We use the solution in all our environments. We use it for remedy tickets and give them updates. It was our main communication point.
Senior Infrastructure Engineer at Net Consulting
A main communication tool that helps to use and update tickets
Pros and Cons
- "We use the solution in all our environments. We use it for remedy tickets and give them updates. It was our main communication point."
- "The solution can be complex at times. It would be nice to have the on-server version. It needs to improve the stability as well."
What is our primary use case?
What needs improvement?
The solution can be complex at times. It would be nice to have the on-server version. It needs to improve the stability as well.
For how long have I used the solution?
I have been working with the product for seven years.
What do I think about the scalability of the solution?
The tool is scalable and it helps us to add/remove new users, servers, clusters, etc.
Buyer's Guide
Microsoft Exchange Online Protection (EOP)
March 2025

Learn what your peers think about Microsoft Exchange Online Protection (EOP). Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
842,466 professionals have used our research since 2012.
How was the initial setup?
The solution's setup is complex and it took us months to complete the deployment.
What about the implementation team?
We did the product's deployment in-house.
What was our ROI?
We have seen an ROI with the tool's use.
What's my experience with pricing, setup cost, and licensing?
The solution's pricing is subscription-based rather than a yearly licensing cost. Pricing is based on the size of the environment and company and can be expensive.
What other advice do I have?
I would rate the product a seven out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.

Self Employed, Freelance, Consultor, Sales - Learning Time at SpectralByte
It provides the same protection regardless of whether users are in the office
Pros and Cons
- "The solution uses artificial intelligence and machine learning, so you don't need train it to detect something. The detection and response times are short. It's an excellent product."
- "I would like to get reports about vulnerable connections from our clients with information about domains, public IPs, etc. That would be highly useful."
What is our primary use case?
Microsoft Exchange Online Protection protects remote and on-site users against email-based threats.
How has it helped my organization?
Microsoft Exchange Online Protection guards against threats regardless of whether our users are in the office. If you receive an email with a malicious link, the solution will warn you against opening it.
What is most valuable?
The solution uses artificial intelligence and machine learning, so you don't need train it to detect something. The detection and response times are short. It's an excellent product.
What needs improvement?
Microsoft should publicize the solution more because it isn't well known. I appreciate the solution because it does a lot of things that I used to do manually. I didn't realize something like this existed. I went to Symantec, Trend Micro, and other providers, but Microsoft had the only solution to my problems.
I would like to get reports about vulnerable connections from our clients with information about domains, public IPs, etc. That would be highly useful.
For how long have I used the solution?
I have used Microsoft Exchange Online Protection for two years.
What do I think about the stability of the solution?
I rate Microsoft Exchange Online Protection nine out of 10 for stability.
What do I think about the scalability of the solution?
I rate Microsoft Exchange Online Protection 10 out of 10 for scalability.
How are customer service and support?
I rate Microsoft support eight out of 10.
How would you rate customer service and support?
Positive
How was the initial setup?
Microsoft Exchange Online Protection is easy to set up.
What was our ROI?
We have seen a return on our investment.
What's my experience with pricing, setup cost, and licensing?
The solution is fairly priced.
What other advice do I have?
I rate Microsoft Exchange Online Protection nine out of 10.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Microsoft Exchange Online Protection (EOP)
March 2025

Learn what your peers think about Microsoft Exchange Online Protection (EOP). Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
842,466 professionals have used our research since 2012.
System Administrator at STBV
A highly stable solution that serves as a spam filter while protecting against viruses and malware attacks
Pros and Cons
- "The solution's stability is very, very good. I didn't face any problems in the last year."
- "It wasn't easy or intuitive enough for me to start using it. So, the reason was that the solution changed."
What is our primary use case?
We use our company's Microsoft Exchange Online Protection as a spam filter, virus protection, and malware protection.
What is most valuable?
I find the solution's filtering and malware protection features to be the most valuable ones.
What needs improvement?
Other users wish to see the encryption feature added to the solution in the future.
For how long have I used the solution?
I have been using Microsoft Exchange Online Protection for three or four years. My company has used it for a longer time. Also, I don't remember the version of the solution I am using. My company is an end customer of the solution.
What do I think about the stability of the solution?
The solution's stability is very, very good. I didn't face any problems in the last year.
What do I think about the scalability of the solution?
Between 50 and 100 users are using the solution in my company. At the moment, we have three administrators for the solution. Normally, I am the one working on the solution. I am not sure whether I am going to increase the solution's usage in the future. At the moment, we are still going strong with Microsoft Exchange Online Protection.
How are customer service and support?
I haven't contacted technical support. It has been a really long time since I contacted Microsoft technical support. So, it has been more than thirteen or fourteen years. I have no idea how it is today. A long time ago, it was very good.
How was the initial setup?
It was deployed long before I got over the task in my company, so I wasn't a part of the deployment process.
Which other solutions did I evaluate?
My boss told me that he checked an alternative for Microsoft Exchange Online Protection, maybe because of the cost, which I am not sure. I don't know how much we pay for this. My boss looks after the payment part. So, Mimecast was the other solution he was considering as an alternative. Mimecast could be much more expensive or much cheaper, but I have no idea. So my boss asked me to check out Mimecast and see if there's any difference. In my opinion, there is no big difference between Microsoft Exchange Online Protection and Mimecast. They both are reliable and work quite well. As we are now running with Microsoft Exchange Online Protection for years, I don't see the need to switch over to Mimecast.
What other advice do I have?
I am satisfied with the overall product. It wasn't easy or intuitive enough for me to start using it. So, the reason was that the solution changed. I started to work with it shortly after it changed from the servers and changed to another part of Azure network. It was not quite easy, but it was okay for me since I'm used to such problems and switching over to other problems.
Our team was responsible for everything in our company, but since I started using Microsoft Exchange Online Protection, it's much easier for me as an administrator.
Overall, I rate the product an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior Network Associate at AMCON, Inc.
Missing some crucial functionality for security, but otherwise is a great solution to start a business
What is our primary use case?
We use Microsoft Exchange Online Protection to secure our users' accounts. For example, we implement MFA on our users' emails to ensure their mailboxes or accounts are secured. Aside from providing the username and password, the solution provides a code or additional security to ensure their accounts are properly secured. We also used a phishing tool.
What needs improvement?
I want a seamless way of archiving users' emails on Exchange. When a user's emails are archived on the system, we find out their mailbox is large the moment we need to copy those files back. Another issue is with OneDrive, in that if a user has files stored on OneDrive when they exit, the license is removed. As a result, transferring those files to another user is a problem. It should be possible for there to be a central location where each of those files is stored. That way, even after a user leaves and the license is removed, we don't lose access to that information after 90 days.
The solution should protect mailboxes. Most of our users have emails on their mobile, so if a staff member exits from the corporation, we need something that mimics email on the mobile. Some tools delete all of a user's emails and passwords the moment they leave that environment or their employer, but I don't think Microsoft has any such tools. It's important because passwords and sensitive information could pass into the wrong people's hands.
For how long have I used the solution?
I've used the solution for the last two or three years now.
What do I think about the stability of the solution?
The solution is very stable.
What do I think about the scalability of the solution?
The solution is very scalable. There are between 350 to 400 users using the solution. There are plans to increase the usage.
Which solution did I use previously and why did I switch?
We used to use Google Mail before migrating to Exchange.
How was the initial setup?
It is straightforward to deploy the solution. It takes three hours or so to deploy it. We have five people managing the solution.
What's my experience with pricing, setup cost, and licensing?
We pay licensing fees yearly.
What other advice do I have?
Earlier, we had Microsoft Exchange on-prem and then moved to 365.
I recommend the solution to other users because it is easy to start a business. I rate it a five out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
CyberSecurity Executive IAM Engineer at Tata Consultancy
An easy to setup solution that helps to manage special accounts
Pros and Cons
- "You can use the product to create special accounts."
- "We have experienced issues while migrating from on-prem to the cloud. The tool needs to improve its stability."
What is our primary use case?
I manage all the users and special accounts with the tool.
What is most valuable?
You can use the product to create special accounts.
What needs improvement?
We have experienced issues while migrating from on-prem to the cloud. The tool needs to improve its stability.
For how long have I used the solution?
I have been working with the solution for more than ten years.
What do I think about the stability of the solution?
I would rate the product's stability an eight out of ten.
How are customer service and support?
My experience with the tech support team is good.
How was the initial setup?
The product's setup is easy and quick.
What about the implementation team?
We relied on a third-party to complete the deployment.
What other advice do I have?
I would rate the solution a nine out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Network and Infrastructure Manager at Sonysugar
Provides valuable email protection and policy configuration features
Pros and Cons
- "The email policy configuration options in Microsoft EOP are satisfactory."
- "The product's end-of-life cycle could be extended."
What needs improvement?
The product's end-of-life cycle could be extended. When it gets upgraded, we should receive some incentives. For example, someone who has purchased a Microsoft professional license should be able to renew or upgrade without buying a new product.
There have been some online intrusions on security. If Microsoft packaged the updates more frequently, the protection would be better. If updates take less time, we might receive malicious emails.
Additionally, I would like to see changes in the licensing model. If someone has a corporate license with many users, they should get a better price.
For how long have I used the solution?
I have been working with Microsoft Exchange Online Protection (EOP) since 1998.
How are customer service and support?
We could get technical support services directly from Microsoft.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We use Sophos for email protection. Sophos enhances our accessibility and helps prevent malicious email intrusions.
What's my experience with pricing, setup cost, and licensing?
The product is expensive.
What other advice do I have?
The email policy configuration options in Microsoft EOP are satisfactory. I recommend it to any user who wants to use Microsoft.
I rate it a ten out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Last updated: Jul 24, 2024
Flag as inappropriateEfficient Email safety, but gray email handling needs improvement
Pros and Cons
- "The pre-set policies and configuration analyzer are the most valuable features."
- "When you're using a Microsoft product solution, you can scale it, but if you're not, there are limitations."
What is our primary use case?
Microsoft Exchange Online Protection's use case can be email collaboration, data protection from various threats such as phishing or malware, and deploying anti-spam policies and anti-malware policies to ensure user safety. Additionally, the attack simulation and training features within the solution can be used to train end users across different campaigns happening over the internet. Other features like saved attachments, saved documents, and disabling options in Microsoft Exchange Online Protection can also be utilized.
What is most valuable?
The pre-set policies and configuration analyzer are the most valuable features in my opinion. The configuration analyzer is a great function to bring about strong external protection, and one can either turn on the pre-set policies or take help from the configuration analyzer to get recommendations for better protection.
What needs improvement?
One area that could be improved is handling gray emails, which are emails with attachments or newsletters that are not necessarily malicious, but are coming from different providers and are being received by various customers. Microsoft Exchange Online Protection may not be fully capable of stopping these emails until submitted for investigation over a specific period of time by Microsoft experts. This process needs improvement.
For how long have I used the solution?
I have been working with the product for approximately six years.
What do I think about the stability of the solution?
The stability of this solution is quite good. It's been working well for a long time. Microsoft is constantly updating it and adding more features. I would rate it a nine out of ten.
What do I think about the scalability of the solution?
I would rate its scalability a seven out of ten. There are certain restrictions. When you're using a Microsoft product solution, you can scale it, but if you're not, there are limitations.
If a company is doing business transactions, sending and collaborating, or choosing teams, I suggest they use Exchange Online Protection. But it may not be enough for any organization that is doing its best, as many threats are happening through different communication channels. I suggest using Office 365 as well, which comes with more advanced functionalities.
How are customer service and support?
The experience with customer service from Microsoft varies. For example, if you open a ticket and get good engineers or support representatives, the experience is obviously good. It really depends on the quality of the support you receive. Overall, my experience has been average. Sometimes I get very bad responses from engineers or developers who don't understand the service or may not be properly trained on it. It can be hard for someone like me to explain everything so that they can understand the problem, and they may need to consult their team or do some research before providing a solution. These things take time. But if you get a good representative who is knowledgeable, then the experience is very smooth.
How was the initial setup?
The initial setup is very simple. There are certain policies within the environment that will do the job automatically if you don't do anything. Moreover, every organization has default policies that are automatically applied if you don't do anything, but Microsoft provides documentation if you want to customize the policies. It is easy to work around the default policies if you need to make changes.
What about the implementation team?
EOP is mainly deployed for the public cloud and there is no on-premises version available. However, if an organization has an on-premises email solution, they can choose to connect it to EOP to protect their emails with external protection. Organizations can reroute their emails through EOP so that all inbound and outbound emails go through the EOP solution and get filtered accordingly.
What's my experience with pricing, setup cost, and licensing?
I would rate it a seven out of ten. It is a low-price solution.
What other advice do I have?
Overall, I would rate Microsoft Exchange Online Protection a six out of ten. It is a good product. However, it may not meet all the requirements of today's business world. But if you combine it with different solutions in production, then it becomes a lot more effective.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT Systems Engineer - Wintel at a tech vendor with 5,001-10,000 employees
Efficient management and stable solution
Pros and Cons
- "The initial setup is just a standard process."
- "The licensing can be on the expensive side, especially in the cloud space."
What is our primary use case?
Our primary use case is to support client environments. We need to check if everything is working fine if the email flows are fine, and if any certificates need to be renewed. Those are the system admin jobs that we do as system engineers.
What is most valuable?
The console has everything we need for management. We use all the available features. Every feature available in the management console is sufficient for us to manage.
All those features within the management, the exchange management, whether it's the shell management or the console management, are sufficient by themselves for the versions of the PUs. They keep changing the versions with every update, and they also add feature updates to the consoles. So that also keeps upgrading. So, the solution keeps improving.
The best part is Microsoft EOP also includes publishing management, more inclusive with Exchange and all SharePoint and everything as well. So, they have partial modules for each Exchange and SharePoint. So that is a good thing as well. We can now manage things through partial. It could be done remotely as well. You don't have to sit on the server. It could also be on a jumpbox and just shell into it directly to an exchange server and manage that exchange server.
For how long have I used the solution?
I've been using it since I started working, so it's been a while. So, I have been working with this solution since 2016.
What do I think about the stability of the solution?
The solution is fairly stable. The stability depends on when there's an outage or issues. From the Microsoft standard, they have had some issues within, maybe if there are some vulnerabilities in use. If there are some rogue actors or somebody has compromised the Exchange servers or something, they've affected the Exchange server services in the past. So, they do send out information. You can obtain that information from their site, which states, "This is what has happened with the Exchange servers, or all the Exchange servers may be down at the moment." So, those sorts of outages are already reported. And if Microsoft detects them, they report it across all the platforms and communities, providing information through chat as well. So, some visibility is always there.
Stability also depends on the way you manage it, basically. It comes down to how well it's managed, set up, and managed for individual organizations at their sites. So, that's why we have server admins to see how it's managed.
If the server hardware is sufficient enough, if they have sufficient memory, or if they're properly supporting Microsoft EOP. The system requirements need to be fine-tuned. All the VMs hosted need enough memory, and there should be sufficient storage for the databases and such.
So, from Microsoft's point of view, the stability of Exchange as a product depends on the servers running based on our recommendations and specifications. So, it all hinges on the licensing the users have purchased from Microsoft. Unless there's an outage or a vicious attack, or some malicious attack on the service itself, which they report immediately, there aren't any significant issues.
So, I would rate the stability an eight out of ten.
What do I think about the scalability of the solution?
I would rate the scalability an eight out of ten. Almost everyone in the company uses it, probably thousands of end users. We didn't encounter any problems with scalability. In fact, Microsoft provides recommendations on how to migrate to the cloud and such. So, everything is seamless.
Even when configuring reserves, it automatically alerts you with exceptions and errors. Especially during mailbox migrations to the cloud, like stage migrations or batch migrations, it provides suggestions. For example, it might notify you that you're processing too many mailboxes at once based on their sizes and recommend reducing the quantity. These prompts are readily available.
Which solution did I use previously and why did I switch?
We opted for this solution because most of the enterprises we have to support the basic applications we support. We are the 365 admins as well as Azure admins, and also in the on-prem environment. So we keep migrating mailboxes and chatboxes over, and sometimes, we have to do complete exchange migrations to the cloud. SharePoint migrations, we handle, as well as a server management team.
How was the initial setup?
The initial setup is just a standard process. You just need to follow the Microsoft documentation and send whichever you're very comfortable with your experience. For everything, there are articles and documentation with Microsoft. You just need to follow them, and it's just that you need to consider what your environment is and how to expand information about your current infrastructure. Based on that, you have to consider things while upgrading it or moving it across the cloud.
Some of them are completely cloud. Some of them are hybrid environments. They have a few on-premises for legacy printers and legacy applications. So, for SMTP communication and other stuff. But mostly, most of the users' mailboxes are on the cloud.
What about the implementation team?
The time taken for deployment depends on the size of the organization, how many mailboxes they have, and the main databases. There's no one standard procedure. It could range from a few hours for a small organization to weeks for a large organization.
What's my experience with pricing, setup cost, and licensing?
The licensing can be on the expensive side, especially in the cloud space. They may not be the absolute most expensive option, but they are indeed on the higher end. However, that comes with a certain level of quality. It's like comparing Apple products to other phones in the market. For example, Apple iPhones and tablets are priced higher for a reason. They are known for their security and quality, which is why they can command a premium price.
And people are willing to pay that premium because they trust the brand.
What other advice do I have?
I would rate it nine out of ten because of its widespread usage and trust in the market at the enterprise level. Microsoft products, especially Exchange, are widely used and trusted.
They have a significant presence, capturing a major share of the enterprise market. All their applications are widely used, whether it's for emails, databases, SQL, backups with OneDrive, cloud storage, or SharePoint, and more. They offer a suite of products for office tools. So, these are the commonly used tools in any organization, be it medium-sized, small, or even a small retailer. Given this, I would rate them a nine or ten because of their extensive market share, both globally and locally.
Microsoft's dependability and trust are a result of its long-standing presence in the industry. They've been in business for a significant amount of time.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: partner/customer

Buyer's Guide
Download our free Microsoft Exchange Online Protection (EOP) Report and get advice and tips from experienced pros
sharing their opinions.
Updated: March 2025
Popular Comparisons
Microsoft Defender for Endpoint
Check Point Harmony SASE (formerly Perimeter 81)
TitanHQ SpamTitan
Trend Micro ScanMail
Check Point Antivirus
Hornetsecurity Email Spam Filter and Malware Protection
Bitdefender Security for AWS
WatchGuard Gateway AntiVirus
Cloud Sandbox API
Buyer's Guide
Download our free Microsoft Exchange Online Protection (EOP) Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- What to choose: an endpoint antivirus, an EDR solution or both?
- Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
- Looking for alternatives to Symantec Cloud Protection Engine
- Who provides a better antivirus solution: Bitdefender or Sophos?
- Which antivirus is best for isolated work PCs?
- How do you identify malware?
- Why are Anti-Malware Tools important for companies?
- When evaluating Anti-Malware Tools, what aspect do you think is the most important to look for?
- When evaluating Antimalware Tools, what aspect do you think is the most important to look for?