernization: www.xerillion.com/microsoft-3...
Xerillion.com
support@xerillion.com
847-995-9800
#microsoft365 #microsoftdefender #microsoftsecurity #crowdstrike #carbonblack #barracuda #huntress #okta #sophos #fortigate
Chapters:
00:00 Endpoint Detection and Response
00:28 Microsoft Defender for Endpoint
00:53 Microsoft Defender for Business
02:30 Defender for Business vs. Defender for Endpoint P2
02:54 Microsoft 365 Business Premium XDR
04:19 Cost and Pricing
06:11 Microsoft 365 E5 XDR
08:02 Included in Microsoft 365 Business Premium
14:50 Hard Number Cost Savings and Value
15:21 Reduced Vendors/Service/Contracts
15:47 Soft Number Savings and Value
16:35 Integration Project Costs - Наука та технологія
This video deserves way more upticks.
If only Microsoft themselves could so clearly and succinctly explain their own products - trying to pull out a coherent narrative from Microsoft is like whack a mole - It's all a confusing, never ending jumble of contradictory links to reference material which often leaves you with a headache and feeling less confident than when you started.
Thanks for this really helpful video Wayne 👍
Smellthecoffe5314, really nice of you to say. And it's funny of you to say too as it is true. A great deal of my time is processing all the information that comes at us as Microsoft cloud partners and filtering it for what I think IT managers really care about. Microsoft's content is focused on their large (1,000 user+) enterprise customers that generate most of Microsoft's revenue. So, that makes sense. in the 30 - 300 user market, that is where they rely on their partners. I would love to be able to point chatGPT at Microsoft content and have it work up scripts...been there..tried that...many times...but there needs to be a real IT manager there to filter out what really matters to IT managers like us. Anyway, really appreciate the comment. 🙂
Microsoft stands to make more money when things are murky, that is how all SaaS subscriptions work. Ignorance can be swayed into just going with the E5 and most everything being underutilized as pointed out in the video.
Better explanation than any MS rep has ever done. Thank you!
Wayne has got a classic style of presenting all thea topics. As always another gem of a video liked it. Expecting to see them more frequently. Thanks a ton man
Great video, informative as usual. I have missed your videos!
Thanks Rob :)
Hi Wayne, another great video. I wish you would upload more often :) You are a great leader. Thanks.
Thanks Adin! And thanks for the vote for more videos. I hope I can get more efficient making useful videos for IT managers in the future. The whole process of making the videos is just brutal. I have to really think about what the next video should be on, because I know it will take 80+ hours to produce over a span of 3-4 months. I just work in the production time around my actual job running an cloud MSP. Then I have to "philophize" on the topic at hand and write a script..and rewrite and rewrite and rewrite. Then I have to record it. Then edit it. Then publish it. I do not know how full-time UA-camrs do this. Anyway, comments like this really do help. Thank you!
@@Xerillion Yeah, there's no getting away from the large amount of work that goes into making well-produced videos (a fact that so many viewers don't properly appreciate).
A lot of very regularly posting UA-camr likely have another party who does the filming and editing!
And all the bigger creators obviously have writers and producers as well.
I'm sure it's possible to optimise the workflows but I wouldn't want to be responsible for it, on top of IT admin + Company management.
Tom of @LawrenceSystems must know some good tips for balancing those acts 👍
@@Xerillion I completely understand you. Do it when you can and keep one thing in mind - don't lose work/life balance. Thanks!
Another fantastic Xerillion video... Cheers Wayne 👍
I've been similarly preaching MS Modern Workplace solutions for years
(I even used to send links of your videos to relevant project sponsors 😉)
I've always thought Xerillion would be a fantastic company to work for... if only you had a London (UK) base 😄
Hey Derek, what nice post! Thank you. :)
Great content , good presentation and well balanced on business vs technical and solution blueprint. Good work
well explained. thanks!
Excellent Video!
As always excellent video!
I literally check all the marks the only feature left for me to implement is Litigation Hold /E-discovery by the way Windows Hello is probably one the best features out there my end users love it...
@venezuelan15 you are ON IT my friend!! Way to get WAY ahead of the game..especially with Windows Hello. 👍👍👍
Great video.
@Xerillion People also don't put all their eggs in one basket, if you put all your eggs in the Microsoft basket and they fail you and others are up the creek without a paddle.
Thanks for commenting @andrewenglish3810. I mean it. And I get your point. I feel there is more missed by having multiple un-integrated, or loosely integrated 3rd party IT security and management servers to to deal with. Also, Microsoft uses these same security products. They are a $3T company. I say if it is good enough for them, it's good enough for most of us. Also, as a company that only integrates these systems, we just don't have issues and IT overall is very peaceful. That being said, IT managers need to train, certify and get years of experiencing properly integrating these system, which is tough for internal IT managers to do and I'm epithetic to that issue. Again, totally respect your point. And thanks for taking a moment to comment.
Are you sure we can replace Duo for Windows logins with Business Premium?
Other XDR aspect is SWG/Network/SASE integration that is why PaloAlto comes to the the table
Its such great video. I require the security features available within E5 security add-on. Now BP provides Defender for Business. Any add-on i can purchase that would take me to the e5 security level?
Thanks @tanbirprodhan888! Sure, you can purchase the Microsoft 365 E5 Security Add-on. It does require you have at least one M365 E5 license though...which usually is good to give to the IT manager.
The E3 License has 100GB mailbox sizes, business premium has 50GB, check mailbox sizes before doing this upgrade.
Business Premium has a 1.5TB email archive included. Part of the work of these integrations is to advise the client and configure a policy that automatically moves emails from the live mailbox to archive. In the case where someone must have a live 100GB mailbox (rare) we can add on an Exchange Online Plan 1 license which is still less expensive than M365 E3, and still a better value. In cases where someone needs 300+ licenses, M365BP premium isn't an option unless they want to mix Business with Enterprise licenses...something I wouldn't recommend.
You would have to add a plan 2 to get 100GB
@@iansylvester1164 Yep, your right. I stand corrected, and that is what we do. Plan 2. I mistyped.
No prob. But that would carry the cost up
@@iansylvester1164 That is true though still cheaper than M365 E3, but even if it was higher, the amount of users we need to apply this add-on is rare when you integrate the 1.5TB archive. I'd estimate for every 30 integration projects we do, which would amount to a total of around 1,000 end-users, I doubt it is even 10. And to make M365 E3 apples to apples with M365 BP, you need to also put add-ons to M365 E3 raising it's cost. That being said, if M365 E3 isn't your thing, all good.
I'm fairly confident you don't need azure ad premium to set up MFA or auto backup bitlocker keys. That's included in Microsoft intra ID now.
Arent they effectively the same? Entra ID is a name change afterall
I was always an E3 commit. But I see now BP is the way to go. Is there a license tier you suggest using for non-user emails? Such as CMS and Alerts?
Justepic, thanks for the comment. Can you give me an example of what you mean by non-email user. If you meant that example to be CMS and Alerts, I'm still not sure what you meant by that.
@@Xerillion absolutely. Traditionally we have been using exchange plans to hold social media accounts, hubstop coms, and system alert emails.
@@justepic7029 probably a little late to answer this but for anyone else seeing this - we'd use shared mailboxes for these as they are not paid licences, and attach them to the users that need to monitor them.
I think saying that Universal Print is included with Microsoft 365 BP is sort of false. Sure, it technically is, but 5 jobs per user per month isn't enough for most anyone. If they make that 100 jobs like they have for E3/E5 then it becomes useful.
No it isn't. It is 5 print jobs per month pooled among all licensed uses in the tenant. A company with 100 licenses would have 500 print jobs before they have to add more. I bet I personally print 2 things a month on average in 2023. So presumably the greater share of print jobs would be used by the accounting department, ect. And the cost to add an additional 500 print jobs per month to the pool? $25. And this is far more superior to an ancient print server.
@@Xerillion FYI... You don't need universal print you can deploy printers using company portal just got this done 2 months ago! we print over 50,000 jobs per month
Please say someone who has more then 100 macbooks on enterprise that Intune is the future to see their reaction. For windows laptops no doubts about Intune.
@AlexexyEronko, what was the reaction when you did this?
@@Xerillion They just smiled, everyone has been using JAMF for last decade. Maybe for small and basic deployments Intune will work . Let's see what microsoft wll rollout for mac ecosystem in near future.
Apple integration is fairly hokey but not because of misgivings by Microsoft. Its a bit like the terrible support for SMB protocol in MacOs because Apple threw a tantrum they had to concede loss with AFP.
Trusting my security to the same company that publishes the software that has the vulnerabilities? Nah...