Sophos Email vs. Trellix Email Security

I strongly believe that if you are looking for a product that does what it says on the box and has the capacity to keep your company safe, you should look at Sophos. They have consistently been at the top of their game and continue to provide a product that meets the ever-changing needs of the threat landscape.

Incentivized

It has a very good feature of URL replace, it helps us to block or prevent spam, phishing, or malicious emails. It has some limitations like if some large or lengthy emails come it takes more time to scan and to avoid delay it forwards the mail to the recipient with a warning note on it.

• We could customize it to have a certain level of workflow. We manage to enforce certain email (based on key-phrases) to be quarantined before send it to the recipient. And the email needs to be approved (manually) before being released.
• For certain type (using regex) of email, we will encrypt it if it's sent outside our organization domain.
• Scalable

Incentivized

• Blocking URL-based threats using FAUDE features.
• Post threat detection via the Retroactive feature.
• Excellent sandboxing analysis performance and detailed dynamic analysis reports.

Incentivized

• Reporting could be more granular, it's the most glaring weakness of the product.
• The ability to drill down into data from the dashboard would be very helpful for reporting as well.
• Reverse AD sync so when active directory users are removed, they are removed from Sophos as well would be helpful.

Incentivized

• Sometimes feels that console running slow.
• Riskware detection has a lot of false positive.
• The user interface is not very intuitive.

Incentivized

It was easy to use and easy to implement. You don't need previous knowledge on the products, after we got this up and running, it took us hours to put everything together. The transition was easy and seamless.

Incentivized

The solution is very scalable, with a possibility to be customized; which means that Sophos Email can be configured depending on our own situation and context not on a general way. On the other hand, Sophos Email has a broad feature set; I mean, along with core spam and malware protection, Sophos offers advanced features such as real-time
link following, threat isolation, spoof protection, etc.

FireEye Email Security is the most effective email security solution for protecting enterprises from APT. It is not complicated to set up and you can ride a wave of continuous security effects for a long time without major changes after the initial setup. It's automated, so users don't have to care too much about it. In addition, it provides detailed analysis data, so you can utilize it for 3rd party solutions if you want.

Incentivized

I have always found the answers I have needed in the documentation or online, and have not needed to contact Sophos Secure Email Gateways' support team. This, I think, bodes well for how their software is easy to use and has good documentation when you cannot find what you need in the basic interface.

Incentivized

In the years we have had this service, we haven't needed much help (which is a testament to the ease of use/reliability of the product) but when we have they have been probably the best vendor I've ever dealt with when it comes to quickly addressing support call issues. We also have a very readily available engineer that has been quick to help with more complex requests.

Incentivized

Many other solutions are a complicated setup and take a lot of time for the configuration. With Sophos email we were setup and seeing data/emails within an hour. As I have described the ease of use from a high-level for someone like me a Director just peeking into the system or an analyst that can do a deep dive is one of the best users interfaces I have seen for any product.

Incentivized

There are a few things FireEye Email Security does better than ProofPoint and vice versa. For example, you would think blocking .html attachments would be trivial. FireEye Email Security can be configured to do it. Proofpoint can not, and if you try to configure it, HTML gets stripped from the email content, which has a major impact on the business. On the other hand, ProofPoint has a number of additional features and bells and whistles that FireEye Email Security does not.

Incentivized

• We have prevented several cases of employees tried to steal organization's information; this has a great effect on the ROI not only in dollars but also in our reputation.
• We have used it for more than 4 years, which is more than typical technology adoption we usually do; and this is the result of the above causes (prevention of internal fraud).
• Need to have an expert of regex to accommodate more advanced DLP function/requirements

Incentivized

• It's been positive in the sense that it has blocked some malicious email that would have otherwise made it to our users.
• It has been negative in the sense that we spend a higher-than-expected number of cycles dealing with false positives.
• Another negative is that we also experience false negatives.

Incentivized