Proofpoint Email Protection OverviewUNIXBusinessApplication

Proofpoint Email Protection is the #1 ranked solution in top Office 365 Protection tools and #2 ranked solution in top Email Security tools. PeerSpot users give Proofpoint Email Protection an average rating of 8.6 out of 10. Proofpoint Email Protection is most commonly compared to Microsoft Defender for Office 365: Proofpoint Email Protection vs Microsoft Defender for Office 365. Proofpoint Email Protection is popular among the large enterprise segment, accounting for 58% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 18% of all views.
Proofpoint Email Protection Buyer's Guide

Download the Proofpoint Email Protection Buyer's Guide including reviews and more. Updated: November 2022

What is Proofpoint Email Protection?

Proofpoint Email Protection is a machine learning email gateway that catches both known and unknown threats. Through Target Attack Protection, emails will be analyzed and potentially blocked from advanced threats while users gain visibility around these threats. The technology can also classify various types of email and can be deployed both on premises or as a cloud service. In addition, users can tag suspicious emails to help raise user awareness and track down any email quickly.

Proofpoint Email Protection offers Advanced BEC Defense, which can precisely detect and block different types of emails, even if they don’t involve a malicious payload, such as business email compromise (BEC). Email Protection, which is powered by NexusAI, is a sophisticated detection technique developed to stop a variety of kinds of email fraud from affecting compromised accounts. It’s specifically designed to analyze message components, such as the sender’s IP address (including reputation and x-originating IP), the message header, and the message body. Using machine learning and AI, it will then determine if that message is a BEC threat.

Benefits of Proofpoint Email Protection

Proofpoint Email Protection is a favorite for organizations looking to utilize their cybersecurity budget accurately, and provides the user with incredible visibility. While preventing email fraud, the technology can also detect and block advanced malware as well as identifying possible risks.

Email Protection offers many benefits, including:

  • Email warning tag - Raise user awareness and reduce the risk of possible compromises by automatically tagging suspicious emails.

  • Gain granular control of unwanted email - Gain control over low-priority emails through granular email filtering, which can pinpoint gray mail, like newsletters and bulk mail.

  • Multi-layered detection - Defend against continuous evolving threats with reputation and content analysis. Email Protection offers a dynamic classification of various emails, including malware, spam, phishing, imposter threats, and bulk email.

  • Smart search - Track down an email based on dozens of search criteria in seconds. Smart search also provides the ability to trace where emails came from.

Reviews from Real Users

Proofpoint Email Protection enables business continuity capabilities through their machine learning, AI-powered email gateway. With its innovative approach toward detecting, analyzing, identifying, and blocking advanced threats, users can gain unique visibility into their business data environments. Users especially like the ability to block spam, as well as the business email compromise protection.

An anonymous reviewer who is a principal consultant at a tech company, notes, "Proofpoint is the main tool for blocking spam because it denies the connection altogether."

Sridhar R., a security professional at Qatar Computer Services WLL, writes, "The most valuable features are the business email compromise protection and targeted attack prevention."

Proofpoint Email Protection was previously known as Proofpoint Enterprise Protection.

Proofpoint Email Protection Customers

Blocket, University of Waterloo, Lincoln Memorial University, WellSpan Health, U-Haul, Carestream Health, Westinghouse

Proofpoint Email Protection Video

Proofpoint Email Protection Pricing Advice

What users are saying about Proofpoint Email Protection pricing:
  • "The licensing is basically $8/user."
  • "The solution uses a licensing model that is reasonable compared to other products."
  • "Proofpoint is fairly expensive."
  • "It is on a yearly basis. Their floor for SMB doesn't matter. The user count is 100 users and below at $2,500 a year. Its cost is higher than other solutions. It is probably about 20% to 30% higher than what you would get with Microsoft. There are no additional costs. All costs are factored in. It can be improved pricing-wise so that it is affordable for the SMB market."
  • "It is multiple times more expensive, which made it very much less attractive."
  • Proofpoint Email Protection Reviews

    Filter by:
    Filter Reviews
    Industry
    Loading...
    Filter Unavailable
    Company Size
    Loading...
    Filter Unavailable
    Job Level
    Loading...
    Filter Unavailable
    Rating
    Loading...
    Filter Unavailable
    Considered
    Loading...
    Filter Unavailable
    Order by:
    Loading...
    • Date
    • Highest Rating
    • Lowest Rating
    • Review Length
    Search:
    Showingreviews based on the current filters. Reset all filters
    Information Technology Help Desk Technician at a consumer goods company with 51-200 employees
    Real User
    Top 20
    Flexible, very secure, and offers excellent technical support
    Pros and Cons
    • "The solution offers very good flexibility. You can blacklist or whitelist with ease."
    • "The Secure Mail aspect should have an Outlook add-in, instead of an external dashboard that outside users have to access."

    What is our primary use case?

    We use it as a corporate or as an exchange email filter to protect, to stop any executables from coming through email, and to halt phishing scams. Basically, the product is for email security. We use it for our network.

    Also, if a user thinks that they didn't get an email, we can access the Proofpoint dashboard and go find missing mail that either people didn't get so we can rerelease it to them. Or if it did get quarantined, we can release and approve a sender.

    You can blacklist and whitelist sender lists. If you are getting phishing scams that get through the filter, you can end up shutting those down. You can actually block the entire domain so that domain can never email you ever again. 

    If there is an external email outside of your network or your company, you can whitelist them if it's an unknown sender, so you don't ever have to worry about missing their emails. 

    How has it helped my organization?

    We had an attempt for a ransomware attack and we were able to block them through Proofpoint Essentials. It's keeping us very safe. Our antivirus shut down the first one and then when the attacker tried again, we were able to block and cease all attacks. In the end, we didn't end up becoming a victim of a ransomware attack.

    What is most valuable?

    The solution offers very good flexibility. You can blacklist or whitelist with ease.

    Their entire dashboard is excellent. It's completely user-friendly, it's easy to navigate. Anything you need to get done, you can do right from the dashboard, which is incredible. 

    What makes it so easy is the features of Proofpoint and how secure it is. 

    You could have no IT experience and go in there and control Proofpoint. If your company says "Hey, we need somebody to control Proofpoint," you could hire a kid out of high school to learn it. That's how easy it is.

    What needs improvement?

    The Secure Mail aspect should have an Outlook add-in, instead of an external dashboard that outside users have to access. If we send a payment to one of our customers or an ACH or a form to fill out, they have to go through this entire subscription process on a separate website to read the secure mail.

    It should be like Ignite, where you can access the internal portal so then our customers aren't having to go through all these hoops just to read an email that we're trying to send them securely. That would be the one thing I would change. Basically, the Secure Mail portal wouldn't be its own portal; it would be an add-in.

    Buyer's Guide
    Proofpoint Email Protection
    November 2022
    Learn what your peers think about Proofpoint Email Protection. Get advice and tips from experienced pros sharing their opinions. Updated: November 2022.
    653,757 professionals have used our research since 2012.

    For how long have I used the solution?

    I've been using the solution for two years and the company itself has used it for five.

    What do I think about the stability of the solution?

    The solution is 100% stable. It's incredible. We haven't had any issues with it. No downtime, no hiccups. Obviously, it's not going to catch everything, however, we have the ability to go in there and block stuff that it does miss. It's an incredible solution.

    What do I think about the scalability of the solution?

    The scalability capability is based on the packages. We're not at the highest package, however, from what I've read, it's got some incredible scalability. With our package, it does everything we need and we have over 200 users.

    It does more than what we need it to. There's stuff we don't even use as we don't use those capabilities of it. The scalability would be incredible as with 200 users we still don't touch all of its features.

    As far as I know, we'll continue using it. The company has been happy with it for over five years and I've been around it for two years and it doesn't seem to be going anywhere. Now that we've added Secure Mail, it's really probably not going anywhere.

    How are customer service and support?

    I'd rate technical support eight out of ten.

    You pay for what you get, and we didn't pay for the enterprise tier, so we're in a middle tier. Sometimes it does take 24 hours to hear back, however, if it's a high priority that they'll call you within 30 minutes. It's pretty incredible how prompt they are. 

    Once you do get a hold of them, it's not like, "Okay, well, we'll look this up and we'll call you back." No - they sit there and they'll work you through it. They'll remote into your machine if you need them to. They're excellent.

    Which solution did I use previously and why did I switch?

    I haven't previously used any other solution. Before, the company only used the security features in Exchange Online admin center, which obviously wasn't as secure as they wanted it to be. That's why they went to Proofpoint.

    How was the initial setup?

    The initial setup was straightforward. It's real easy to integrate with Active Directory exchange online. You just pretty much point and click and follow the prompts and it's there. Now, some of the whitelisting, you would have to have some experience, however, not too much. You would want someone knowledgeable to just navigate some of the approved domains and stuff like that to whitelist IPs as that portion was a little more work. 

    It probably took about six hours to whitelist IPs. The deployment is a moderate amount of work, however, not much, not a lot.

    We didn't do a very complex setup since most of our users are silent users. They have it, however, we don't allow them access as we don't want them to be able to release something onto the network. It probably was a six-hour job to just get everybody added in from Active Directory and integrated into the system.

    The maintenance is basically two people. It's all it really takes. It really only takes one person, however, there are usually two of us here that can access it and go in and clean stuff up. And as far as the roles, there's not really assigned roles for who goes in and does what. As far as users, they're silent users and active users, and only active users can actually access the portal, and then the administration is the only one that can change settings.

    What about the implementation team?

    We did use a consultant to help us with the implementation. Our network admin did most of the work, however, the consultants were there just to guide us through it, just in case we hit a hiccup, which we didn't. 

    The consultants were great. They were easy to work with. They were prompt in responses.

    What was our ROI?

    The biggest ROI for us was when it stopped a ransomware attack. It could have cost us a ton of money. It could have been detrimental to the company. It basically paid for itself right there.

    What's my experience with pricing, setup cost, and licensing?

    The licensing is basically $8/user. We pay yearly, however, they do allow for month-to-month billing.

    It's just a straight licensing fee. For support, you'll pay extra for that. If you want to move up to a higher tier, I don't know how much it is, however, I know you pay more to get a higher level of support. Tier One support is way cheaper than Tier Four. You are paying pretty much to have your own project manager. Proofpoint literally assigns someone to you. When you call, it's getting taken care of by his or her team. That's pretty expensive, however, I'm not sure of the cost.

    What other advice do I have?

    I'd advise users to get the package with the Secure Mail feature and then make sure that you whitelist all your important IPs and then add domains of all known users, so you don't run across any blocked or missing mail.

    Our users have learned to be more careful and look for more phishing attempts from it, because now they know what a normal email should look like instead of, "Hey, here's a link you need to update your password." And then just clicking away. Through this they've been able to see, because we can show them, "Look, this is blocked, this wasn't, here's why." Right. So we've been actually able to teach that culture and teach the hesitancy. With this solution, our users have become much more informed.

    I'd rate the solution at a nine out of ten. It's a great product and they have great customer service, a great support team.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    Senior Information Security Analyst at a healthcare company with 1-10 employees
    Real User
    Powerful data analysis with robust algorithms, machine learning, and strong rules
    Pros and Cons
    • "The Phish Alarm button allows users to submit questionable emails for review and complete analysis."
    • "The solution's server console and cluster dashboard have been the same for four years so need to be upgraded."

    What is our primary use case?

    Our organization is large and has multiple entities that use the solution. 

    Our department includes two senior information security analysts and two network analysts. We use the solution and as our main security filter for 90% of emails. Emails come into the domain, hit the gateway firsthand, and the solution filters for spam, phishing, malware, and virus attachments. 

    The TAP service integrates with the PPS API connection and analyzes every bit of email that goes through the system. Troublesome domains are blocked automatically without needing to be analyzed. If a specific email address is not blocked, the email gets released. TAP still analyzes the email, identifies whether it is a threat, and details its attributes such as the IP address, subject and content, and URL name. 

    All metadata for a threat email is sent from TAP to TRAP which goes back to the user's mailbox and automatically pulls the email so that it disappears. TRAP also identifies if the email has been distributed, even to 10,000 users, and attempts to pull back all instances. TRAP can pull internal emails but not external emails because it does not have access to external systems. 

    How has it helped my organization?

    Our company uses the solution to its fullest potential. 

    A organization's security culture and investment defines how extensively they will use the solution. For example, Bank of America is a big company where security is important so they will spend millions of dollars improving their product. A smaller company with just 10,000 users might only do a certain level to improve.  

    Spam scoring is a feature for which usage varies. The solution scores emails from zero to 100 and companies can decide the level of acceptance. A level of 70 might block too many emails so users will complain. If you have 2,000 users, the complaints might cause you to loosen the rating constraints to 85 or so. 

    What is most valuable?

    The solution's whole server is valuable because has robust algorithms, AI that learns what goes through a company's email server, and strong rules for analyzing data. Competitor's products are just standard email filters that block or pass with no ongoing AI for learning. 

    The security is very strong and comparatively better than Cisco CES. For example, in the last six months there has been an uptick in phishing campaigns or malicious email attachments purporting to come from Geek Squad. I see a substantial number of these troublesome emails pass through CES, Barracuda, and Mimecast but I have not seen a single email pass through the solution. 

    The Phish Alarm button allows users to submit questionable emails for review and complete analysis. A submitted email is analyzed in the cloud sandbox and the results are provided along with the actual email. Substantial information is included in this dynamic analysis such as email details, URLs, links, domains, ages of accounts, and what the email is intending to do. No other product offers this type of built-in email analysis. I have reviewed three different products including Cofense and they all send the email with its metadata to the user's security response team for manual review.  

    What needs improvement?

    The solution's server console and cluster dashboard have been the same for four years so need to be upgraded. There is no feature-rich dashboard so searching emails is cumbersome and slow. The way Facebook, Gmail, and LinkedIn looked five years ago is not the same as today. Everything today is feature-rich and user-friendly. 

    An alternate interface with a newer dashboard was created, but logging in there does not allow you to see everything in your cluster. I have 50,000 users and can search emails from the new user-friendly dashboard but I also want to do this in the cluster.

    For how long have I used the solution?

    I have been using the solution for four years. 

    What do I think about the stability of the solution?

    The solution is very stable with no issues in six years. I never have situations with the cloud going down or email going haywire. However, I have seen other products have these issues. 

    For example, Barracuda Email Security is used by one of our entities. Something happened with the DMS record and domain they gave to a customer so email stopped flowing. The customer had to wait for Barracuda to fix the issue because the system was entirely broken and could not be fixed by turning off filters. 

    What do I think about the scalability of the solution?

    The solution is scalable depending on your licenses. 

    For example, you can easily scale from 1,000 to 20,000 users. You can add nodes and increase your cluster from 256GB to 10TB. 

    How are customer service and support?

    Technical support is excellent, very easy to access, and fast. It is easy to chat with support via the online community portal. They will point you in the right direction during chat sessions or set up a call with a support agent. 

    Which solution did I use previously and why did I switch?

    This is the first solution our company has used. 

    How was the initial setup?

    The deployment process is pretty easy. 

    The solution builds your cluster in the cloud and gives you a gateway, URL, MX records, and IP addresses. You then set up your DMS and MX records for your cluster and tie it to your email gateway. The process is pretty simple and can be done within a week. 

    Suppose all your emails and servers are from Microsoft 365 with mailboxes in the cloud. Once your domain is on the solution's cluster, it needs to be connected with the Microsoft email gateway. Think of a pipe where water goes from one end to the other. The solution sits at the entrance of the pipe to filter out bad particles. Filtered items go into the pipe or Microsoft's email gateway. Down the pipe there is an open tap which pours right into the user's glasses. 

    What about the implementation team?

    We implement the solution for customers. Implementation takes one to three people depending on the size of the organization. 

    Our team handles any ongoing maintenance which is minimal. 

    What's my experience with pricing, setup cost, and licensing?

    The solution uses a licensing model that is reasonable compared to other products. I rate pricing a nine out of ten. 

    Which other solutions did I evaluate?

    I appreciate the solution because it is purely for email security. 

    Cisco CES focuses on many things such as networking domains, firewalls, the DMS, and the cloud but email is not their forte. 

    McAfee is known as an antivirus but no one really knows their email capabilities. 

    Barracuda Email Security and Web Rules are competitors but I prefer the solution. 

    What other advice do I have?

    The solution is a great product and the best existing option in 2022. You will be very happy with the solution's security features. 

    I rate the solution a nine out of ten. 

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    Flag as inappropriate
    PeerSpot user
    Buyer's Guide
    Proofpoint Email Protection
    November 2022
    Learn what your peers think about Proofpoint Email Protection. Get advice and tips from experienced pros sharing their opinions. Updated: November 2022.
    653,757 professionals have used our research since 2012.
    Principal Consultant at a tech services company with 201-500 employees
    Real User
    Top 5Leaderboard
    A reputation-based service that denies the connection from known malicious sites
    Pros and Cons
    • "Proofpoint is the main tool for blocking spam because it denies the connection altogether."
    • "It's scalable, but the devil's in the details — you have to know your email volumes."

    What is our primary use case?

    We use this solution as a firewall for our email environment; it's basically a reputation-based service. It denies the connection from known bad sites. That's the biggest protection they have when you go to the antivirus and anti-spam modules. They even have an encryption piece in it.

    What is most valuable?

    There's Microsoft Office 365 email protection. The one good thing they have over Microsoft is their incredible search engine. That's why our clients like it. They like the search engine because they can search anything to do with their messages incredibly easily. This allows them to find troubleshooting issues. That's a big selling point.

    There are some tools within it that are amazing. Even from a configuration standpoint, it's a hardened system. It's never been penetrated, so that's another great feature about Proofpoint.

    They handle combined attacks. Defender for Office 365 does this as well. For instance, if you have an obfuscated URL embedded into an email and the email looks very legitimate, they can track that. Provepoint offers the same flexibility when combined with Office 365 as well. You can do your spam scores, and you can set up policies for people. From here, they can make a decision whether to select a spam policy or not. You can do the same thing with a lot of products, but Proofpoint makes it easy.

    They all have quarantines where you can release messages. They're all very on par with each other. However, if you don't have Defender for Office 365, the feature parity is just not there. But there are lots of selling points, Proofpoint, in particular, takes care of. Still, they have a business continuity piece that is lacking in the Office 365 suite.

    What needs improvement?

    Not one of them is one hundred percent when it comes to reputation scores. It doesn't matter which solution — none of them are. Not one of them is a hundred percent on false negatives or false positives.

    Proofpoint scores way up there along with Cisco. You used to have a choice with Proofpoint which one you use. They may be using multiples now, too. Proofpoint is the main tool for blocking spam because it denies the connection altogether.

    I know for a fact that I can set Proofpoint up to what they call SYN attacks. SYN attacks basically open a connection, and then a handshake starts, and thousands of connections form. So, Proofpoint waits for a timeout to occur and then allows you to tie up all your connections, which is basically an out-of-service attack. They have something similar in Office 365, too.

    Still, the reputation services, the antivirus modules, none of them are a hundred percent when it comes to false positives or false negatives.

    It's the whole industry. The SMTP protocol needs to be totally rewritten. It was designed in the fifties or sixties. Changing it would be very, very difficult.

    They put band-aids on it for security — that's essentially what's happened with that. That email is not secure by design because it's still using an old design from many moons ago.

    For how long have I used the solution?

    I have been working with Proofpoint Email Protection for 15 years.

    What do I think about the scalability of the solution?

    It's scalable, but the devil's in the details — you have to know your email volumes. Like anything else, you've got to know those kinds of things. You have to know email volumes, you have to properly scale it, and this is the bottom line. I've seen people do a lot of really stupid things.

    How are customer service and technical support?

    I've always had good luck with both. I think Proofpoint has always been superior — they do a very, very good job. They're a small organization though, so it's pretty tightly controlled as far as versioning is concerned. Compared to Microsoft, which is a huge organization, the lack of documentation revisions, that's where you have a harder time finding the information and connecting the dots than you do with Proofpoint.

    How was the initial setup?

    When it comes to the initial setup, you have to know the product well or get outside help; that's literally what it comes down to it. You have to know what the hell are you doing with email. Literally, I just had one client acquired a company that wanted to put Proofpoint Email Protection behind their email messaging security gateways — they don't know how to do it. If you're running M365 and you decide you want to put it behind Proofpoint, for instance, you have to know how to set up both to route email inbound and outbound, to your message security gateways.

    What's my experience with pricing, setup cost, and licensing?

    Proofpoint is fairly expensive. Most people, when they go to buy their M365 licenses, they buy them in a bundle. It's more than just email protection. It's actually lots of different protections. 

    What other advice do I have?

    You need to be able to connect the dots on what the licensing buys you and what that particular module is to accomplish. Therefore, it behooves you to get someone that understands how the product works, what each module's intended for, what the licensing entails, and the cost-effectiveness of it.

    It's one of the top products out there. Overall, on a scale from one to ten, I would give this solution a rating of nine.

    It's just got the BC feature on it. If you get Defender for Office 365 specifically, that is the key to email protection from the Microsoft product. If you don't have that, then you will either have to purchase a third-party product or buy the add-on for Defender for Office 365.

    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    Sathish Mani - PeerSpot reviewer
    Senior Manager - Cybersecurity Operations at Likewize
    Real User
    Top 20
    Mature with great targeted attack protection and good filtering
    Pros and Cons
    • "It's a mature product. It does a good job in detection."
    • "The false positives are an issue."

    What is most valuable?

    The targeted attack protection that we use has been great, as has the email filtering and the rules that we have set for Proofpoint. The quarantine capabilities are very useful.

    You can scale the solution.

    It's a mature product. It does a good job in detection. 

    What needs improvement?

    The false positives are an issue. There are many false positives that come in, which you report to Proofpoint. Sometimes they take time to update those things. They say there's an option that we can use to report false positives. However, it is not a quick remedy. You go and report it, and still, you have to take action on it and clear those emails getting blocked. It's too cumbersome. 

    We don't have the option to scan a password-protected attachment. I have to either blindly whitelist it as it will get blocked since an email with attachments normally gets scanned. We'd like to have some mechanism in place where we can scan these protected attachments or whitelist the domain.

    For how long have I used the solution?

    I've been working with the solution for two years. 

    What do I think about the scalability of the solution?

    We purchased some licenses, and we are using all of them. For us, scalability is not a problem. We have been able to scale it. 

    We have more than 5,000 people working on the product.

    How are customer service and support?

    Technical support is good. The expertise that they offer is good. The only thing that I have a problem with is we have our support operations in India and their availability for a call can be mismatched. That would normally take some time. You don't get a suitable person in the time zone available around the clock.

    Which solution did I use previously and why did I switch?

    We did not previously use a different solution.

    How was the initial setup?

    I was not there when it was deployed. We only manage at the application level.

    We do not need that many admins to maintain it. We might need three or so. Most of the time, it's only checking on the blocked emails, which are actually good emails, and sometimes if there are investigations required and maintenance, they would handle those tasks. At a minimum, you need three, depending on the size of your organization. They would maintain it for the shift, for fixed operations hours, not on a rotational basis. You might have to put in more resources if you have rotational.

    What's my experience with pricing, setup cost, and licensing?

    Depending upon your company's revenue, you can make up your mind about whether you want to invest that money or not. However, the offering is niche in the market today compared to other products, like Exchange Online Protections, which is an evolving product. It's growing. In contrast, Proofpoint has been around in the listing for quite some time, so they mature in terms of detection of suspicious emails and its email filtering system. Of course, while the pricing is rather fair, clients would always prefer to pay less. 

    I cannot speak to the exact price. 

    The price is fixed. It doesn't change according to companies. It gives you multiple package options, so you can pick what suits you. 

    You also get other add-on services, which if you've got a subject matter expert within Proofpoint, then you don't have to buy additional personnel from them to coordinate. You wouldn't need a customer success manager or somebody doing a health check for it. That might increase your cost. 

    Next time, if I get an opportunity to reapply for a license, I might think of removing some of the add-on services, which might reduce the cost or the overall price that we are paying today. I don't know the actual standalone product cost, meaning what would be the product cost alone. It's dealt with by our procurement team, or they can check with Proofpoint to see the product pricing.

    Which other solutions did I evaluate?

    I have cross-checked this solution with Defender right now. We're doing a cost-benefit analysis and seeing if it makes sense for us to use it at all or not.

    What other advice do I have?

    I'm a customer and end-user.

    We are using Proofpoint Essentials right now. 

    When you are an SME, every product company is trying to promote a product and sell it to you; however, if you don't know how it functions and its capability and effectiveness, then you probably end up buying what you need. Constantly evaluate any product you're buying. I've seen Proofpoint used in the last three companies that I worked with, so I have a lot of experience with this particular solution.

    I'd rate the solution eight out of ten.

    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    Flag as inappropriate
    PeerSpot user
    Head of IT Department at a construction company with 1,001-5,000 employees
    Real User
    Top 5Leaderboard
    I previously used Symantec and switched because the quality of support, stability, and accuracy went down
    Pros and Cons
    • "I like all the features with Proofpoint, such as how it filters the spam and marketing mail, lost reality mail, blocks phishing attacks, blocks malicious attachments, and stops phishing links. Also it can defend against the business email compromise impersonation technique. It is a complete solution for all email attacks. It filters for the bad, malicious attachments. If there is any executable file, it can be deleted. It is a good, complete solution."
    • "The reporting section could be enhanced. I like some reports but if they could allow us to create custom reports with more flexibility it would enhance the reports more."

    What is our primary use case?

    Our primary use case for Proofpoint Email Protection is for email security, to secure all the inbound and outbound emails.

    How has it helped my organization?

    The improvement was achieved by solving the problem of huge false positives and thus saving the time wasted by me in advance to check the legitimate e-mails that Symantec Messaging Gateway had stopped by mistake.

    In addition to the additional protection layers that we got in this solution, such as : URL Defense , Attachment Defense (Sandboxing)

    What is most valuable?

    I like all the features with Proofpoint, such as how it filters the spam and marketing mail, lost reality mail, blocks phishing attacks, blocks malicious attachments, and stops phishing links. Also it can defend against the business email compromise impersonation technique. It is a complete solution for all email attacks. It filters for the bad, malicious attachments. If there is any executable file, it can be deleted. It is a good, complete solution.

    Additionally, the user interface is good, it's easy to use. Whoever has good technical skills can understand it. Even the normal user can handle this solution easily. By the way, I was using Symantec Messaging Gateway. I don't recommended it at all, it makes a lot of issues. A lot of false positives were happening. So I started evaluating Proofpoint and Mimecast. Both products are okay, but I liked Proofpoint more because I saw that it has a high accuracy, offers a very good service, and their support is amazing. So as a whole product, I preferred Proofpoint. But Mimecast is also good.

    What needs improvement?


    For how long have I used the solution?

    I have been using Proofpoint Email Protection for four months.

    What do I think about the stability of the solution?

    Proofpoint is stable I have not had any issues. Their system was never down over the last four or five months. Their system is fine, perfect until now. It is okay, it's stable, without any issues.

    What do I think about the scalability of the solution?

    In terms of scalability, they have many bundles, but I only take the section that will secure my email, both the inbound and the outbound email. Now they have other advanced bundles, for example for email archiving. I didn't take it. They have other sections and other bundles, but I'm not interested in them because I have alternative solutions.

    Which solution did I use previously and why did I switch?

    I previously used Symantec. After the acquisition process, Symantec was sold to Broadcom. There are many reasons I switched to Proofpoint. The first one was that their support became very bad. If you opened a ticket they would respond after two weeks. Secondly, the quality, stability, and accuracy of their product started to be bad. So much legitimate mail was stopped by this solution which made issues with my business, even for the outbound email. I switched because of the quality of the product and the product support.

    How was the initial setup?

    The initial setup is normal. It's not complex. Yes I'm a technical guy so I didn't face any issues. For me it was okay to implement, maybe it only took two or three hours.

    What's my experience with pricing, setup cost, and licensing?

    Proofpoint is a little bit expensive. The pricing could be more competitive.

    Mimecast and Barracuda prices are cheaper than Proofpoint. But there are other vendors, like Firefly and others whose prices are not cheap. But they provided me a good price because I was a Symantec customer moving to Proofpoint. I think the price is significant, it's not too expensive but not cheap. Just a little bit expensive. But everything is included.

    What other advice do I have?

    My advice is that any customer who is concerned for his users has to look at Proofpoint. I recommend Proofpoint. You see a lot of attacks coming through emails. So I recommend Proofpoint for any customer, regardless of the size of the company. By the way, they have another product for smaller companies, the essential version. I have the enterprise version because I need more customization with more features. The smaller companies who have less than 100 users can go with the essential version, which is cheaper.

    On a scale of one to ten, I would give Proofpoint Email Protection a nine.

    Which deployment model are you using for this solution?

    Public Cloud
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    Global Account Manager at a computer software company with 51-200 employees
    Reseller
    Top 20
    Brings down malicious email reporting by over 50% and allows you to open suspicious emails in a sandbox environment
    Pros and Cons
    • "Its main defense is to stop malicious emails from coming through. There is a sandbox environment where you can open malicious or suspicious emails to make sure that they're not malicious, instead of taking the risk of having your employees do it. This is definitely something that everybody needs nowadays, especially with the rise in cyber attacks."
    • "I want Security Awareness Training in there as a package deal. A lot of companies are starting to value email security a little bit more and take it a little bit more seriously, and the great product that we link together with a lot of these sales is a training product called Security Awareness Training. It is an upsell that we do with Proofpoint, and it is definitely something that I recommend everybody with email security to look into. It would be great if Security Awareness Training is included with the email security."

    What is our primary use case?

    It serves as an added layer above your email gateway.

    What is most valuable?

    Its main defense is to stop malicious emails from coming through. There is a sandbox environment where you can open malicious or suspicious emails to make sure that they're not malicious, instead of taking the risk of having your employees do it. This is definitely something that everybody needs nowadays, especially with the rise in cyber attacks.

    What needs improvement?

    It can be improved pricing-wise. One downfall of the product from the SMB side is the pricing. Currently, everybody can't afford it. Everybody wants a Mercedes, but not everyone has the budget for it.

    I want Security Awareness Training in there as a package deal. A lot of companies are starting to value email security a little bit more and take it a little bit more seriously, and the great product that we link together with a lot of these sales is a training product called Security Awareness Training. It is an upsell that we do with Proofpoint, and it is definitely something that I recommend everybody with email security to look into. It would be great if Security Awareness Training is included with the email security.

    What do I think about the stability of the solution?

    Its stability is great. There are no outages.

    What do I think about the scalability of the solution?

    Its scalability is very good. It is a SaaS solution. So, it is very adaptable. Out of my about 50 clients, more than half are using it. It is always going to be used well by customers, but we need to emphasize a little bit more on email security.

    How are customer service and support?

    They are good. I would rate them a 10 out of 10. They are responsive and very intuitive.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    Most customers switched from Microsoft. The reason why they switched over was the results. There were more and more people who were coming to them asking why something or a breach happened. We actually caught a live breach during a PoC, and it was getting through their Microsoft, but Proofpoint was picking it up.

    How was the initial setup?

    It is pretty straightforward. Its deployment is done by Proofpoint. It takes less than a day.

    What about the implementation team?

    Its implementation is done through Proofpoint.

    What was our ROI?

    Our clients have definitely seen an ROI. Their level of breach and reporting of malicious emails from their user base actually went down by over 50% by using this product. That's over a two-year span for emails.

    What's my experience with pricing, setup cost, and licensing?

    It is on a yearly basis. Their floor for SMB doesn't matter. The user count is 100 users and below at $2,500 a year.

    Its cost is higher than other solutions. It is probably about 20% to 30% higher than what you would get with Microsoft. There are no additional costs. All costs are factored in.

    It can be improved pricing-wise so that it is affordable for the SMB market.

    Which other solutions did I evaluate?

    They didn't evaluate any other solution.

    What other advice do I have?

    We get no complaints, and that's why we sell it. It has been very good. I would recommend this product to everybody. It doesn't matter whether you are a large business or a small business. You need it no matter what. Going forward, it is going to be the norm to have something more than just your basic email protection because the SEC is actually catching onto a lot of these bad actors. As per the survey, the number one risk for companies was their own employees clicking something. It is a good story I tell my customers, and just like that, they're purchasing from us. It is an easier sell. It isn't hard to sell. Your average sales cycle, from PoC to close, on this one is most likely going to be within the 90-day period.

    It is overall good. I would rate it an 8 out of 10.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
    Flag as inappropriate
    PeerSpot user
    Chief Information Officer at a consumer goods company with 51-200 employees
    Real User
    Top 10
    Reliable, scalable, protects your email from threats, and has good support
    Pros and Cons
    • "The setup was easy."
    • "I would want better spear phishing protection in the essentials package."

    What is our primary use case?

    I am the CIO, I have consultants.

    We use Proofpoint Email Protection to filter out malicious emails.

    How has it helped my organization?

    We have a lot fewer malicious emails coming in since implementing this product.

    What is most valuable?

    The setup was easy.

    What needs improvement?

    It was easier to use Microsoft than Proofpoint.

    We had some issues with their sales consultant. We got into a dispute and he ended up leaving the company. It's unknown if he was unhappy being at the company, or if it was a reflection of the company, but I can say that their sales consultant was not good.

    I think they have everything that I would want in the advanced version.

    There are certain things, I would want. I would want better spear phishing protection in the essentials package.

    For how long have I used the solution?

    I have been working with Proofpoint Email Protection for two years.

    It's a subscription, and we are always using the latest version.

    What do I think about the stability of the solution?

    The stability is fine.

    What do I think about the scalability of the solution?

    The scalability is good.

    I am going to reiterate. To move to a more sophisticated email security solution was cost-prohibitive. When you compare it to others, it was too expensive.

    All users of the company, all departments were using this solution.

    How are customer service and technical support?

    The technical support was okay. I think it was good, although it wasn't outstanding.

    It would be excellent, f they had chats and instantaneous responses. That would make it better.

    We always struggled with getting on the phone with someone.

    Which solution did I use previously and why did I switch?

    We were able to get the same security levels using Microsoft that we were getting with Proofpoint.

    With this company, we used Proofpoint straight out of the gate.

    We have now switched to Microsoft. The features were definitely there. It was more integrated; people don't have to go to a different website to see what was quarantined. They can see it right in their account on Outlook.

    Microsoft is easier to use, it's more integrated, and it's cheaper. It was cheaper than their advanced module, for sure, but it was comparable to their basic package.

    How was the initial setup?

    The initial setup was straightforward. It was easy to set up.

    It took few hours to set up. It was really quick.

    We have an admin that would go in to see what was quarantined every now and again a quarter of full-time equivalent approximately 10 hours a week.

    This solution was being used every day, 24 hours a day.

    What about the implementation team?

    We used a consultant to deploy the solution.

    I have had a relationship with this consultant for more than 20 years. If I keep a consultant for that long it's because they are worth their weight.

    It is always a pleasant experience working with them.

    What was our ROI?

    For sure, we have seen a return on investment. It does what it's supposed to do, which is to protects you.

    If Proofpoint was the only product out there, I would gladly pay for it. It would be fine and good. But they are not the only game in town. Their competitors managed to give the same level of protection for much less.

    What's my experience with pricing, setup cost, and licensing?

    The Basic Email Coverage is pretty close to the same price as the Extended Email Security of other companies.

    To start basic at Proofpoint, let's say more expensive than other basic packages.

    To jump into the Advanced versions of Proofpoint, the costs multiply four or five times, which made it not feasible for us. Being multiple times more expensive, it very much less attractive.

    What other advice do I have?

    I would advise people to look at the options.

    It does what it says it's going to do. The only issue is the cost.

    I would rate Proofpoint Email Protection an eight out of ten.

    Which deployment model are you using for this solution?

    Public Cloud
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    Sheikh Rehan - PeerSpot reviewer
    Data Security Engineer at a tech services company with 1-10 employees
    Real User
    Top 20
    Excellent quarantining function and very powerful
    Pros and Cons
    • "Provides better control over emails, especially those sent via Office 365 on the cloud."
    • "Integration for reporting needs to be improved, it's too complex."

    What is our primary use case?

    Our primary use case is the encryption tooling of email security. Emails sent externally are automatically encrypted as is all the information included. There are some DLP related options available in Proofpoint, which we enabled with the help of classifying the emails, like internal, external, private, public, sharing. That's our main use. We are customers of Proofpoint.

    What is most valuable?

    The value for us is that we now have much better control over emails, especially those sent via Office 365 on the cloud. We've configured it so that all emails go to Proofpoint and are quarantined or encrypted. I believe the quarantine email function is very rare to find in other solutions. It's a powerful tool and I believe cost effective.

    What needs improvement?

    Integration for reporting needs to be improved, it's a little complex. Right now we have integrated with Power BI to get logs and information from Proofpoint. That has to be improved with the API and there are also latency issues which need to be simplified and improved. Those are the areas I've observed that need improvement. 

    What do I think about the stability of the solution?

    The solution is hosted by Proofpoint on Amazon AWS, with some on servers on-prem. We've done the load balancing and I believe it's pretty strong now. We haven't experienced any issues. 

    What do I think about the scalability of the solution?

    Scalability is good, we have around 100,000 employees. For now, we have implemented two data centers. It covers 60% of traffic. We're moving ahead so that by the end of the year we'll have 100% implementation. 

    How are customer service and technical support?

    Technical support is relatively good although the solutions and ticketing system requires a lot of improvement.

    Which solution did I use previously and why did I switch?

    We were previously using Symantec but switched to Proofpoint because Symantec didn't offer the email quarantine function. Cost was another issue with Symantec being a more expensive solution. But the main reason we switched was because we were looking for more control over the cloud email, especially with the sensitive information we have. 

    How was the initial setup?

    The initial setup was a mixed experience. Nothing is simple nowadays and we were dealing with both cloud and on-prem, dividing the load blancing. As a result, it's taken almost six months to get full implementation. We were testing for a lot of that time. We initially implemented only in the cloud. And later on we integrated it with the reporting applications, and lastly we implemented on-prem. We are a team of seven, and implemented ourselves. I did a lot of demos and trainings which helped us a lot when it came to deploying ourselves.
    We now have around 10 staff who have access to the administration portal; the project manager, a couple from the messaging team, architects, and security engineers. 

    Which other solutions did I evaluate?

    We evaluated Forcepoint and McAfee but both dropped out in the middle stage and we moved on to testing with Proofpoint. Both solutions had an easy environment, with an easy to configure and straightforward dashboard. However, when it came to security controls, including inscription and quarantine options, those things were more available in Proofpoint. 

    What other advice do I have?

    We've observed that we have almost 99.9% control over our emails now in an easy to configure and easy to implement solution. It's simple and easy for the administration as well. We're looking forward to any upgrades or updates they provide. I recommend this solution if it suits your needs and requirements. If you have concerns about data floating in emails, it's a good solution. If that's not an issue then you can choose something else.

    I rate the solution nine out of 10. 

    Which deployment model are you using for this solution?

    Hybrid Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    PeerSpot user
    Buyer's Guide
    Download our free Proofpoint Email Protection Report and get advice and tips from experienced pros sharing their opinions.
    Updated: November 2022
    Buyer's Guide
    Download our free Proofpoint Email Protection Report and get advice and tips from experienced pros sharing their opinions.