Cisco Secure Email Threat Defense Reviews

I use Cisco Secure Email Threat Defense as a customer. I can explain that I'm using Cisco Secure Email Threat Defense for advanced email threats, such as business email compromise and phishing attacks. The solution also handles clawback functionality.

The best features in Cisco Secure Email Threat Defense include the clawback feature, which works effectively, and it allows for an in-depth level of investigation on this product.

When utilizing the advanced malware protection feature, it is effective, though I cannot remember whether it's on the cloud email security or the Cisco Secure Email Threat Defense. It has capabilities of detecting malicious emails based on attachments, and it provides reports when it detects malicious email with malware.

The analytics and reporting capability of Cisco Secure Email Threat Defense is not particularly useful. In terms of analytics and reporting, it still needs to catch up with competitors as it's very basic and does not allow for granular reports.

From using Cisco Secure Email Threat Defense, I have seen benefits such as being able to inspect east-west emails within Exchange and identify spam emails and advanced phishing emails.

I use the email gateway as the core of the email exchange between the Internet and our domain. The email gateway serves as the email exchanger.

The product offers protection, email security, anti-spam, and antivirus. It includes threat intelligence with advanced malware protection and many features that rely on Cisco and Talos threat intelligence. Every email is analyzed, not only for content, however, also for context, including URLs, DMARC, and other security checks.

The main use case for Cisco Secure Email Threat Defense is as a gateway for email traffic into and out of the organization. It serves as the primary conduit for emails, providing content filtering, compliance-based email filtering, and DLP features. Users can manage their own email, especially for interactions with clients and vendors, reducing reliance on help desk support.

Cisco Secure Email Threat Defense's best features include user management of graymail, enhancing security awareness by allowing users to manage cold calls, sales-based items, and ensuring email compliance. Additionally, the flexibility of the solution is apparent, even though some backend controls such as spoof, DMARC, or DKIM could be more user-friendly. Integration with threat intelligence feeds significantly enhances the ability to analyze and improve security measures beyond basic email protection.

The behavioral analysis capabilities help identify new or evolving threats, with offshoot analysis carried out by third-party vendors to ensure comprehensive security oversight.

Despite not using analytics and reporting features extensively, the ability to offload email analysis to a vendor-managed CES platform adds value to existing security frameworks.

We use the solution for email security.

It is a very robust and reliable product. Based on the capacity you choose, it can handle a tremendous volume from a security perspective. Additionally, it consistently provides high protection against malware, viruses, and other online threats.

We predominantly used the file analysis service in addition to the standard services. The standard service is common among all vendors or OEMs. However, we found that the file analysis services from Cisco were exceptionally excellent.

We are using the solution as a secure mailbox. We do provide this solution to customers. The main use case is for email protection.

The product offers very good documentation and guides.

It's very easy to deploy and configure.

Their intelligence is pretty competitive when compared to other email security vendors. Cisco has a strong reputation.

The solution has been stable. 

We find the product to be scalable. 

We use the solution for email security. We used cloud ESA and Microsoft Office 365 for email filtering, especially for spam.

One good thing is that you don't have to train people because people are already aware of Cisco, unlike the other new vendors. So it's very easy for them to work with Cisco in terms of administration. Cisco has been very much into security for a long time, and its Talos platform is pretty strong.

You need to have email security on your entry point. It helps us to avoid all the spam mails and getting your domain blacklisted, et cetera. In the initial stages, the security solution provided by Microsoft was not strong enough or not mature enough. So we had this in place and were able to see if mail received on the domain is spam mail or not. If there is malware within an attachment, it goes for analysis and is sandboxed, and sends back the attachment once it is cleared.

The features and functionalities are much better than Microsoft's in-built Defender plan.

The sandboxing and file analysis as well as the malware protection are great. People send either through attachments or Excel or PDF or a Java script embedded in something. This product has helped us to protect our organization from any malware attack in the past.

It is a mature solution that provides good security.

The solution is simple to set up.

Our primary use case is the ability to see email activity in the east-west traffic. It does internal email tracking as well as leveraging it as another layer of email defense. We utilize Microsoft 365 (enterprise service) and its Advanced Threat Protection solution, which networks inline with Cisco Secure Email Cloud Mailbox. Then, Cisco Secure Email Cloud Mailbox does an additional layer of detection and protection against malicious email.

Business email compromise is the internal user use case, then phishing and malware delivery are certainly others. They are pretty common and definitely answered by Cisco Secure Email Cloud Mailbox.

After several months of use, Cisco Secure Email Cloud Mailbox has provided additional capabilities (and value) which enables much faster mal-email remediation times.

Having Cisco's solution gives us a fast way to track and identify. We haven't seen any specific events yet, but certainly having another layer that's able to give us visibility and detect malicious email from an insider is definitely useful. Insiders are typically the hardest to detect, including in an email environment.

So far, we haven't had any detections, which is a good thing. This just means that our traditional use cases of egress-ingress type monitoring work pretty well. However, we have seen some spam being detected. Even internal email forwarding, where an internal enterprise account will forward a spam message to another internal account. This speaks to the system's ability to detect these and fairly quickly categorize them as spam, which is good. Luckily, it wasn't malware. Cisco Secure Email Cloud Mailbox seems to be working well.

Our administrative overhead costs are low, both for time and dedicating human resources. We set the solution, then check it daily. Because we haven't had any detections, which is a good thing, we don't really need to dedicate any additional resources in terms of generating an incident response process.