Re: Proofpoint vs Office ATP

[Greg Williams <gwillia5 () UCCS EDU>]

Recently as of 3 years ago.  ATP was around 30% more effective.  ATP + conditional access MFA from Microsoft – 90% drop 
in successful phishing year over year.  We will not look back.

Greg Williams
Office of Information Technology
University of Colorado Colorado Springs
Phone: (719) 255-3292<tel:(719)%20255-3292>

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Don Kileen
Sent: Friday, August 21, 2020 12:02 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Proofpoint vs Office ATP

Good morning,

I would very much appreciate any feedback if anyone has moved recently from email protection provided by Proofpoint to 
Office ATP. The protection Office ATP (Plan 2) provides seems on par with what we have in place with Proofpoint. 
Regarding Impersonation/Impostor Protection for Office ATP it appears we would need to have multiple policies to cover 
the display names Proofpoint currently provides (well over the 60 display name limit of one policy). I am more 
concerned with the ability of Threat Explorer to search for and remove messages that have gotten through the 
protections.

Thank you,

Don Kileen
Cloud Security Analyst
Infrastructure Services
Information Technology Services
California State University, Bakersfield

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cgwillia5%40UCCS.EDU%7C30b8c831320b4a2b72c808d845fdb1e1%7C529343fae8c8419fab2ea70c10038810%7C1%7C1%7C637336303213651975&sdata=qX9J%2FUA3tlvffjdU6gohjFFAggRXBQpWW8iefNqWUbU%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community