What is our primary use case?
The main use case is to block suspicious links in emails.
However, some functionalities like SIPP attachment are not available in the basic EOP. Alos, complete phishing protection is also not available in EOP.
That's why we are considering Check Point's dedicated email security solution, which offers these functionalities, although we haven't started using it yet.
How has it helped my organization?
EOP handles an increase in spam or phishing attacks in our organization.
We've configured the provided policies for anti-phishing, anti-spam, and anti-malware through Microsoft Office 365 Defender. However, these policies have their limitations, leading to a significant number of spam emails and malware attachments getting through to our organization.
The current features provided by Microsoft don't offer a complete solution. We have to configure each policy we have access to with our business standard license. However, we're still receiving a lot of phishing emails, indicating the product isn't working as expected unless we purchase a higher, dedicated license.
What is most valuable?
With EOP, we've found features like anti-phishing, anti-malware, and spam policies to be currently available and somewhat effective.
Policy configuration in Microsoft Office 365 is very straightforward and simple.
What needs improvement?
We face challenges with reporting features and the lack of a proper dashboard in Microsoft's portal. There's no graphical interface, which other products offer.
The reporting features need improvement. There isn't a proper dashboard provided by Microsoft, forcing us to search for everything manually in the portal without the aid of a graphical user interface, unlike what other products offer.
So, having a proper dashboard would significantly enhance the usability and effectiveness of the service.
The tracking features require us to search in MailFlow, where we input dates and times to find emails, focusing on sender and receiver details. This process highlights the challenge of not having an explorer feature in the basic EOP functionalities, making it difficult to search emails beyond the last ten days.
For how long have I used the solution?
I have been using it for three years.
What do I think about the stability of the solution?
Microsoft 365 Defender and EOP policies are stable with the proper license. However, with the basic policy, it's hard to say it's stable due to configuration limitations.
For stability, purchasing a dedicated third-party service like Check Point might be necessary.
What do I think about the scalability of the solution?
Scalability is definitely available. We currently have 150 users.
We plan to include more users.
How are customer service and support?
The technical support from Microsoft is not satisfactory. Often, we have to wait 10 to 15 days after raising a ticket.
For technical support, I would give it two out of ten.
The product itself is good, meeting our needs based on the license we purchased. I'd rate the product itself six to seven out of ten.
How would you rate customer service and support?
How was the initial setup?
The initial setup was easy. The configuration process is very straightforward.
What about the implementation team?
The deployment process involved a step-by-step configuration, which I managed.
What was our ROI?
The impact hasn't been major; it's been normal. However, there is one good thing that Microsoft's proactive recommendations. They provide a complete list of recommendations to enhance our email security, advising which controls to configure for better security. This is the good part.
What's my experience with pricing, setup cost, and licensing?
Regarding the price, it's comparable to other service providers. We've also looked at Check Point's offerings, and the pricing doesn't seem to be an issue.
We pay for it monthly, and I don't find it expensive. Microsoft's pricing is quite reasonable. It is normal.
What other advice do I have?
To use it effectively, one would need to purchase a dedicated email security solution. Microsoft does offer its own email security policies but lacks some features like a comprehensive dashboard. It's advisable to opt for a third-party solution that provides dedicated and robust email security.
Overall, I would rate the solution a seven out of ten.