Re: [EXTERNAL]Re: [SECURITY] Proof point vs Mimecast

["King, Ronald A." <raking () NSU EDU>]

At my previous institution, (a GSuite shop) we did a POC of 60 days with ProofPoint. It was expensive when we were 
quoting the product at the end of the POC. So, it looked like we would not be purchasing it. However, when the POC 
ended and I went on a cruise for 10 days, I came back and found it had been purchased and being implemented. 
Apparently, one of our executives started getting blasted by SPAM and phishing messages with several other account 
compromises. It was worth the expense.

As someone else stated, it was a challenge to renew every year.

We are looking at our options here for O365 next year. Based on these responses, I think Mimecast will be worth a look 
when we test.

Ron

Ronald King
Chief Information Security Officer

Office of Information Technology
(757) 823-2916 (Office)
raking () nsu edu<mailto:raking () nsu edu>
www.nsu.edu<http://www.nsu.edu/>
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Baillio, Aaron
Sent: Thursday, May 23, 2019 11:07 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] [EXTERNAL]Re: [SECURITY] Proof point vs Mimecast

We went with PP a few years ago when we did a similar comparison.  We were actually leaning toward Mimecast but PP came 
in with an amazing quote because they didn’t want to lose to Mimecast.  They were always my favorite as they are far 
and away the leader in this space.  We couldn’t be happier and they cover faculty, staff and students.  (we’re licensed 
for about 35,000 mailboxes).  We use the base license and TAP.  Again, couldn’t be happier.

B. Aaron Baillio
Deputy CISO
University of Oklahoma, IT Security
O: 405-325-7948
C: 254-400-6404

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Max McGrath
Sent: Thursday, May 23, 2019 8:43 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [EXTERNAL]Re: [SECURITY] Proof point vs Mimecast

I find the last two responses really interesting.  I did a deep dive into both products last year and got quotes on 
them both.  The pricing I received was dead even between the two products.

We ended up going with Proofpoint (we are almost at the end of our first year with them) mainly because of their 
relationship with Palo Alto.  I do recall Mimecast had an educational piece (when users clicked a malicious link) that 
Proofpoint did not have.

Max
--
Max McGrath [Image removed by sender.] 
<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.linkedin.com_in_max-2Dmcgrath-2Da299124b&d=DwMFaQ&c=qKdtBuuu6dQK9MsRUVJ2DPXW6oayO8fu4TfEHS8sGNk&r=qFQzCTOmPXQnJcsnnqPUqQ&m=XQXMbkRJVDe7FKcieSSZVA-1O_qWzdiJes9QTTWmhzE&s=V5VwMstynTJh0jUNX5tZGAsjQKbg0xwto3Rh_c_Ng7w&e=>
Infrastructure and Security Manager
Carthage College
262-551-6666
mmcgrath () carthage edu<mailto:mmcgrath () carthage edu>


On Thu, May 23, 2019 at 8:36 AM O'Callaghan, Daniel <000000eccf3d4b14-dmarc-request () listserv educause 
edu<mailto:000000eccf3d4b14-dmarc-request () listserv educause edu>> wrote:
We evaluated both, selected Mimecast primarily on price compared to PP.  Implemented last October.  Overall very 
satisfied, though there is a bit of a learning curve.  Their basic protection really dropped our phishing/compromised 
account numbers.  We are gradually rolling out different features of their advanced protection—really like the 
“impersonation protect” feature for identifying/blocking whaling and BEC attacks.  The PhishMe integration is 
promising, but we are still in process of testing it.


_________________________
Dan O'Callaghan
CISO, Sinclair Community College
937.512.2452
(It’s not paranoia if you really do store sensitive data!)

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Snook, Allen
Sent: Thursday, May 23, 2019 9:14 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Proof point vs Mimecast

Good morning All,

Has anyone used either or both of these companies?  We have just completed a POC with Proof Point which I feel is a 
great product/service we just cannot afford the price tag.  Currently we are looking at Mimecast to do another POC with 
to compare the two.

I would like to get anyone’s feedback to the following questions in regards to Proof Point or Mimecast:

•         why you picked one over the other,

•         if you switched from one to the other why,

•         what you like best of either, or

•         most importantly what you didn’t like.

Also is there another product/service you prefer that would be great to know.

A little about our environment:
For the last 30 days, our average daily email stats look like:
            email sent: 11,855
            email received: 92,692
            total mailboxes: 17,000
            active mailboxes: 8,168

We use Office365 Exchange with A1 licensing.

Currently our heaviest attack vector is Email (with IMAP password discovery, discovered during our POC with Proof 
Point) with Alumni accounts being compromised most often.

Regards,


Allen A. Snook - CISSP

Director of Information Security

CCNP
[cid:part2.C84B68C8.50548032@messiah.edu]

One College Avenue Suite 3055
Mechanicsburg PA 17055
Tel: (717) 766-2511 x6790

Fax: (717) 796-5246

Cell: (717) 439-0025