We are using Microsoft Exchange Online Protection for the migration of users from on-premise to the cloud.
Senior Software Engineer at Eighty 20 Solutions
Helpful safe links, reliable, and plenty of features
Pros and Cons
- "The most valuable features of Microsoft Exchange Online Protection are the EOP, ATP, safe links, fishing, and antispam."
- "Not all settings can be configured automatically and most still require manual configuration. However, there is an automation tool available that can be used to input all the configurations either as a script or a tool it would be helpful."
What is our primary use case?
What is most valuable?
The most valuable features of Microsoft Exchange Online Protection are the EOP, ATP, safe links, fishing, and antispam.
What needs improvement?
Not all settings can be configured automatically and most still require manual configuration. However, there is an automation tool available that can be used to input all the configurations either as a script or a tool it would be helpful.
For how long have I used the solution?
I have been using Microsoft Exchange Online Protection for approximately three years.
Buyer's Guide
Microsoft Exchange Online Protection (EOP)
October 2025

Learn what your peers think about Microsoft Exchange Online Protection (EOP). Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.
872,778 professionals have used our research since 2012.
What do I think about the stability of the solution?
The stability of Microsoft Exchange Online Protection is good. We have not had many issues.
I rate the stability of Microsoft Exchange Online Protection a nine out of ten.
Which solution did I use previously and why did I switch?
I have used Mimecast. I do not have a lot of experience in Mimecast.
Microsoft Exchange Online Protection can handle a more broad range of areas than Mimecast.
How was the initial setup?
The initial setup of Microsoft Exchange Online Protection and streamlining is complex. When we use a feature and we try to streamline them based on its outcomes can be difficult, such as false positives.
We often use third-party tools for the deployment. We try and use Microsoft native tools, such as Office Configuration Analyzer.
What about the implementation team?
I help my customers implement the solution and it typically takes one week with two consultants.
What's my experience with pricing, setup cost, and licensing?
The price of Microsoft Exchange Online Protection is reasonable.
What other advice do I have?
If you're looking for recommendations, I suggest selecting the standard or strict settings provided by Microsoft for configuring Microsoft Exchange Online Protection. You can start with the standard settings and gradually increase the blocking and other settings such as spam confidence level based on your experience over time. It's important to keep in mind that further tuning may be required based on false positives and other factors, which will require manual adjustments based on experience. This configuration process is not a one-time setup and will evolve based on your customer experience.
I rate Microsoft Exchange Online Protection a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner

Senior Information Security Analyst at Rewterz
Quick support, easy to use, and simple setup
Pros and Cons
- "The most valuable feature of Microsoft Exchange Online Protection is the accidental release of information protection capabilities. Additionally, the solution is easy to use."
- "The price of Microsoft Exchange Online Protection could be reduced to make it more competitive."
What is our primary use case?
I work in a financial institution and we use Microsoft Exchange Online Protection to protect our CEO's emails and all users' emails from phishing and other threats.
What is most valuable?
The most valuable feature of Microsoft Exchange Online Protection is the accidental release of information protection capabilities. Additionally, the solution is easy to use.
What needs improvement?
The price of Microsoft Exchange Online Protection could be reduced to make it more competitive.
For how long have I used the solution?
I have been using Microsoft Exchange Online Protection for approximately one year.
What do I think about the stability of the solution?
Microsoft Exchange Online Protection is stable.
How are customer service and support?
We have had some issues and the support we received was good and quick.
Which solution did I use previously and why did I switch?
I have used other solutions, such as Carbon Black and Trend Micro Deep Discovery Email Inspector. I found that Microsoft Exchange Online Protection is a much better solution because the search time is quicker and there are more alert results.
How was the initial setup?
The configuration of Microsoft Exchange Online Protection is easier than other solutions.
What about the implementation team?
We did the deployment of the solution in-house.
What's my experience with pricing, setup cost, and licensing?
The solution is priced high and could be less expensive compared to other solutions.
What other advice do I have?
There is no maintenance needed for this solution, but we have analyzed the results from the findings from the alerts.
I would recommend this solution to others.
I rate Microsoft Exchange Online Protection a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Microsoft Exchange Online Protection (EOP)
October 2025

Learn what your peers think about Microsoft Exchange Online Protection (EOP). Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.
872,778 professionals have used our research since 2012.
Security Specialist at Engen
Scans and protects emails, attachments, and URLs against threats and has good integration with Windows
Pros and Cons
- "What I like most about Microsoft Exchange Online Protection is its integration with Windows, so we have one central view for all alerts and incidents."
- "Having orchestration features added to Microsoft Exchange Online Protection, particularly automation and remediation, would be quite useful."
What is our primary use case?
We use Microsoft Exchange Online Protection for scanning and protecting email attachments and URLs. Primarily we use Mimecast for URL protection, but it's good to have a second step, particularly Microsoft Exchange Online Protection, just in case something slips through.
What is most valuable?
What I like most about Microsoft Exchange Online Protection is its integration with Windows, so we have one central view for all alerts and incidents.
What needs improvement?
I'm pretty happy with Microsoft Exchange Online Protection, so off the top of my head, I can't think of any reason for me to want to change something in the solution.
Having orchestration features added to Microsoft Exchange Online Protection, particularly automation and remediation, would be quite useful.
For how long have I used the solution?
I've been using Microsoft Exchange Online Protection for five or six years.
What do I think about the stability of the solution?
Microsoft Exchange Online Protection is quite stable.
What do I think about the scalability of the solution?
Microsoft Exchange Online Protection is a scalable solution.
How are customer service and support?
I haven't contacted technical support for Microsoft Exchange Online Protection.
Which solution did I use previously and why did I switch?
Before Microsoft Exchange Online Protection, we used Mimecast. We still use Mimecast, but for an antimalware solution, we've always used what's available on Windows.
How was the initial setup?
I didn't configure the solution, so I can't tell if the setup was straightforward or complex. Our Exchange administrators were the ones who set up Microsoft Exchange Online Protection.
What about the implementation team?
We implemented the solution in-house.
What's my experience with pricing, setup cost, and licensing?
Our license for Microsoft Exchange Online Protection is covered by our enterprise agreement.
What other advice do I have?
There are three thousand users of Microsoft Exchange Online Protection in our company. There is no plan to increase the number of users, at least not in the near future.
Microsoft Exchange Online Protection is quite a difficult product. I would recommend it because it's a good product. My advice to others looking into using it is to make sure their rules are configured correctly, and they have turned on all the necessary features.
I'm rating Microsoft Exchange Online Protection eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Network and Infrastructure Manager at Sonysugar
Provides valuable email protection and policy configuration features
Pros and Cons
- "The email policy configuration options in Microsoft EOP are satisfactory."
- "The product's end-of-life cycle could be extended."
What needs improvement?
The product's end-of-life cycle could be extended. When it gets upgraded, we should receive some incentives. For example, someone who has purchased a Microsoft professional license should be able to renew or upgrade without buying a new product.
There have been some online intrusions on security. If Microsoft packaged the updates more frequently, the protection would be better. If updates take less time, we might receive malicious emails.
Additionally, I would like to see changes in the licensing model. If someone has a corporate license with many users, they should get a better price.
For how long have I used the solution?
I have been working with Microsoft Exchange Online Protection (EOP) since 1998.
How are customer service and support?
We could get technical support services directly from Microsoft.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We use Sophos for email protection. Sophos enhances our accessibility and helps prevent malicious email intrusions.
What's my experience with pricing, setup cost, and licensing?
The product is expensive.
What other advice do I have?
The email policy configuration options in Microsoft EOP are satisfactory. I recommend it to any user who wants to use Microsoft.
I rate it a ten out of ten. 
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Infrastructure Manager at a tech services company with 51-200 employees
Has efficient integration features, but the configuration process could be easier
Pros and Cons
- "The product's most valuable feature is third-party integrations."
- "The management interface of Microsoft Exchange Online Protection (EOP) could be intuitive."
What is our primary use case?
We use the product to configure anti-spam solutions.
What is most valuable?
The product's most valuable feature is third-party integrations.
What needs improvement?
The management interface of Microsoft Exchange Online Protection (EOP) could be intuitive. Additionally, it could be easy to configure and fine-tune the components.
For how long have I used the solution?
We have been using Microsoft Exchange Online Protection (EOP) for two years.
What do I think about the stability of the solution?
It is a stable platform.
What do I think about the scalability of the solution?
It is a scalable product.
How are customer service and support?
I work with Microsoft's technical support team a lot. In some simple cases, the services are very good. However, it needs improvement for dealing with complex issues.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I have experience working with Mimecast and Barracuda. In comparison, Microsoft Exchange Online Protection has good integration and policies. However, it is not easy to configure.
How was the initial setup?
The initial setup process is easy. At the same time, it's complicated to configure. From a maintenance perspective, it requires keeping a tab on the console for security or operations to filter out emails.
What was our ROI?
The product generates a good return on investment for the US market.
What's my experience with pricing, setup cost, and licensing?
The product's pricing is competitive for the US market. However, it is expensive for the regions where businesses don't have enough budget to invest.
What other advice do I have?
I recommend Microsoft Exchange Online Protection (EOP) to others and rate it a seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
Senior infrastructure engineer at Cubic Information Systems
Comes with a shared mailbox feature but needs to improve backup
Pros and Cons
- "Microsoft EOP's most valuable feature is a shared mailbox."
- "The solution needs to improve its backup."
What is most valuable?
Microsoft EOP's most valuable feature is a shared mailbox.
What needs improvement?
The solution needs to improve its backup.
What do I think about the stability of the solution?
I rate the tool's stability a ten out of ten.
What do I think about the scalability of the solution?
Microsoft EOP is scalable.
How was the initial setup?
The tool's deployment is straightforward. You need to get a license to use the product.
What other advice do I have?
I rate Microsoft EOP a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
CyberSecurity Executive IAM Engineer at Tata Consultancy
An easy to setup solution that helps to manage special accounts 
Pros and Cons
- "You can use the product to create special accounts."
- "We have experienced issues while migrating from on-prem to the cloud. The tool needs to improve its stability."
What is our primary use case?
I manage all the users and special accounts with the tool.
What is most valuable?
You can use the product to create special accounts.
What needs improvement?
We have experienced issues while migrating from on-prem to the cloud. The tool needs to improve its stability.
For how long have I used the solution?
I have been working with the solution for more than ten years.
What do I think about the stability of the solution?
I would rate the product's stability an eight out of ten.
How are customer service and support?
My experience with the tech support team is good.
How was the initial setup?
The product's setup is easy and quick.
What about the implementation team?
We relied on a third-party to complete the deployment.
What other advice do I have?
I would rate the solution a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Cloud Infrastructure Engineer at Netsurit
Highly capable when it comes to protecting against phishing attacks and malware threats
Pros and Cons
- "The scalability is pretty good; it does what it is supposed to do."
- "The reporting needs a little bit of improvement."
What is our primary use case?
We use it for email protection.
What is most valuable?
Microsoft Exchange Online Protection is very good when it comes to anti-phishing and anti-malware. And the fact that it has an impersonation feature for the domain as well as users.
What needs improvement?
The reporting needs a little bit of improvement. When you compare it to Mimecast features and data porting tools, it's less superior compared to EOP.
Another area of improvement could be pricing. So Exchange Online Protection has a higher price compared to its competitors.
For how long have I used the solution?
I've been working with it for over three years now.
What do I think about the stability of the solution?
I would rate the stability a nine out of ten.
What do I think about the scalability of the solution?
I would rate the scalability an eight out of ten. The scalability is pretty good; it does what it is supposed to do. I haven't encountered many issues because Microsoft regularly updates its product.
We're just over 650 users in our company using this solution.
How are customer service and support?
The customer service and support have been really helpful. Whenever we raise a support ticket with them, they respond in a timely manner, and almost 99.9% of the time, issues are resolved.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have used MessageLabs in the past, and I would say that EOP is better than MessageLabs in terms of the interface and ease of use.
How was the initial setup?
The initial setup is easy. Moreover, it is easy to maintain. The deployment model is cloud-based, but we are in a hybrid environment. So it does protect our on-premises environment as well.
What about the implementation team?
The initial deployment was done by our IT team. In our IT department, I would say roughly 12 people are required for maintenance.
What's my experience with pricing, setup cost, and licensing?
It's a high price. When comparing it to Microsoft Defender and Mimecast, it is more expensive.
What other advice do I have?
I would definitely require using this solution. Overall, I would rate the solution a nine out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller

Buyer's Guide
Download our free Microsoft Exchange Online Protection (EOP) Report and get advice and tips from experienced pros
        sharing their opinions. 
Updated: October 2025
Popular Comparisons
Microsoft Defender for Endpoint
Microsoft Defender for Office 365
Proofpoint Email Protection
Check Point Harmony Endpoint
Cisco Secure Email
Abnormal Security
Check Point Harmony Email & Collaboration
Fortinet FortiMail
Check Point Harmony SASE (formerly Perimeter 81)
Trend Micro Email Security
Buyer's Guide
Download our free Microsoft Exchange Online Protection (EOP) Report and get advice and tips from experienced pros
        sharing their opinions. 
Quick Links
Learn More: Questions:
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- What to choose: an endpoint antivirus, an EDR solution or both?
- Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
- Looking for alternatives to Symantec Cloud Protection Engine
- Who provides a better antivirus solution: Bitdefender or Sophos?
- Which antivirus is best for isolated work PCs?
- How do you identify malware?
- Why are Anti-Malware Tools important for companies?
- When evaluating Anti-Malware Tools, what aspect do you think is the most important to look for?
- When evaluating Antimalware Tools, what aspect do you think is the most important to look for?




















