Re: Proofpoint vs Office ATP

["Mr. Ikram Muhammad" <ikram.muhammad () SCRANTON EDU>]

Don,

We are using Microsoft ATP and so far we are happy with it. In addition we use Exchange Block rules like *.abc.edu () 
gmail com<mailto:*.abc.edu () gmail com> and that reduced number of entries in the Impersonation policy.


Thanks,
Ikram Muhammad, CISSP, PMP, CCNA Security, CEH, CISM
Information Security Engineer
The University of Scranton
Phone: (570) 941-6514
Email: ikram.muhammad () scranton edu<mailto:ikram.muhammad () scranton edu>
Information Security Office Email: infosec () scranton edu<mailto:infosec () scranton edu>
Information Security Office 570-941-4226



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Don Kileen
Sent: Friday, August 21, 2020 2:02 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Proofpoint vs Office ATP

Good morning,

I would very much appreciate any feedback if anyone has moved recently from email protection provided by Proofpoint to 
Office ATP. The protection Office ATP (Plan 2) provides seems on par with what we have in place with Proofpoint. 
Regarding Impersonation/Impostor Protection for Office ATP it appears we would need to have multiple policies to cover 
the display names Proofpoint currently provides (well over the 60 display name limit of one policy). I am more 
concerned with the ability of Threat Explorer to search for and remove messages that have gotten through the 
protections.

Thank you,

Don Kileen
Cloud Security Analyst
Infrastructure Services
Information Technology Services
California State University, Bakersfield

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cikram.muhammad%40SCRANTON.EDU%7Cd15a290634304fafea4508d845fdb1ad%7Ca8edc49a41f14c699768a7f6d7c3b8c3%7C0%7C0%7C637336303219106492&sdata=XOfMmdeavRB4GiNra3jTBPhGNVmUJ0SLIYd2BOcrgqI%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community