Barracuda Email Protection vs. Proofpoint Security Awareness Training

I would definitely recommend it due to the decent pricing. I wish the MS built-in M365 tools were better, but Barracuda does a good job of taking their place. For industries that need DLP on their email, like healthcare, banking, and education, Barracuda provides a reliable product for a good cost. The additional services you get, malware/AV filtering, URL filtering, spam protection, business continuity, those are all icing on the cake. The only issues we've ever really had with them is that it will sometimes take a back/forth string of emails and decide randomly to encrypt it, so what was a flowing benign conversation is now locked behind a wall for recipients. As the sender, you have no idea when it's going to decide to do this and have to remember to tag emails with a decrypt tag long before it happens or face the consequences

Incentivized

I think that Proofpoint is the best product on the market for Security Awareness Training. They make it easy, they have taken all the guess work out of it. You are supplied with everything you need to have a successful program and you don't have to be a "teacher" to do this. They have taken all of the guess work out of it.

Incentivized

• The software helps us create emails that look exactly or almost exactly the same as the phishing emails we found in our email gateway.
• We already use the ESS gateway from Barracuda Networks, and in the TEP bundle, this software is included, so it's not that much work to also configure this.
• In the software, we can see reports on how our users performed. We can make a selection of users that are more prone to click on "false" links, and this way, we can help them individually.

Incentivized

• The report phish Outlook add-in button has had a positive influence on our users. We have many users regularly reporting suspect phish emails.
• The templates for the phish campaigns are very up to date, using real life recent phishing attacks. This makes our phishing campaigns much more realistic.
• The training modules from PSAT are very effective and useful with our LMS system.

Incentivized

• The #1 feedback I receive from users is that they have limited time for training. It would be nice if the training would be offered in 3-time categories (e.g. up to 3 minutes, up to 5 minutes and up to 10 minutes). This way user's can select a category that matches their availability.

Incentivized

• The platform provides options for many different reports (with some customization options), however, there are reports that I would want that are not available.
• Adding new staff (we have a lot of turn-over) into an existing training plan can be cumbersome for the system administrator. Although End-User Sync can be set-up to "add" new users to the system, the new users still need to manually be added to the assignments and sent past assignments to complete. (NOTE: this was made more difficult because of our decision to implement a training plan the way we did).
• Some of the ThreatSim campaigns (simulated phishing or malicious attachment emails) will only work if you are using their PhishAlarm plug-in (add-on button for Outlook, etc. for users to easily report suspected threats). Our users access email by iPhones, Android, iPads, PCs, and Macs. PhishAlarm cannot be used for all of these platforms.

Incentivized

Although cost competitive, we still feel like we are not digging deep enough to train our staff. We have little to no way other than digging through reports that have not proven to be adequately documented (hey you, Barracuda campaign reports) to identify and require users to take more training who have not passed their requirements.

Incentivized

• The product is great for what we use it for
• We have a good relationship with our vendor/Proofpoint, which I believe is needed to be successful in Security Awareness and using tools like this
• The package/service as a whole is incredibly helpful
• The integrations with Proofpoint's Trap is one of the most valuable things we could do. It turns your entire email user base into members of IT security, to be on the look out to report cyber attacks, and have them pulled out of everyone's email if the email is condemed/found malicious.

Incentivized

Regarding usability, we like it to be an easy solution to implement and configure on the server. Routine backups are made frequently and reports are issued for control and analysis by information security teams. It has great integration with the cloud and encryption.

Incentivized

Overall, PSAT is integral to what we do. PSAT is a helpful tool to help us improve our employees ability to recognize, report, and respond to phishing. It works for us to use a longterm partner, who is incredibly helpful/supportive, and also bringing Proofpoint's greater cybersecurity & attack intelligence into PSAT. Honestly, we are pretty happy and would make the choice to go with PSAT again (we evaluated the major players in the space via Gartner's Magic Quadrant). The team behind the products are excellent and the product of itself is both intuitive and expansive. This combination allows us to reach our 10k+ employees who are located in over 20 countries

Incentivized

I have not had to use customer support yet which goes to show the effectiveness of the program. It also shows how easy the program is to use for the average person with no experience using this type of program. Our IT department also does a great job at teaching us to detect emails with malware that in combination with this software issues rarely arise even though we have over 500 employees.

Incentivized

I have never had any issues with receiving support and have always had my questions answered in a timely manner. When we do have suggestions, the support has been ready to step in and provide advice or take our suggestions seriously. But normally, there aren't any issues that come up when using this product.

Incentivized

It was "stupid easy" from the technical side.

We really didn't evaluate any other products. We considered using the filtering features that come with our Office 365 subscription, but just didn't feel it was sufficient protection for our business. Being a medical clinic, we felt like we needed to implement the best solution for our email protection and we found Barracuda Essentials was the leader.

Incentivized

The "Managed Service" (a dedicated ProofPoint Account Rep c/w weekly status calls) significantly reduces the resource demand on the area within your company managing the program. The KnowBe4 Platform does all the same stuff (Training Modules, Reports, ThreatSim Tools), but you (or your staff) need to do considerably more work to manage the Overall Program. The uplift in cost for this service is minimal.

Incentivized

• This tool was supplied free with out Email Security, so its come at no cost
• This tool has helped us meet requirements by our insurance to train users on the risks of phishing
• However, the dated interface slows down what should be seamless adoption

Incentivized

• I don't think there are hard and fast numbers when it comes to Security Awareness ROI, as it would be next to impossible to come up with any defined metrics.
• Phishing campaigns vary in their effectiveness, what I've found is that there is always something that will trigger your employees to click. Finding what that is for your company can help you train everyone to see the red flags.

Incentivized