Home

Should I leverage both ATA and Azure ATP? or are they the same thing?

%3CLINGO-SUB%20id%3D%22lingo-sub-853550%22%20slang%3D%22en-US%22%3EShould%20I%20leverage%20both%20ATA%20and%20Azure%20ATP%3F%20or%20are%20they%20the%20same%20thing%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-853550%22%20slang%3D%22en-US%22%3E%3CP%3ETrying%20to%20understand%20why%20Microsoft%20includes%20both%20products%20in%20either%20M365%20E5%20or%20EMS%20E5%20if%20they%20essentially%20to%20the%20same%20thing.%26nbsp%3B%20Does%20one%20include%20something%20the%20other%20doesn't%3F%20(other%20than%20the%20obvious%20Azure%20based%20console%20in%20AATP%20to%20review%20the%20reports)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F186890%22%20target%3D%22_blank%22%3E%40Azure%20Advanced%20Threat%20Protection%20Team%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F186888%22%20target%3D%22_blank%22%3E%40Advanced%20Threat%20Analytics%20Team%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-856482%22%20slang%3D%22en-US%22%3ERe%3A%20Should%20I%20leverage%20both%20ATA%20and%20Azure%20ATP%3F%20or%20are%20they%20the%20same%20thing%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-856482%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F408213%22%20target%3D%22_blank%22%3E%40AndySVM%3C%2FA%3E%26nbsp%3BI'm%20not%20certain%20but%20I%20thought%20ATA%20was%20to%20be%20EoL'd%3F%3CBR%20%2F%3EThey%20are%20effectively%20the%20same%20thing%20as%20far%20as%20I%20know%20%3B)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-857297%22%20slang%3D%22en-US%22%3ERe%3A%20Should%20I%20leverage%20both%20ATA%20and%20Azure%20ATP%3F%20or%20are%20they%20the%20same%20thing%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-857297%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F129396%22%20target%3D%22_blank%22%3E%40David%20Caddick%3C%2FA%3E%2C%26nbsp%3Bjust%20got%20the%20below%20confirmation%20from%20Microsoft%20during%20the%20%22%3CSPAN%3EAzure%20ATP%20Webinar%3A%20Deployment%20and%20Configuration%22%20webinar%20session%20today.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CFONT%20face%3D%22Calibri%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20281px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F131963iB3B4A90E07CF74A5%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22MicrosoftTeams-image.png%22%20title%3D%22MicrosoftTeams-image.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FFONT%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CFONT%20face%3D%22Calibri%22%3EFYI%3A%20After%20the%20event%2C%20we%20will%20be%20posting%20recordings%20of%20the%20webinar%20at%3CA%20title%3D%22https%3A%2F%2Faka.ms%2Faatprecordings%22%20href%3D%22https%3A%2F%2Faka.ms%2FAATPRecordings%22%20target%3D%22_blank%22%20rel%3D%22noreferrer%20noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CU%3E%3CFONT%20face%3D%22Calibri%22%20color%3D%22%230563C1%22%3Ehttps%3A%2F%2Faka.ms%2FAATPRecordings%3C%2FFONT%3E%3C%2FU%3E%3C%2FA%3E.%3C%2FFONT%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-857696%22%20slang%3D%22en-US%22%3ERe%3A%20Should%20I%20leverage%20both%20ATA%20and%20Azure%20ATP%3F%20or%20are%20they%20the%20same%20thing%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-857696%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F408213%22%20target%3D%22_blank%22%3E%40AndySVM%3C%2FA%3E%26nbsp%3BATA%20is%20available%20in%20an%20EMS%20E3%20-%20Azure%20ATP%20is%20in%20the%20E5.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EATA%20requires%20more%20on-premises%20components%20to%20deploy%2C%20as%20Azure%20ATP%20is%20delivered%20from%20the%20cloud%20service.%20Effectively%20they%20are%20very%20similar%2C%20just%20delivered%20(and%20managed)%20in%20different%20places%2C%20but%20it%20means%20E3%20customers%20have%20the%20ability%20to%20monitor%20and%20protect%20their%20on-premises%20networks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-879694%22%20slang%3D%22en-US%22%3ERe%3A%20Should%20I%20leverage%20both%20ATA%20and%20Azure%20ATP%3F%20or%20are%20they%20the%20same%20thing%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-879694%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F22940%22%20target%3D%22_blank%22%3E%40Justin%20Barker%3C%2FA%3E%26nbsp%3B%3CA%20style%3D%22background-color%3A%20transparent%3B%20box-sizing%3A%20border-box%3B%20color%3A%20%230077d4%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20orphans%3A%202%3B%20outline-color%3A%20invert%3B%20outline-style%3A%20none%3B%20outline-width%3A%200px%3B%20text-align%3A%20left%3B%20text-decoration%3A%20underline%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F408213%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3E%40AndySVM%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EWhile%20Azure%20ATP%20and%20ATA%20both%20protect%20on-premises%20environments%2C%20they%20have%20a%20number%20of%20significant%20differences%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EATA%20is%20a%20standalone%20solution%2C%20installed%20on-premises.%20Azure%20ATP%20with%20its%20cloud%20connectivity%20includes%20continuous%20feature%20updates%20including%20new%20detections%2C%20UEBA%20capabilities%2C%20security%20assessments%2C%20and%20an%20investigation%20experience%20across%20Microsoft%20365%20Security%20solutions.%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegards%2C%3CBR%20%2F%3EAstrid%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
AndySVM
New Contributor

Trying to understand why Microsoft includes both products in either M365 E5 or EMS E5 if they essentially to the same thing.  Does one include something the other doesn't? (other than the obvious Azure based console in AATP to review the reports)

 

@Azure Advanced Threat Protection Team @Advanced Threat Analytics Team 

4 Replies

@AndySVM I'm not certain but I thought ATA was to be EoL'd?
They are effectively the same thing as far as I know ;)

@David Caddick, just got the below confirmation from Microsoft during the "Azure ATP Webinar: Deployment and Configuration" webinar session today.

 

MicrosoftTeams-image.png

FYI: After the event, we will be posting recordings of the webinar athttps://aka.ms/AATPRecordings.

@AndySVM ATA is available in an EMS E3 - Azure ATP is in the E5.

 

ATA requires more on-premises components to deploy, as Azure ATP is delivered from the cloud service. Effectively they are very similar, just delivered (and managed) in different places, but it means E3 customers have the ability to monitor and protect their on-premises networks

@Justin Barker @AndySVM

While Azure ATP and ATA both protect on-premises environments, they have a number of significant differences:

 

ATA is a standalone solution, installed on-premises. Azure ATP with its cloud connectivity includes continuous feature updates including new detections, UEBA capabilities, security assessments, and an investigation experience across Microsoft 365 Security solutions.

 

Regards,
Astrid 

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
50 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
32 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
15 Replies
Discussion - Updating our interface with Fluent touches
Elliot Kirk in Discussions on
102 Replies