Senior Managing Consultant at a tech vendor with 10,001+ employees
Real User
Top 20
Jun 25, 2026
My advice to others looking into using Mimecast Advanced Email Security is to learn how it works before getting into the tool, which will provide a good understanding of its functionality and benefits. I would also suggest looking into other solutions to compare their cost-saving and efficiency aspects, as there are many options available today. I would rate this review an 8 out of 10.
System Engineer II at a media company with 5,001-10,000 employees
Real User
Top 20
Jun 24, 2026
My advice to others looking into using Mimecast Advanced Email Security is that if you have a medium to big enterprise, you can definitely go with Mimecast Advanced Email Security. That is not an issue. I rate Mimecast Advanced Email Security a nine out of ten. I give it a nine because it has all the required security measures in place. Any enterprise planning to buy Mimecast Advanced Email Security will definitely find it helpful to secure their email environment. We have not used the AI capabilities with governance and data protection yet because our use of Mimecast Advanced Email Security has only involved the pre-built templates or policies. I have not used the AI-based capability yet in Mimecast Advanced Email Security, so I cannot comment on its accuracy and reliability of output. Mimecast Advanced Email Security is hosted on Mimecast itself, and we do not have any AI security enabled yet. Mimecast Advanced Email Security itself is hosted on Mimecast. My experience with pricing, setup cost, and licensing is that it is pretty fair. It is not expensive compared to other tools because we are getting enough security capabilities through data governance or email protection, and the uptime Mimecast Advanced Email Security provides for email delivery is really good.
DLP is part of most of the compliance journey for most organizations because it helps identify the PII data which normally gets sent. Sometimes you have to send it, and you have no other choice than the option of masking the data. It is this kind of a filter where you have an option to identify whether there are any passport details, customer PII data, or any source code. You have an option to hold it or encrypt it if you need to. If you still have to send it, you can encrypt and send it. You can notify your security team to check it and all that. These are features which most DLP has, and even Proofpoint has similar features. They are being pretty happy with Mimecast Advanced Email Security. The policies are decently researched and marked. They are happy and at the same time, with some of the features, they have the option to customize. That is where service providers like us come into the picture. We help them customize few of the policies, but apart from that, they have been very strong in terms of the policies and their processes. It will be straightforward. Since you have email security, you get a decent number of emails without phishing and BEC risk. They reduce dramatically. Email availability and business communication continue uninterrupted, so you have email continuity in your picture. Compliance, as I mentioned, the litigation hold and eDiscovery helps them maintain compliance. I have seen that being utilized by a few of our legal clients. For them, it is very useful. Data leakage is reduced; if you have an option to block something, encrypt it, mask it, or block it, you have less risk of data leakage. User security awareness is also important. They do have phishing simulation and security awareness trainings that help reduce human errors and maintain user risk scores. The primary thing which comes when I suggest is that people mostly go for email security features. I would still recommend people to start with their DMARC analyzer. Start from there, start your authentication, get the authentication methodology right, get the process right, and then followed by taking a product like Mimecast Advanced Email Security. I have been in this field for ten years, and in Microland, I have been for three years. Overall, I would give this product a rating of eight point five.
IT Manager at a logistics company with 201-500 employees
Real User
Top 10
Jan 21, 2026
We have been using Mimecast Web Security for quite a lot of years. Regarding the analytics part you asked and what metrics are most valuable for monitoring web activities in our case, we am not dealing with the monitoring; that's our MSP who does the majority of the monitoring on our behalf. Regarding the reporting part, I have seen the original reports from Mimecast Web Security, which seem to be quite heavy in terms of information. With the MSP, we are just reviewing and discussing what is necessary. If there is a concern, that is dealt with MSP immediately rather than waiting for formal conversations. However, I think the Mimecast report is fine and easy to read. It is hard for me to say whether the installation is easy or complex, as I wasn't involved; it was done by our MSP. I am the end customer of Mimecast Web Security, not a consultant.
My recommendation to anyone currently using Mimecast is to ensure you have established a direct communication channel with Mimecast. This is crucial in case you encounter issues, service disruptions, or downtime. Relying solely on the support team might not suffice. It's advisable to have knowledge of key individuals within Mimecast whom you can contact directly to gain insights into ongoing situations. This approach is essential, as there might be situations where reaching out to specific individuals is more effective than traditional support channels. I rate the overall solution a seven out of ten.
Learn what your peers think about Mimecast Advanced Email Security. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
Mimecast Email Security protects organizations against phishing, malware, business email compromise, and impersonation attacks, with detection built on 20 years of experience and over 1.3 billion emails inspected daily. It's available as a secure email gateway (MX-based) for full control over complex, multi-region environments, or via API integration with Microsoft 365, which deploys in hours with no MX changes. Administrators get a single console for policy management, monitoring external...
My advice to others looking into using Mimecast Advanced Email Security is to learn how it works before getting into the tool, which will provide a good understanding of its functionality and benefits. I would also suggest looking into other solutions to compare their cost-saving and efficiency aspects, as there are many options available today. I would rate this review an 8 out of 10.
My advice to others looking into using Mimecast Advanced Email Security is that if you have a medium to big enterprise, you can definitely go with Mimecast Advanced Email Security. That is not an issue. I rate Mimecast Advanced Email Security a nine out of ten. I give it a nine because it has all the required security measures in place. Any enterprise planning to buy Mimecast Advanced Email Security will definitely find it helpful to secure their email environment. We have not used the AI capabilities with governance and data protection yet because our use of Mimecast Advanced Email Security has only involved the pre-built templates or policies. I have not used the AI-based capability yet in Mimecast Advanced Email Security, so I cannot comment on its accuracy and reliability of output. Mimecast Advanced Email Security is hosted on Mimecast itself, and we do not have any AI security enabled yet. Mimecast Advanced Email Security itself is hosted on Mimecast. My experience with pricing, setup cost, and licensing is that it is pretty fair. It is not expensive compared to other tools because we are getting enough security capabilities through data governance or email protection, and the uptime Mimecast Advanced Email Security provides for email delivery is really good.
DLP is part of most of the compliance journey for most organizations because it helps identify the PII data which normally gets sent. Sometimes you have to send it, and you have no other choice than the option of masking the data. It is this kind of a filter where you have an option to identify whether there are any passport details, customer PII data, or any source code. You have an option to hold it or encrypt it if you need to. If you still have to send it, you can encrypt and send it. You can notify your security team to check it and all that. These are features which most DLP has, and even Proofpoint has similar features. They are being pretty happy with Mimecast Advanced Email Security. The policies are decently researched and marked. They are happy and at the same time, with some of the features, they have the option to customize. That is where service providers like us come into the picture. We help them customize few of the policies, but apart from that, they have been very strong in terms of the policies and their processes. It will be straightforward. Since you have email security, you get a decent number of emails without phishing and BEC risk. They reduce dramatically. Email availability and business communication continue uninterrupted, so you have email continuity in your picture. Compliance, as I mentioned, the litigation hold and eDiscovery helps them maintain compliance. I have seen that being utilized by a few of our legal clients. For them, it is very useful. Data leakage is reduced; if you have an option to block something, encrypt it, mask it, or block it, you have less risk of data leakage. User security awareness is also important. They do have phishing simulation and security awareness trainings that help reduce human errors and maintain user risk scores. The primary thing which comes when I suggest is that people mostly go for email security features. I would still recommend people to start with their DMARC analyzer. Start from there, start your authentication, get the authentication methodology right, get the process right, and then followed by taking a product like Mimecast Advanced Email Security. I have been in this field for ten years, and in Microland, I have been for three years. Overall, I would give this product a rating of eight point five.
We have been using Mimecast Web Security for quite a lot of years. Regarding the analytics part you asked and what metrics are most valuable for monitoring web activities in our case, we am not dealing with the monitoring; that's our MSP who does the majority of the monitoring on our behalf. Regarding the reporting part, I have seen the original reports from Mimecast Web Security, which seem to be quite heavy in terms of information. With the MSP, we are just reviewing and discussing what is necessary. If there is a concern, that is dealt with MSP immediately rather than waiting for formal conversations. However, I think the Mimecast report is fine and easy to read. It is hard for me to say whether the installation is easy or complex, as I wasn't involved; it was done by our MSP. I am the end customer of Mimecast Web Security, not a consultant.
My recommendation to anyone currently using Mimecast is to ensure you have established a direct communication channel with Mimecast. This is crucial in case you encounter issues, service disruptions, or downtime. Relying solely on the support team might not suffice. It's advisable to have knowledge of key individuals within Mimecast whom you can contact directly to gain insights into ongoing situations. This approach is essential, as there might be situations where reaching out to specific individuals is more effective than traditional support channels. I rate the overall solution a seven out of ten.