Abnormal Security vs. Trellix Email Security

Another local organization was compromised, and we were one of the targets of their further attempts. We were 100% protected because the behavioral analysis protected us, but also allowed me to contact that organization and report their compromise. This has actually happened more than one time since going live.

Incentivized

It has a very good feature of URL replace, it helps us to block or prevent spam, phishing, or malicious emails. It has some limitations like if some large or lengthy emails come it takes more time to scan and to avoid delay it forwards the mail to the recipient with a warning note on it.

• Spam filtering...we have been able to turn our spam sensitivity down on Exchange allowing more legitimate messages through to user inboxes.
• Malicious email filtering...we experienced several successful phishing attacks over the past year. Abnormal Security has prevented hundreds of individual campaigns since going live in August '22. I cannot thank them enough!
• Automated response for reported emails...my team is small and we do not have enough hours in a day to review and respond to each reported email. Abnormal Security performs additional analysis on those reports and automatically responds for us. If the message is spam or malicious, copies of those emails are looked for throughout the server and deleted.

Incentivized

• Blocking URL-based threats using FAUDE features.
• Post threat detection via the Retroactive feature.
• Excellent sandboxing analysis performance and detailed dynamic analysis reports.

Incentivized

• None so far, I have been extremely happy with their service.

Incentivized

• Sometimes feels that console running slow.
• Riskware detection has a lot of false positive.
• The user interface is not very intuitive.

Incentivized

FireEye Email Security is the most effective email security solution for protecting enterprises from APT. It is not complicated to set up and you can ride a wave of continuous security effects for a long time without major changes after the initial setup. It's automated, so users don't have to care too much about it. In addition, it provides detailed analysis data, so you can utilize it for 3rd party solutions if you want.

Incentivized

In the years we have had this service, we haven't needed much help (which is a testament to the ease of use/reliability of the product) but when we have they have been probably the best vendor I've ever dealt with when it comes to quickly addressing support call issues. We also have a very readily available engineer that has been quick to help with more complex requests.

Incentivized

Abnormal Security blocks malicious emails that both PhishER and Cisco Secure Email Threat Defense miss. One thing that PhishER does have is the ability to flip a malicious message into a user education phishing email. That's cool, but I think we can just copy/paste the same info into a custom campaign.

Incentivized

There are a few things FireEye Email Security does better than ProofPoint and vice versa. For example, you would think blocking .html attachments would be trivial. FireEye Email Security can be configured to do it. Proofpoint can not, and if you try to configure it, HTML gets stripped from the email content, which has a major impact on the business. On the other hand, ProofPoint has a number of additional features and bells and whistles that FireEye Email Security does not.

Incentivized

• Preventing compromises that have historically led to payroll or accounts payable threats.

Incentivized

• It's been positive in the sense that it has blocked some malicious email that would have otherwise made it to our users.
• It has been negative in the sense that we spend a higher-than-expected number of cycles dealing with false positives.
• Another negative is that we also experience false negatives.

Incentivized