Download the ATP (Advanced Threat Protection) Buyer's Guide including reviews and more. Updated: September 2022
More than 90% of targeted attacks start with email—and these threats are always evolving. Proofpoint Targeted Attack Protection (TAP) helps you stay ahead of attackers with an innovative approach that detects, analyzes and blocks advanced threats before they reach your inbox. This includes ransomware and other advanced email threats delivered through malicious attachments and URLs. And zero-day threats, polymorphic malware, weaponized documents and phishing attacks. TAP provides adaptive controls to isolate the riskiest URL clicks. TAP also detects threats and risks in cloud apps, connecting email attacks related to credential theft or other attacks.
Proofpoint Targeted Attack Protection was previously known as Targeted Attack Protection .
We are using this solution for confidential files that are not to be shared with the public. We are also using it to monitor the attachments that are received from the external world and that have been directed through personal websites or personal email addresses.
Proofpoint's major module is email protection. Most of the spam emails that have been directed towards our organization have been locked by Proofpoint. So, we have escaped from threat hunters.
Proofpoint has been able to catch, to a maximum extent, the things that are sent by employees, knowingly or unknowingly, over the internet. We were alerted many times that something is not happening as per the rules.
It has a dynamic runtime engine, which gives it an advantage over Prisma that has a static engine. In Prisma, we have to do additional malware analysis, which is not required in Proofpoint.
We are using the TRAP console that has a Linux-based UI, which is not user-friendly. The TAP console looks very advanced. Currently, we are maintaining three different consoles, and it is sometimes hard to switch between them or try to grab the data.
Customization can be improved in a much better way.
The KB documents that they have published should also be improved. Their technical support should be improved in terms of response time. It can take a couple of days for the support agents to get back. Microsoft and Okta provide support in a couple of hours.
I have been using this solution for two years.
It is very stable because it is comparing all the values with the runtime engine, which is being updated on an everyday basis. In terms of stability, Proofpoint is very good.
In terms of scalability, Proofpoint is doing very well.
We have two to three issues per month. We contact Proofpoint's customer support for these issues. I am a major point of contact for support. If I am not able to resolve an issue, we will be reaching out to them.
Proofpoint can take a couple of days to get back. I also deal with other applications from Okta and Microsoft, and we get the support within a couple of hours. There is a lot of difference between a couple of hours and a couple of days. So, Proofpoint's support should be improved. Okta and Microsoft are also able to do a Zoom or video call, but Proofpoint provides support only through email communication. Only if you request, it would be a Zoom or video session.
Its initial setup is of medium complexity. It is neither very easy nor very hard.
We did it ourselves.
I would first recommend Microsoft and then Proofpoint. The main reason is the console. With Proofpoint, we need to switch between different consoles, whereas with Microsoft, everything can be accessed through a single console.
I would rate this solution a seven out of 10.
