IRONSCALES vs. Sophos Email

When deploying to a client who is very sensitive to email routing disruptions like those that can occur by putting an email filter in front of the email server, IRONSCALES deployment is extremely simple. It hooks into the user's mailbox, and not only filters point forward but a number of days back.

Incentivized

I strongly believe that if you are looking for a product that does what it says on the box and has the capacity to keep your company safe, you should look at Sophos. They have consistently been at the top of their game and continue to provide a product that meets the ever-changing needs of the threat landscape.

Incentivized

• We could customize it to have a certain level of workflow. We manage to enforce certain email (based on key-phrases) to be quarantined before send it to the recipient. And the email needs to be approved (manually) before being released.
• For certain type (using regex) of email, we will encrypt it if it's sent outside our organization domain.
• Scalable

Incentivized

• Reporting could be more granular, it's the most glaring weakness of the product.
• The ability to drill down into data from the dashboard would be very helpful for reporting as well.
• Reverse AD sync so when active directory users are removed, they are removed from Sophos as well would be helpful.

Incentivized

It was easy to use and easy to implement. You don't need previous knowledge on the products, after we got this up and running, it took us hours to put everything together. The transition was easy and seamless.

Incentivized

The solution is very scalable, with a possibility to be customized; which means that Sophos Email can be configured depending on our own situation and context not on a general way. On the other hand, Sophos Email has a broad feature set; I mean, along with core spam and malware protection, Sophos offers advanced features such as real-time
link following, threat isolation, spoof protection, etc.

I have always found the answers I have needed in the documentation or online, and have not needed to contact Sophos Secure Email Gateways' support team. This, I think, bodes well for how their software is easy to use and has good documentation when you cannot find what you need in the basic interface.

Incentivized

Postini, Windows Defender (built into M365) & Trend Micro email security. Postini was purchased by Google and then went away. Trend Micro was very basic at the time I used it (many years ago) and utilized purely blacklisting tech but that was before the AI boom. Windows Defender is not as multi-tenant friendly.

Incentivized

Many other solutions are a complicated setup and take a lot of time for the configuration. With Sophos email we were setup and seeing data/emails within an hour. As I have described the ease of use from a high-level for someone like me a Director just peeking into the system or an analyst that can do a deep dive is one of the best users interfaces I have seen for any product.

Incentivized

• Understanding its limitations with regards to cyber security education campaigns
• Rigid domain lists. Might be attributed to how we purchase through a distributor but if a client needs to add a monitored domain name, it must be requested instead of allowing me to do it myself.
• Unclear if there have ever been any outages or service disruptions. Since it is monitoring mailboxes and not routing email, there is no outage client side. This could be a benefit but it also means end users might be unprotected during an outage.

Incentivized

• We have prevented several cases of employees tried to steal organization's information; this has a great effect on the ROI not only in dollars but also in our reputation.
• We have used it for more than 4 years, which is more than typical technology adoption we usually do; and this is the result of the above causes (prevention of internal fraud).
• Need to have an expert of regex to accommodate more advanced DLP function/requirements

Incentivized