defender EDR is there a charge (cost) for data ingress

Question

I wanted to check if there is a charge for data ingress if i deploy Defender for Endpoint to all of my clients. We currently use E5 licences. if i manage this in the MS portal ?

Answer 1

Dont worry im happy to help,

Yes of course in my experience with Microsoft Sentinel because of the data ingress and Workspace Analitys you will be charge for it

I'm going to share some useful like so you can take a look at it

Azure Price Calculator for Sentinel so you can make a estimate

1- https://azure.microsoft.com/en-us/pricing/calculator/?service=azure-sentinel

Pricing cost tiers of Sentinel

2- https://learn.microsoft.com/en-us/azure/sentinel/billing?tabs=simplified%2Ccommitment-tiers

Play with the Azure calculator so you can have a estimate.

I hope this helps. Let me know if you have any further questions or need additional assistance.

"If This Answered Your Question, Consider Marking It as Solved"

Answer 2

Hello John

In your case you are making a deployment to all your Endpoints (Windows PC) you won't be charge for that data traffic that would generate.

However, is you are going to storage data, use an api for dashboard is probably charges you depending on your agreement too with your Microsoft Representatives in case you have a PoC.

Defender is just going to charged.

1-Defender for Storage

Storage accounts with more than 73 million monthly transactions are charged an overage fee of $0.1492 per additional million transactions. 

2-Defender for APIs: There are overage charges for exceeding the plan entitlement limit at the subscription level.

3-Defender for Servers 

• Defender for Servers Plan 2: Users receive 500 MB of free data ingestion per day for each virtual machine (VM) connected to the workspace.

You can take a look about those charges https://techcommunity.microsoft.com/blog/microsoftdefendercloudblog/microsoft-defender-for-storage-%E2%80%93-price-estimation-dashboard/2429724

Answer 3

thank you,

If I want to use Sentinel or other features to help detect and manage risk for endpoints with this remain at zero cost?

atb

john