IRONSCALES is presented as a Self-Learning Email Security Platform To Proactively Fight Phishing Attacks, from the company of the same name in Atlanta.
$0
Proofpoint Targeted Attack Protection (TAP)
Score 9.1 out of 10
N/A
Proofpoint Targeted Attack Protection (TAP) helps organizations efficiently detect, mitigate and respond to known and unknown advanced threats that target people and VIPs through email. TAP provides unparalleled effectiveness in stopping targeted attacks that use polymorphic malware, weaponized documents and credential-stealing phishing techniques to obtain sensitive information. TAP seamlessly integrates with the Proofpoint secure email gateway (Proofpoint Email Protection) to deliver best…
When deploying to a client who is very sensitive to email routing disruptions like those that can occur by putting an email filter in front of the email server, IRONSCALES deployment is extremely simple. It hooks into the user's mailbox, and not only filters point forward but a number of days back.
Proofpoint Targeted Attack Protection is a great security application for notifying our team about when our users click on malicious links. It provides a good explanation of the attack scenario, including the Sender, Subject, as well as other users that this attack has been sent to. It is also very useful in helping provide metrics on what types of attacks have been sent to the organization historically.
Their admin web GUI is cumbersome and unclear in many ways. The learning curve is steep so you have to stay up on things yourself whenever a new feature or service is added.
They sometimes add a feature to their toolbox without informing their customers. This is true even when the feature added does not cost extra.
The interface is simple to use but still contains the information needed to conduct thorough investigations. If you own licenses for other Proofpoint tools, Proofpoint Targeted Attack Protection is easily accessible from those applications. The ability to sandbox URLs within the TAP interface is a great feature as well. The overall performance of the GUI is seamless, especially if enabled with your organization's SSO.
Generally have had good response and resolution time with knowledgeable technicians, and if needed the ticket is moved to someone with more expertise to better address the issue. Have used the ticketing portal, phone, as well as the beta chat feature (permanent please!)
Proofpoint managed the installation and made it very simple. We had a dedicated installation engineer who checked in on use periodically after go-live to ensure that there were no issue.
Postini, Windows Defender (built into M365) & Trend Micro email security. Postini was purchased by Google and then went away. Trend Micro was very basic at the time I used it (many years ago) and utilized purely blacklisting tech but that was before the AI boom. Windows Defender is not as multi-tenant friendly.
This is the first product of its kind that I've used personally. The last 3 companies that I worked for also used Proofpoint, which includes Proofpoint Targeted Attack Protection, so I don't have a way to really compare it. I have seen that it is a leader in the industry.
Understanding its limitations with regards to cyber security education campaigns
Rigid domain lists. Might be attributed to how we purchase through a distributor but if a client needs to add a monitored domain name, it must be requested instead of allowing me to do it myself.
Unclear if there have ever been any outages or service disruptions. Since it is monitoring mailboxes and not routing email, there is no outage client side. This could be a benefit but it also means end users might be unprotected during an outage.
Saves IT time when an attack is successful and isn't reported in a timely manner or at all until damages are done. IT has to spend less time and effort because we are able to stop it before it spreads.
Protecting business resources and assets is a huge positive impact. TAP allows us to better protect our business and information within.
The only negative thing is that it doesn't automatically handle these attacks - but that is what TRAP is for! I wish Proofpoint bundled TAP and TRAP.