Proofpoint Targeted Attack Protection (TAP) vs. Sophos Email

I think it is well suited for any organization. It truly gives good insight on the email campaigns that are hitting your company, as well as the people that are being targeted the most and also VIP users such as executives or even other people in IT, cyber, or administrators.

Incentivized

I strongly believe that if you are looking for a product that does what it says on the box and has the capacity to keep your company safe, you should look at Sophos. They have consistently been at the top of their game and continue to provide a product that meets the ever-changing needs of the threat landscape.

Incentivized

• TAP allows administrators and authorized users to effectively analyze threats and identify all targets.
• The tracking (did a user open an email, did they click a link and how many times) and analytics are a great asset to have for any IT admin.
• The ability to flag specific users as VIPs or important folks you want to keep an extra measure of attention on.

Incentivized

• We could customize it to have a certain level of workflow. We manage to enforce certain email (based on key-phrases) to be quarantined before send it to the recipient. And the email needs to be approved (manually) before being released.
• For certain type (using regex) of email, we will encrypt it if it's sent outside our organization domain.
• Scalable

Incentivized

• Their admin web GUI is cumbersome and unclear in many ways. The learning curve is steep so you have to stay up on things yourself whenever a new feature or service is added.
• They sometimes add a feature to their toolbox without informing their customers. This is true even when the feature added does not cost extra.

Incentivized

• Reporting could be more granular, it's the most glaring weakness of the product.
• The ability to drill down into data from the dashboard would be very helpful for reporting as well.
• Reverse AD sync so when active directory users are removed, they are removed from Sophos as well would be helpful.

Incentivized

Not my decision, but I have made it very clear this product does not perform. I have emails from our users on how bad it is after switching to it.

Incentivized

It was easy to use and easy to implement. You don't need previous knowledge on the products, after we got this up and running, it took us hours to put everything together. The transition was easy and seamless.

Incentivized

The interface is simple to use but still contains the information needed to conduct thorough investigations. If you own licenses for other Proofpoint tools, Proofpoint Targeted Attack Protection is easily accessible from those applications. The ability to sandbox URLs within the TAP interface is a great feature as well. The overall performance of the GUI is seamless, especially if enabled with your organization's SSO.

Incentivized

The solution is very scalable, with a possibility to be customized; which means that Sophos Email can be configured depending on our own situation and context not on a general way. On the other hand, Sophos Email has a broad feature set; I mean, along with core spam and malware protection, Sophos offers advanced features such as real-time
link following, threat isolation, spoof protection, etc.

Generally have had good response and resolution time with knowledgeable technicians, and if needed the ticket is moved to someone with more expertise to better address the issue. Have used the ticketing portal, phone, as well as the beta chat feature (permanent please!)

Incentivized

I have always found the answers I have needed in the documentation or online, and have not needed to contact Sophos Secure Email Gateways' support team. This, I think, bodes well for how their software is easy to use and has good documentation when you cannot find what you need in the basic interface.

Incentivized

Proofpoint managed the installation and made it very simple. We had a dedicated installation engineer who checked in on use periodically after go-live to ensure that there were no issue.

Incentivized

While both Abnormal Security and Proofpoint Targeted Attack Protection are email-based security applications, they each have their specific strengths. Abnormal is a great "first line of defense" with its machine learning capabilities and proactively blocking malicious or spam emails. Proofpoint Targeted Attack Protection is for when applications like Abnormal Security fail and let malicious phishing emails through.

Incentivized

Many other solutions are a complicated setup and take a lot of time for the configuration. With Sophos email we were setup and seeing data/emails within an hour. As I have described the ease of use from a high-level for someone like me a Director just peeking into the system or an analyst that can do a deep dive is one of the best users interfaces I have seen for any product.

Incentivized

• The cost associated with a successful threat (such as a spoofed wire transfer) far exceeds the cost of the Proofpoint TAP system.
• It is hard to quantify the actual amount saved by threats that TAP has prevented, but I feel that it is an excellent value (and piece of mind).
• The TAP saves us money and increases productivity by reducing the amount of malicious and SPAM emails.

Incentivized

• We have prevented several cases of employees tried to steal organization's information; this has a great effect on the ROI not only in dollars but also in our reputation.
• We have used it for more than 4 years, which is more than typical technology adoption we usually do; and this is the result of the above causes (prevention of internal fraud).
• Need to have an expert of regex to accommodate more advanced DLP function/requirements

Incentivized