Workforce mobility and the rise of cloud
services is an essential part of any business, but it creates a number of
challenges for IT. Data spread across devices and cloud services, unpredictable
schedules, and varied network connections all complicate efforts to protect and
govern enterprise information.
The Druva Cloud Platform (formerly Druva inSync &
Druva Phoenix) provides unified data protection, management, and information
governance across endpoints and cloud…
N/A
Microsoft Sentinel
Score 8.6 out of 10
N/A
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
We are a cloud-only shop, so Druva Data Resiliency Cloud is a natural fit. We do not have a large Azure VM presence, so I do not know how well they play in that space. If you are not cloud-focused, I am not sure that Druva Data Resiliency Cloud's strengths will be easily seen. However, in the cloud they are tough to beat.
We use it because when a user sees the suspicious activity on his account, Microsoft Sentinel gives alerts to the user's system and the admin system as well. When a user of one of our systems clicked a spam email, that email was trying to install a virus on our server, but Microsoft Sentinel gave an alert to the user and admin both, so that is why our team was able to fix that issue with Microsoft Sentinel very fast. However, it will not be the best option for you if your team is utilizing every feature but you are on a tight budget.
It is a good tool for threat detection and analysis of the threats. We are using this tool for real time threat detection on our employee machines as well as some servers.
It provides various options for collecting data sources by leveraging multiple sources using data connectors. This helps us in gathering data from multiple sources such as our servers as well as our employee machines.
One good thing about this tool is automated incident response thereby increasing the security of servers.
It takes some time to learn how to use and install it properly, and it does not connect effectively with external PaaS systems such as Salesforce CRM, Salesforce Commerce Cloud, and so on.
Microsoft can simplify the display of the logs to make them easier to study, and the user interface occasionally delays, which can also be enhanced.
This is the second company I've brought to Druva. Just today, I was tasked with recovering a file from a user that last saw it 6 months ago. I was able to restore it in under 5 minutes of getting the request. It's really that easy.
Usability is really high on my list when it comes to software/applications. As with all new technologies, there is a bit of a learning curve, but things are relatively easy to find. Occasionally you have to do a few extra clicks, but for the most part, it's quite user friendly and intuitive. You don't have to go a dozen levels deep to find what you're looking for - or at least the surface level issue.
The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.
Like any service, there are scheduled maintenance periods and unscheduled outages, however outages have been very limited and fortunately have not had any impact on our environment.
Page response in the admin center is acceptable- rarely are we waiting for data to load. Backup speeds seem fine, and restore speeds are OK considering it's likely pulling data from cold storage. It often takes 30-60 seconds for the restore to begin transferring files, but speeds are acceptable thereafter
I can't downvote this facet on account of my never having to call upon Druva's Tech Support. Self-help is always my first port of call and the documentation provided by Druva has allowed me to proceed to a point where I can confidently use the system. Even without support, I trust the system implicitly. That said, I'm pretty sure if and when I need it, it'll be awesome.
Implementation from cloud ranger to Druva Data Resiliency Cloud platform was a seamless integration experience to upgrade the policies and license for continual backup/recovery support. This may be one of the best "set it and forget it" apps for backup solutions, that also allow notifications for failures etc...
We also reviewed Veeam and Rubrik and while all three were good options, Druva Security Cloud won out as our completely cloud hosted solution of choice. Druva Security Cloud seemed to have a better user interface during the POCs. The sales team was proactive and pricing in our experience was better for what we got/needed.
Microsoft Sentinel excels in cloud-native scalability, Microsoft ecosystem integration, and AI-driven threat detection with UEBA and Fusion rules, offering faster deployment and lower costs (48% cheaper per Forrester) than Splunk, QRadar, Exabeam, SentinelOne, Securonix, and Wazuh. It lags in third-party integrations and syslog parsing. Organizations choose Microsoft Sentinel for its cost-effectiveness, automation, and Microsoft synergy, especially in Azure-heavy environments, though Splunk and Exabeam lead in flexibility and UEBA, respectively.
As the product is cloud based within AWS, scaleability is unlimited. The on-premise units of scale are predictable and allow administrators to scale up / down as needed. In my experience, the flexibility around these appliances, allow organisations to vertically or horizontally scale the environment with confidence and ease. Conversely, it is possible to set thresholds to ensure that organisations do not over commit and manage budgets effectively.
More importantly it reduced 60% of our operational overhead and time savings in maintaining the backups.
This also tremendously reduced the manual failures like deduplicating the backups and there were many cases it saved us 40% of our entire bill by taking point in time backups.
It saved 1000's of dollars when we used the DR plan and rolled a new infra in less than few minuted with less manpower and less time.
As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team.
