Forum Discussion

MCT

Mar 08, 2018

Solved

Product Comparison table? (ATA, Azure ATP, Defender ATP, Azure Security Center)

Is there a page somewhere that describes the differences between ATA, Azure ATP, Windows Defender ATP and what you can get deploying Azure Security Center with on-prem agents. I'll admit, even as som...

Nicholas DiCola (SECURITY JEDI)
Mar 08, 2018
Orin,

Not specifically.

ATA and Azure ATP are UEBA products focused on user behavior. ATA is on-prem and Azure ATP is cloud based. its a one or other choice.

WD ATP is Endpoint Detection and Response. It is cloud based as well.

Azure Security Center is a Cloud Workload Protection Product. This is focused on protecting azure workloads but we extended to help with on-prem workloads. it will have a WDATP integration for servers.

To state more simply. ATA and Azure ATP is an OR choice. Likely you would want Azure ATP + WD ATP + Azure security center enabled for your environments as they continue to integrate more and more.

Nicholas DiCola (SECURITY JEDI)

Iron Contributor

Mar 08, 2018

Orin,

Not specifically.

ATA and Azure ATP are UEBA products focused on user behavior. ATA is on-prem and Azure ATP is cloud based. its a one or other choice.

WD ATP is Endpoint Detection and Response. It is cloud based as well.

Azure Security Center is a Cloud Workload Protection Product. This is focused on protecting azure workloads but we extended to help with on-prem workloads. it will have a WDATP integration for servers.

To state more simply. ATA and Azure ATP is an OR choice. Likely you would want Azure ATP + WD ATP + Azure security center enabled for your environments as they continue to integrate more and more.

Avishek Jana

Copper Contributor

Feb 05, 2019

So it seems windows defender advanced threat protection takes care of windows endpoint which azure advanced threat protection can does along with the azure part.do there is no need for both subscription or plans I believe in this case !!

Nicholas DiCola (SECURITY JEDI)
Iron Contributor
Aug 12, 2019
Avishek Jana

This is not correct.

MDATP is a endpoint EDR.

AATP is UEBA and dectection for AD based identity attacks.

You need both.