Forum Discussion
Is Azure ATP an update/replacement for ATA?
its a cloud version of the ATA product. so you will run ATA OR Azure ATP
ATA is analysing trafik / logons to Domain controlers in AD
ATP is sandboxing attachements and Links in e-mails
nothing to do with each other at all.
- DeletedOct 16, 2017
Was just made aware that MS is using ATP for 3 different products at least
Windows Defender ATP: https://www.microsoft.com/en-us/windowsforbusiness/windows-atp
Office 365 ATP: https://technet.microsoft.com/en-us/library/exchange-online-advanced-threat-protection-service-description.aspx?f=255&MSPPError=-2147217396
Azure ATP: https://cloudblogs.microsoft.com/enterprisemobility/2017/09/27/introducing-azure-advanced-threat-protection/
So it looks like MS is doing whatever they can to confuse people ;)
- Ayesha ImtiazMar 16, 2018Copper Contributor
This may clear the confusion :)
- Windows Defender Advanced Threat Protection: Allows IT Admins to view Advanced Persistent Malware in an Enterprise network post breach scenario (what malware is there, what it is doing/what it did and actions to take)
- Microsoft Advanced Threat Analytics: Allows IT Admins to monitor hackers/attackers who are inside a network (not malware), what they are doing/what they did and actions to take. Monitors PtH attacks, persistence, golden tickets etc.
- Office 365 Advanced Threat Protection: Detects and dynamically blocks malware laden emails - what malware it is, what it did/what it tried to do and who received the email etc.
Ayesha Imtiaz
Microsoft Technology Associate
http://www.communicationsquare.com
- William McAllisterMar 16, 2018Copper Contributor
Ayesha, with that said, when you purchase O365 E3 with EMS Security and Mobility, do get benefit from all three of these or are they separate licenses?
- Jasbir GillNov 08, 2017Copper Contributor
This is exactly it. They do work together (in a loosely - partner - defined) way. I would love to see that diagram. The end to end flow of advanced persistent threats..
- Ivan54Oct 17, 2017Bronze ContributorI've watched the Ignite session and it looks like Azure ATP is a cloud based evolution of ATA. Some of the Azure ATP enhancements will come down to ATA in the future (e.g. no more resource hogging of the ata "lightweigth" client), but Azure ATP will be separately licensed.