I'm currently exploring remote monitoring and management (RMM) tools and have narrowed it down to Datto RMM and N-able. I've been a consultant for years and find Datto more user-friendly while also being about 50% cheaper than N-able's S1 package. I'm not deeply familiar with endpoint detection and response (EDR) solutions, but I've learned that Datto EDR is essentially Infocyte. According to the Mieracom report, it's listed as one of the top solutions.
In my experience, most managed service providers (MSPs) in my area use S1 for its brand recognition, making comparisons tricky. I want to know if Datto EDR is a solid choice for around 600 endpoints or if I should opt for Microsoft Defender instead. Is the plan 1 sufficient, or should I go for plan 2 to pair with Business Premium and E3? Additionally, I'm struggling to find endpoint pricing for S1; is it roughly $2.50 per endpoint? The choice of EDR will also influence my RMM selection, and information online has been really hard to parse through.
4 Answers
We've switched to Microsoft Defender for Endpoint Plan 2, and it's been fantastic. Before, we used Symantec, which was a nightmare, and when we experienced a ransomware attack, all the Symantec machines were compromised while those using Windows Defender were fine. I wasn’t even aware that Datto had a desktop security option! I can’t find them listed in the Gartner reviews for endpoint security, which is a bit concerning.
From what I've seen, anything from Kaseya, which now owns Datto, can be problematic on various fronts like security and support. While Datto RMM was a good product in the past, I'd suggest looking closely at Microsoft Defender for Endpoint (Plan 2). In our experience, Defender catches about 85% of threats on its own, but pairing it with another EDR, like Elastic EDR from Todyl, provides better coverage. So yeah, I think Defender is a solid choice once it's properly tuned!
I strongly recommend Defender EDR. It’s not 100% foolproof, but it's a blessing to have a secondary solution as support. I've been using Vicarius alongside Defender for an 18-month run and couldn’t be happier with how it's performing!
In my team, we utilize Datto RMM along with their AV and EDR for roughly 650 endpoints, and we find it super user-friendly. The AV and EDR policy setup is straightforward, with minimal false positives. However, removing N-able can be a nightmare!
That’s because Infocyte, which powers Datto's EDR, has been bought by Kaseya, and their reviews haven't been updated since then. It seems plan 1 is suited for antivirus, but for real EDR capabilities, plan 2 is needed.