Share your experience using MetaDefender Email Security Solutions

The easiest route - we'll conduct a 15 minute phone interview and write up the review for you.

Use our online form to submit your review. It's quick and you can post anonymously.

Your review helps others learn about this solution
The PeerSpot community is built upon trust and sharing with peers.
It's good for your career
In today's digital world, your review shows you have valuable expertise.
You can influence the market
Vendors read their reviews and make improvements based on your feedback.
Examples of the 84,000+ reviews on PeerSpot:

Senior Information Systems Engineer at Liberty Pumps, Inc.
Real User
Top 20
Helpful support, and useful dashboards
Pros and Cons
  • "The sanitization is very good."
  • "They offer a feature called SmartLink neutralization. I have tried it before. It seemed to work most of the time; however, I had a few users for whom it just wouldn't work. Whenever they click on a link, it stays on the MetaDefender page, saying that it's scanning it and never moves forward."

What is our primary use case?

Right now, we're mainly just using the email gateway security server. We have all of our incoming emails getting scanned and sanitized for any malicious attachments. Our other spam products didn't always catch Macros and things in Word and Office documents. We added MetaDefender to provide an extra layer there. In any case, the solution will sanitize all documents by recreating a clean one with just the content and no embedded code. It offers a little extra safety.

What is most valuable?

The sanitization is very good. Previously, we had to control certain files in which we would restrict which files could get delivered to user mailboxes until IT could verify them manually to ensure that they were clean. This allows us just to let them go through. They get sanitized, and they go through. It took a burden off of IT. There's the rare instance where we actually need the original file. For example, maybe a bank or our payroll company actually has put some code in the file that they need in order to work. However, it's greatly reduced the amount of work IT has to do. 

MetaDefender's ability to identify attacks, for example, spam, social engineering tags, blackmails, scams, et cetera, seems fine. I don't really monitor day-to-day to see. I haven't seen any obvious things get through. No one's reported that to us. It does detect malware; however, we don't get a ton of malware anyway. We do have another spam gateway as well in front and at the edge that gets things first. So that blocks a lot of things. However, if some of them get through, then MetaDefender blocks things that were missed. I'm happy about that. It does catch things. 

MetaDefender's ability to sanitize malicious content from documents or emails is great. I'm very happy with that. It's never let through anything malicious. Still, it does have some limitations. There are some documents with embedded hyperlinks that end up going to maybe a credential phishing site that it doesn't know. We'd have to check it ourselves. Thankfully, our users are pretty aware of those kinds of malicious threats. They do alert us to those.

Having email security in the organization is essential. It's very important since we're routinely receiving files. We get most of our orders through email. A lot of people are looking at incoming emails that almost all have attachments in them. So making sure that those attachments are clean is very important to us. 

MetaDefender may have helped to improve our spam catch rate. If I'm looking at my dashboard over the last thirty days, I haven't seen any spam. That said, our other solution is doing pretty well at spam. Our spam rate is relatively low. It's mostly things that are actually legitimate advertising or companies that we have relationships with. It's not really spam. The combination of MetaDefender and SpamTitan is what we're using.

We don't get very many false positives. If there is, we have to put in an exception for those.

What needs improvement?

They offer a feature called SmartLink neutralization. I have tried it before. It seemed to work most of the time; however, I had a few users for whom it just wouldn't work. Whenever they click on a link, it stays on the MetaDefender page, saying that it's scanning it and never moves forward. I haven't tried it in a while since then. Since I can't turn it off on a per-user basis, I had to turn it off globally.

I have certain exceptions for not doing the sanitization, and how to set those up is not intuitive. It would be useful if there were a better way of doing that.

Using digital certificates is hard. It would be better if it used Windows Servers' built-in certificate management.

For how long have I used the solution?

I've been using the solution for about three years. 

What do I think about the stability of the solution?

The solution seems stable. I haven't noticed any issues with it. 

What do I think about the scalability of the solution?

We're only using the product as a single-server solution. While doing the installation, I noticed it has some high-availability options. You can have multiple servers with load balancing. It seems pretty scalable. 

How are customer service and support?

In the beginning, I might have contacted technical support, and I recall them being pretty responsive. 

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We do use SpamTitan. We added MetaDefender as SpamTitan wasn't catching enough of the malicious attachments. We were hoping we could replace SpamTitan with MetaDefender, however, MetaDefender's limitations on how emails can be routed would not allow us to. We still have to use SpamTitan.

How was the initial setup?

While we use an on-prem deployment, it's my understanding they have a cloud option as well. 

The setup was pretty straightforward. There isn't much maintenance required. The only time I log in is if they block an attachment and I need to retrieve it. It does have reporting and dashboards if you would like to be more proactive.

What about the implementation team?

I handled the implementation myself, using the solution's documentation. 

What's my experience with pricing, setup cost, and licensing?

We paid for a three-year agreement. The cost is kind of high. For smaller companies, it may be outside of their budget. However, for us, management knows how important this product is. It's worth the money.

What other advice do I have?

While it does have password-protected archives, over the general course of our business, these protected archives are not common and not in use.

We don't currently use it to try to meet any standards. We're just trying to block things from coming in.

For someone who hasn't installed any mail security solution, I'd warn them that it's only a matter of time before something very bad happens. It's essential in any company to ensure there's robust email security.

If someone is looking for zero-day protection, they would be making a mistake in the long term. Something like MetaDefender, which can sanitize documents, provides peace of mind. Zero-day would strip all of the code out of your documents. 

I'd rate the solution eight out of ten. 

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Flag as inappropriate
Aaron Alornyenu - PeerSpot reviewer
Mr at a financial services firm with 501-1,000 employees
Real User
Helps us stay compliant, has excellent malware detection, and is stable
Pros and Cons
  • "The most valuable feature is called summary reconstruction which is used to deliver encrypted files to users."
  • "Although the number of AV engines is good, it could be better."

What is our primary use case?

We use two solutions to protect our email environment: Email Gateway and MetaDefender Vault. Email Gateway sanitizes inbound emails, and MetaDefender Vault scans files that are uploaded to the vault. Email Gateway has a policy that prevents certain types of files from being delivered to our environment, such as encrypted files. 

Encrypted files are allowed, but they must be decrypted before they can be delivered. Email Gateway also helps to prevent spoofing attacks. It uses a variety of techniques to detect spoofing attacks, and it can block these attacks from reaching our users. MetaDefender Vault uses a variety of antivirus engines to scan files for malicious content. If a file is found to be malicious, it is rejected and does not enter our environment. These two solutions help to protect our email environment from a variety of threats. By using these solutions, we can help to ensure that our users are safe from malicious emails.

How has it helped my organization?

The solution helped our organization stay 100 percent compliant with industry standards.

MetaDefender Email Security can be set to be very aggressive for identifying attacks. This can be done based on how we want it. If we set it to this level, most of our emails will be blocked because the system will block anything that looks suspicious. We will also need to set the spam severity. This is the severity of everything, including phishing, spoofing, and other types of attacks. I would give the solution's ability to identify attacks a nine out of ten.

MetaDefender helps us improve our spam catch rate. Any spam we receive is usually due to user subscriptions. We can specify rules of exclusion to meet our requirements as well. It also detects and blocks the links with suspicious codes.

MetaDefender Email Security's multi-scanning capabilities for malware detection work based on how we set the parameters. The solution perfectly detects malware.

MetaDefender can identify and disarm emails in zero-day attacks.

What is most valuable?

The most valuable feature is called summary reconstruction which is used to deliver encrypted files to users. When a user receives an encrypted file, they are sent a link to a page where they can enter the password for the file. Once the password is entered, the file is decrypted and delivered to the user's inbox.

What needs improvement?

Although the number of AV engines is good, it could be better.

For how long have I used the solution?

I am currently using MetaDefender Email Security Solutions.

What do I think about the stability of the solution?

The solution is stable.

What do I think about the scalability of the solution?

The solution is scalable.

How are customer service and support?

The technical support team responds quickly.

How would you rate customer service and support?

Positive

How was the initial setup?

The solution's initial setup is straightforward. We conducted a demo for its deployment, referring to the documentation. It was easier to test later. We required around six people including, cybersecurity, policy, and an auditor to carry out the deployment.

What was our ROI?

The solution generates a return on investment.

Which other solutions did I evaluate?

We evaluated two other solutions alongside MetaDefender. MetaDefender uses 20 AV engines, while the other solutions only used four or five.

What other advice do I have?

I give the solution a nine out of ten.

We live in a globalized world where everyone is trying to get information from us to make money. These bad actors want to steal our information, and they will stop at nothing to do so. If we use on-premise email, which does not have the same level of security as a cloud-based solution like Microsoft 365, we need to take steps to protect ourselves. One of the most important things we can do is to install an email scanner. This will help to identify and block malicious emails before they reach our inboxes.

Disclosure: I am a real user, and this review is based on my own experience and opinions.