Email filtering

[bknaggs]

I'm not sure if this is the right place to post this question so apologies if it's in the wrong place.

 

Currently we use Trustwave Mailmarshal on premise as our email filter and are generally happy with it. We are looking though to move to a cloud based solution after having migrated from on premise Exchange to Exchange online.

 

What email filtering are you all using? Just looking for suggestions at the moment.

[TechMonkey]

We use the uplifted Exchange protection (I can never remember the license or name, probably Defender for Exchange or somesuch) and it seems to work pretty well.

 

The only other one I have used was Vipre and that was very good.

[MrKJLS]

We use Barracuda for this. Seems to work well, pricing is based on staff and students are free. We also use Cloud to Cloud backup service which is good.

[midweek]

We use Barracuda for this. Seems to work well, pricing is based on staff and students are free. We also use Cloud to Cloud backup service which is good.

 

Same here. Had it for a number of years now and can't fault it for the price.

[jslate1980]

We moved from a fortimail appliance to barracuda cloud. It’s a shame it’s missing a lot of features compared. The filter lists on the appliance were amazing. Also having the ability to block new email domains was great.

[Edu-IT]

Barracuda too. :-)

[psydii]

All in on A5. The integration of telemetry between clients and infrastructure gives a really comprehensive view of the estate. We've not had an mail-based compromise since moving to A5 in 2019.

For email its not got many (any) knobs and dials really. It just does its job and (almost entirely) gets out of your way. I spend 5 minutes in the morning and 5 minutes in the afternoon sweeping Quarantine to rescue email from parents whose vanity domains don't have dmarc etc configured, or emails from staff personal accounts to work accounts that get caught as "impersonation attempts". But most of those ten minutes are spent sipping my coffee tbh.

[tom_newton]

We used to resell https://mailroute.net/ - it is very good but it just doesnt fit with our strategy, and proved hard to bill, so we are winding down the customerbase. Talk to RA Plecas there, she's a good egg.

Having said that the built in stuff from Microsoft is pretty solid.

[free780]

Have used Message Labs years ago.

Then mimecast and now Proofpoint.

Proofpoint is very effective and makes us aware of upcoming industry wide changes. E.G Google DMARC changes.

 

Almost half of inbound mail is quarantined.

 

The sandboxing can’t deal with the Cloudflare “are you human” control that we see user in AiTM Phishing pages. Somehow defender can detect these.

 

We get false positives in both Defender and Proofpoint. It’s a balancing act.

 

Enhanced Filtering is almost there. Proofpoint needs to support ARC really.

 

No solution is perfect and user training is really important.