Try our new research platform with insights from 80,000+ expert users
Senior System Administrator at UAS International Trip Support LLC
Real User
Responsive support, saves us time dealing with threats, but the email notifications should be customizable
Pros and Cons
  • "The most valuable feature is the hardware-assisted platform module."
  • "Email alerts should be available in real-time."

What is our primary use case?

We have a hybrid Exchange environment with an on-premises email server and also Office 365. We have multiple domains and the challenge was related to the email filter. We were doing a lot of things manually and we wanted a simpler system.

As of now, we are only using this product for email. However, in the future, we may implement some of the other modules such as SharePoint, Dropbox, or other services.

How has it helped my organization?

Perception Point has improved the way our organization functions in many cases. For example, there are a lot of malicious files coming into the company and the previous solution that we had was not filtering them in an effective manner. When we switched to Perception Point, it became quite handy and it started detecting most of them. I would estimate that nine out of ten were being found and then blocked.

The only challenge we were facing was a small number of false positives, which was okay because we were able to handle them properly. In terms of reduction, implementing Perception Point has resulted in a 50% to 60% drop in the number of false positives that we were experiencing.

In my experience, the detection capabilities have been good. I would rate the performance an eight out of ten because it is much better than some other products I have researched. I have seen examples of it detecting malware.

The vendor's incident response team acts as an extension to our own SOC team.  This is important because we need to know exactly what is happening so that we can report it to the top management, accordingly. 

Perception Point's incident response team has aptly handled the incidents that we have had. So far, we have only had a few, so our challenges have not been great.

With respect to engine optimization, I see a lot of features being upgraded every month. The engine seems to be getting more robust. I can see the differences in this AI-based technology.

I would estimate that each day, Perception Point saves our own SOC team between one and two hours. We were spending a lot of time on security and since implementing this product, we have been able to reallocate time and put it toward other tasks.

I estimate that overall, the number of alerts that we receive at our endpoint layer has been reduced by between 40% and 50% since transitioning from our previous product. Time-wise, this saves us between an hour and two hours a day.

In terms of how long it took to begin showing value, from the perspective of a customer, I think that it took about three days before we started to notice the difference. It required no tuning or customization and it was very clear in the console. The dashboard showed everything that it was doing, making the system very transparent.

What is most valuable?

The most valuable feature is the hardware-assisted platform module. The HAP is hardware-based and does not exist in many products. It is a unique CPU technology that can detect ransomware attacks.

The notification system is helpful. We received two notifications a day, which include the false positives.

What needs improvement?

Email alerts should be available in real-time. Alternatively, emails should be sent more often. It would be better to get between six and eight emails per day to help us understand what is happening.

At this time, we don't have an option to customize alert emails for our customers. They come directly from the vendor and we have no control over them.

The reports should be more customizable.

Buyer's Guide
Perception Point Advanced Email Security
November 2024
Learn what your peers think about Perception Point Advanced Email Security. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.

For how long have I used the solution?

We have been using Perception Point Advanced Email Security for less than a year.

What do I think about the stability of the solution?

It's a robust product and we don't have to manually intervene when it comes to filtering when we use the engine. In production, it seems to be stable and we haven't faced any downtime.

What do I think about the scalability of the solution?

Perception Point is used throughout the organization and we have 250 devices that are protected.

Scalability-wise, we haven't explored or tested it. I think the product can be scaled in terms of adding more features. More than its security, they can add more features, like email archiving, but I'm not concerned about it.

Whether we increase our usage depends on the business. If we continue to grow then we will continue using this product and we will increase the number of users. I think that it's quite capable of scaling with us.

How are customer service and support?

When we need to create reports for management, we sometimes send queries to the support team. They are very responsive and normally, they answer the same day, within a couple of hours.

In total, I have spoken with them approximately 10 times and the experience was always good. I believe that the nearest support center is in Israel, and we're approximately two hours apart, yet the response was still quick and on time. They have always been able to resolve our issues.

Which solution did I use previously and why did I switch?

We had challenges with malware when we were using another on-premises product. The product was MailMarshal, by Trustwave. The first reason that we decided to switch was that it was purely a signature-based system. The second reason was the support. Simply, they did not provide the support that we needed.

How was the initial setup?

We had done some brainstorming before the project, and we could see that the setup process was transparent. As such, it was straightforward and even though there was some complexity, we could see exactly what they were going to do. All things considered, it was not overly complex.

The implementation strategy did not deviate from our IT policy and it was good. They were not using the MX pointing but rather, it was another kind of shared organization policy that is hidden from the attackers. The fact that the attackers cannot directly see what we are using, and it is similar to a shadow, is one of the features that we liked.

We are a 24/7 organization so for us, the main challenge was minimizing downtime. Downtime is crucial for us and we were able to complete everything in less than six hours.

What about the implementation team?

From our side, there was one IT manager and two network administrators involved in the deployment. The two network administrators continue to work with this product but in a maintenance capacity.

What was our ROI?

We have absolutely seen a return on our investment. Cost savings and technology-wise, the HAP module is the feature that gives us the biggest ROI. It is implemented in hardware and not available in a lot of systems. It is incorporated directly into our data center for multilayer protection.

What's my experience with pricing, setup cost, and licensing?

The price of this solution was within our budget and I think that it will suit most SMBs. There are no additional costs beyond the standard licensing fees.

Which other solutions did I evaluate?

We evaluated Mimecast at the same time that we were looking at Perception Point. It is a top runner in this space and they have more services, such as mail archiving. Ultimately, we found that Perception Point is a better product. It delivers approximately the same value for what we needed, but for less cost, and pricing was one of the other constraints.

We did not implement a PoC with Mimecast, so I can't make any technical or performance comparisons based on actual usage.

What other advice do I have?

The biggest lesson that I have learned from using this product is that when you use smart products in a smart way, it can save you a lot of time with respect to productivity. This in turn allows us to look at how that time can be used for other major tasks.

My advice for anybody who is thinking about implementing this product is to start with a PoC. The vendor offers a 14-day PoC, which will give you a clear idea as to exactly what is happening. From there, you can choose to proceed with it or not.

I would rate this solution a seven out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
Security Engineer at Global-e
Real User
Helps our security team to better see malicious activity and has reduced endpoint alerts
Pros and Cons
  • "What's really good about this platform is that you have full visibility, it has a very nice and very friendly UI, it's quick, and there's no latency in the scanning."
  • "We have had a few false positives, not that many, but a few... they have a feature where someone from the Incident Response team can look at an email and mark it as 'verified malicious.' You might think that if an engine detects it is malicious, and an IR team member has flagged it as malicious, it will definitely be malicious. But that's not always the case."

What is our primary use case?

We are currently working only with email protection. The way it's implemented in our company is that it scans 100 percent of our incoming email traffic. Perception Point has seven or eight scanning engines for detecting malicious activity, whether it's a phishing attempt, a malware attack, or any other type of cybersecurity threat. The way it's implemented is inline, so that if their engines detect something, the problematic email will be blocked and the end-user won't get it.

They also have an Incident Response team so that if something looks suspicious the IR team looks into it and approves or releases the emails. It depends on the use case.

How has it helped my organization?

Until we had the Perception Point, if a malicious or suspicious email got into a global user mailbox, if he didn't fall for it he would just manually send it to the security mailbox and then we would have to manually check it. Now, with the Perception Point engines scanning things automatically, it helps our security team to better see the malicious activity that has globally targeted employees.

In addition, it has reduced the number of alerts received by our endpoint layer by about 20 percent.

It saves our entire security team a lot of time and it gives our organization better protection.

What is most valuable?

What's really good about this platform is that  

  • you have full visibility 
  • it has a very nice and very friendly UI
  • it's quick
  • there's no latency in the scanning. 

I'm able to log into the system to see what's happened. I do that every day because in the company I work for things are a bit sensitive. I don't trust any solution 100 percent, so it's not just Perception Point. I like to see things myself and decide.

And the speed of scanning is very quick. The time it takes is almost nothing.

That's what we need. It pretty much gives us the perfect solution for our requirements.

In terms of their detection, if there is malware they detect it. For nine months we haven't seen more than a couple of true negatives, meaning malicious emails that did get through their scanning system. It has helped to prevent hundreds of threats.

What needs improvement?

We have had a few false positives, not that many, but a few. 

About 90 to 95 percent of the time, it's doing a great job but, the same as other companies, they can do better. They can add internal processes that will give an end-user the perfect solution. When I log in to the system, I can see all of the emails that were flagged as malicious. Some of them are false positives, and I get that. However, they have a feature where someone from the Incident Response team can look at an email and mark it as "verified malicious." You might think that if an engine detects it is malicious, and an IR team member has flagged it as malicious, it will definitely be malicious. But that's not always the case. Sometimes the engine detects it as malicious, and the IR team verifies that, but it's still a valid email, not a malicious one, and I have to release it manually.

But in the beginning, we had more false positives. Over time, the false positive ratio has gotten better. Instead of 20 false positives there are now about 15 false positives a month.

For how long have I used the solution?

I've been using Perception Point Advanced Email Security for about eight months.

What do I think about the stability of the solution?

The solution is very stable. There were a few crashes but they weren't related to the solution itself. The solution is on a cloud service provider and the few times that it has crashed were because of an issue with the cloud service provider.

What do I think about the scalability of the solution?

It's very scalable because it can give you lots of options. We are not using all  the options that are available, because we don't need them, but it can provide a very nice set of solutions.

How are customer service and support?

Their technical support depends on the person I'm dealing with. I know the guys in technical support, and some of them are good and some of them have some tricky responses but, overall, they are pretty good.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

This is the first solution of its kind that we are using. We started looking into tools like this because this kind of solution is a must-have tool.

How was the initial setup?

The initial setup was very straightforward, very easy. It took just a few minutes and it started delivering value from the first minute.

It's used by our entire organization. In terms of maintaining the solution, it's just me and maybe one or two other guys in our whole company.

Which other solutions did I evaluate?

We had a PoC with another company, but Perception Point mwas better than the other product we were looking into, by far. The main difference was the management part of the platform. For me, as a platform manager, it's so easy to see and manage the entire operation. It's very easy to do stuff inside.

The detection rate was pretty much the same for both products. But we tested the other product for only about two weeks and Perception Point for about one and a half months, so that was different. The false positive rate was also pretty much the same.

What other advice do I have?

This is the first product you should look into because it's really good.

If I have the option to use another feature or another product from Perception Point, I'll definitely consider them as a good player in the market, and I'll for sure start with a phone call to one of their salespeople.

Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
Buyer's Guide
Perception Point Advanced Email Security
November 2024
Learn what your peers think about Perception Point Advanced Email Security. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.
reviewer1528008 - PeerSpot reviewer
CISO at a manufacturing company with 1,001-5,000 employees
Real User
Straightforward to set up, good support, and quickly adapts to new threats
Pros and Cons
  • "The most valuable feature is the ability to identify malicious content and phishing emails and reduce the workload we have to do in terms of security."
  • "The only thing that can be improved in Perception Point is the in-depth analysis and attribution to cyberattack groups."

What is our primary use case?

We are today using this product for email filtering and we plan to use it later for file filtering on cloud-sharing platforms.

How has it helped my organization?

This solution is very effective at detecting malicious content and very fast in adapting to new threats. There have been new types of attacks which, instead of attaching malicious files to emails, have been attaching to Google Docs that are hosted on the Google Cloud. Within a couple of days, Perception Point updated the engine to a filter and block such attacks. For us, it was very beneficial because the users are not allowed to open attachments, but when people asked them to view a document on the cloud, they weren't used to it. This left them open to this type of attack.

The Perception Point incident response team acts like our own SOC team, which is important because we do not have a SOC, but rather a limited incident response team. This means that any external assistance allows us to work on the more critical areas and identify the events that we have to investigate. In general, it significantly reduces our internal workload.

When it comes to incident management, I think that the Perception Point incident analysis is very fast. It usually takes less than an hour to go back with initial reactions, and they adapt the technology very fast as well. They provide either interim solutions or full solutions to all of the incidents that are identified.

In terms of engine optimization, ever since we started working with Perception Point, we have been able to monitor improvements to their capabilities, including adaptations they have made. Moreover, our own team was able to work with the system and ask for improvements, and they've all been done very fast.

Perception Point has helped to reduce our false positive rate by approximately 90%. More generally, it has reduced the total number of alerts we get. We used to have more than 100 endpoint alerts per month and it has been reduced to individual ones. Overall, that is a greater than 90% drop in alerts.

What is most valuable?

The most valuable feature is the ability to identify malicious content and phishing emails and reduce the workload we have to do in terms of security. The quarter before we used Perception Point, we had about 400 positive identifications of malicious content being used by employees, probably getting them via email. Since using Perception Point, we have almost nothing.

What needs improvement?

The only thing that can be improved in Perception Point is the in-depth analysis and attribution to cyberattack groups. This is an issue I have raised with their product team. Currently, when we get malicious content, we don't know where it came from. One of the things that worries me the most, as a sysop, is whether we are being targeted by any of the cybercrime groups. This is something that Perception Point doesn't do, so I have another cyber threat intelligence team that does the investigating. Ideally, Perception Point should offer this as part of their service.

For how long have I used the solution?

We have been using Perception Point Advanced Email Security for the past four or five months.

What do I think about the stability of the solution?

We are using it as a SaaS and since we have been using it, there have been no noticeable service interruptions.

What do I think about the scalability of the solution?

It seems to be very scalable. It's cloud-based, so it should be able to scale nicely. We haven't done load tests because our load is not very high.

We have about 1,400 people who are protected by this product, and they work in every role that you find in an enterprise. We are located in Asia, Europe, and North America.

How are customer service and technical support?

The technical support is very good. Most of the time, they reply within one hour.

Which solution did I use previously and why did I switch?

Prior to Perception Point, we were using a solution by Barracuda. We switched because Barracuda didn't provide the capability to filter emails and block the malicious content we wanted.

How was the initial setup?

The initial setup was very simple and straightforward. As we are using Perception Point as a mail relay, it only involved changing the MX record or DNS records in order to relay our email messages to Perception Point, and whitelisting the Perception Point addresses in our email systems. It was a very simple configuration, and it was up and running very fast.

We have many domains, and some of them took some time, our major domain was done first and it was completed within one day.

After deployment, it started providing value immediately. That said, it took a few weeks before we identified everything that needed to be whitelisted or blacklisted.

It requires some administration in terms of blacklisting and whitelisting rules for URLs of domains. There are some cases that the out-of-the-box solution doesn't identify properly, especially when there are misconfigurations by people that we communicate with.

What about the implementation team?

I managed the deployment, but someone on my team did the technical setup.

What was our ROI?

We have seen ROI in the form of reduced security team activity, a reduction of employees clicking on phishing emails and malicious content, a reduction in the need to re-image machines that have been infected by malware, and a reduction in the incident response (IR) activities.

What's my experience with pricing, setup cost, and licensing?

We were able to get reasonable pricing that matches the ROI we want, so I think that it is the correct price point.

Which other solutions did I evaluate?

We evaluated other solutions including Mimecast, Sasa Software, Forcepoint, and a couple more. Some of the products that we looked at didn't offer a full SaaS solution so we didn't consider them.

We didn't perform a full pilot program with the rest of the vendors because we had a situation where we wanted to deploy very quickly. We were in a dialogue with Perception Point, it performed perfectly, and we just decided to move on with them.

What other advice do I have?

My advice for anybody who is considering Perception Point is that there are no false negatives and no false positives with this product. Overall, I am very happy with it.

I would rate this solution a nine out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
CEO at IGuardU
Real User
Provides good security protection by blocking crypto viruses, threats, and phishing attempts
Pros and Cons
  • "The solution’s effectiveness when it comes to detection is very good. It has a very good mechanism. It scans our emails. It identifies any threat or phishing attempts and phishing campaigns as well as any bad reputation, servers, or links, then it blocks them. This is what I find to be very good about this system."
  • "Its websites for analysis need to be a bit more approachable for people who are less technical. Technically, it is a fire-and-forget solution. So, you want to be able to implement this solution for a lot of companies who don't have security operation teams (SOCs) behind them. You need to have something where a secretary can jump onto this console and release whatever she needs to release. Therefore, it needs to be written in a very specific non-technical language."

What is our primary use case?

It transports rules from our mail system to their scanning mechanism.

It is a very straightforward solution. The mail just goes through their system. They scan it, and if there are any cases of cyber threats, then they will be stopped over there. We don't really feel the system. It is like fire-and-forget.

How has it helped my organization?

We have an organization which mostly uses mail to communicate. Today, there are a lot of social engineering attacks that go through vectors of sending you URLs to have phony websites for credential harvesting or a URL that will inject some kind of a payload into your browser. This system actually cleans it, blocks it, or alerts the user. This is what we find to be very good and how it protects our organization. We are not using the system per se; it is just protecting us. Think about it like going with some type of a shield that actually protects you.

In our case, we have a lot of mail traffic. So, we estimate something like 20 attacks a month. However, it really depends how your organization is targeted. If your organization is a target organization, you are probably going to have more attacks. This system will prevent you from being a victim of these types of attacks.

We have only had one false positive with Perception Point Advanced Email Security.

What is most valuable?

It keeps my emails safe. This is the main feature.

The solution’s effectiveness when it comes to detection is very good. It has a very good mechanism. It scans our emails. It identifies any threat or phishing attempts and phishing campaigns as well as any bad reputation, servers, or links, then it blocks them. This is what I find to be very good about this system. This is what we are always looking for.

What needs improvement?

Its websites for analysis need to be a bit more approachable for people who are less technical. Technically, it is a fire-and-forget solution. So, you want to be able to implement this solution for a lot of companies who don't have security operation teams (SOCs) behind them. You need to have something where a secretary can jump onto this console and release whatever she needs to release. Therefore, it needs to be written in a very specific non-technical language.

For how long have I used the solution?

I have been using it for three to four months - not very long.

What do I think about the stability of the solution?

It is very stable. There are no issues.

One person is needed for maintenance, e.g., if you need to release a false positive, but we haven't really had this experience yet. Otherwise, no one is needed.

What do I think about the scalability of the solution?

I presume Perception Point Advanced Email Security was built on a robust system where you can grow with it.

The users in our organization are my technical leader and me.

How are customer service and technical support?

The technical support team is very good. They are responsive and knowledgeable.

We are working with someone specific at Perception Point who is doing a very good job. This is important because if you have a false positive or something that needs further investigation, then you will need to use the Incident Response team. So, you want to have a very good connection with them.

The Incident Response team is very good at what they are doing when it comes to the incident responses. It is a very good company. I really recommend it.

Which solution did I use previously and why did I switch?

Our previous mail system, when it came to cleaning phishing links, was not very good.

We didn't switch. We added this solution as an additional security layer. The threat of a social engineering attack, crypto viruses, and all these URLs which will download something to your computer or will redirect for credential harvesting is becoming a bigger problem. People are attacking the human factor behind the computer, not the system itself. In this case, Perception Point Advanced Email Security is a good protecting layer for these kinds of attacks.

How was the initial setup?

The initial setup was a bit complex when it came to the transport rule, which was needed to create a 365 account on Microsoft. We did that with the Perception Point support team. They did this together with us. I would like this to be a little more accessible, explaining why they are doing this or put it into place.

Our deployment took half an hour to an hour. Configuration was required on Office 365.

After deployment, the solution started delivering value immediately, when it comes to stopping threats.

What about the implementation team?

We worked with the Perception Point support team. Together, we opened the console.

It took just one guy to set up the transport rule on Office 365.

What was our ROI?

Perception Point Advanced Email Security has helped to reduce the number of alerts received by our endpoint layer. It blocks the URL which downloads the payloads to the machines or is alerted that the URL is suspicious. Technically, it is preventing the payload from being downloaded to our machines, then the endpoint protection is not activated.

Because of the reduction in alerts, you don't need to start running around and checking each one of the computers to see what is happening or go into the console every now and then to check it. That is not happening, since you don't have anything to check. You are actually saving on your security team management. This has saved us a couple of hours. 

It's very difficult to find return on investment when it comes to security mechanisms, because there is no return on investment until something happens. If you have a crypto virus where someone will ask you for ransomware of a million dollars, this is your return on investment. We are trying to eliminate the option for this. When you come upon this ransomware, it is already too late. So, it's very difficult to calculate the ROI on this.

It is more of an insurance policy. However, in insurance, you still have your personal fees as well as a fee if something happens, where you take part of the damage upon yourself. I think this solution is more robust and bulletproof.

What's my experience with pricing, setup cost, and licensing?

When compared to other solutions on the market, it is relatively fair.

Which other solutions did I evaluate?

We used other solutions, like IronPort, and decided to add an additional layer.

What other advice do I have?

I would advise someone, "Go and do it."

This solution is a security layer that needs to be done or implemented in any organization because of the risks that people have today when it comes to attacking human factors. This is a good blocking solution for these attack vectors.

We are considering right now to extend the solution to SharePoint and OneDrive. We are looking for the budget.

I would rate this solution as a 10 out of 10.

Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
Chief Information Officer at a legal firm with 201-500 employees
Real User
Reduces the time that users may have to deal with an alert and stop their jobs
Pros and Cons
  • "The Perception Point Incident Response team acts as an extension of our SOC team. This is very important for us. This is a benefit provided for their main product of scanning our emails. If Perception Point can give me IR, this is really good versus other products that do not provide this kind of service. Perception Point's service is great. They are very professional. That reduces the time that my internal SOC has to deal with my internal IT person. They just send an email to the IR team at Perception Point, who continues the investigation and blocks any emails, if necessary. This is very good because it can reduce a lot of time and effort from my team. It is like an extension of my SOC, but external."
  • "They need more customer engagement. The product works very well. The IR works very well when we contact them. However, day-to-day, they should have more in communication with their customers explaining new products and features. There is possibly something that if I would know about it, then I would buy and use it. Maybe I need it. They need to improve their communications."

What is our primary use case?

The primary use case is email security.

How has it helped my organization?

We had a situation where we had a lot of spam and phishing emails in the organization. Perception Point Advanced Email Security was the only product that helped to stop that from happening.

Perception Point Advance Email Security has helped to reduce the number of alerts received by our endpoint layer by 20%. If they couldn't do a good job in blocking the phishing emails, eventually there would be an alert. This reduces the time and effort my team needs for addressing an alert. It reduces the time that users may have to deal with an alert and stop their internal jobs. We are a law firm. So, a lot of effort needs to be spent when an alert pops up.

What is most valuable?

This is the only solution that I know, which filters emails and secures mail relay. It is scanning all our emails and gives us advanced security information about it.

The solution has helped to reduce our false positive rate.

What needs improvement?

They need more customer engagement. The product works very well. The IR works very well when we contact them. However, day-to-day, they should have more in communication with their customers explaining new products and features. There is possibly something that if I would know about it, then I would buy and use it. Maybe I need it. They need to improve their communications.

For how long have I used the solution?

I have been using it for two years.

What do I think about the stability of the solution?

The stability is very good. It is very close to 100%.

What do I think about the scalability of the solution?

We are not that big of an enterprise organization, but it suits our needs. We have more than 500 users, which is thousands of emails a day. There have been no problems with the scalability.

How are customer service and support?

The Perception Point Incident Response team acts as an extension of our SOC team. This is very important for us. This is a benefit provided for their main product of scanning our emails. If Perception Point can give me IR, this is really good versus other products that do not provide this kind of service. Perception Point's service is great. They are very professional. That reduces the time that my internal SOC has to deal with my internal IT person. They just send an email to the IR team at Perception Point, who continues the investigation and blocks any emails, if necessary. This is very good because it can reduce a lot of time and effort from my team. It is like an extension of my SOC, but external.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We previously used two different products. They didn't filter all the phishing and the spam messages into my organization well enough. That was the main reason that we switched to Advanced Email Security.

We used to get suspicious emails. After deploying Perception Point Advanced Email Security, those suspicious emails were blocked and no longer being sent to our employees.

How was the initial setup?

The initial setup was straightforward. There were no problems with the implementation or integration with Microsoft 365. I don't remember any false positives.

The deployment took something like a day.

After deployment, it took a week for the solution to start delivering value when it comes to stopping threats.

What was our ROI?

We cannot measure it financially, but there has been return on the investment. My employees don't need to deal with alerts or phishing messages coming into their inboxes. This is where the return on investment comes in. My SOC team doesn't need to address every phishing or spam email. This saves us time so employees can continue with their work.

Perception Point Email Security has helped save about four hours a week for our SOC, which is nice.

What's my experience with pricing, setup cost, and licensing?

The pricing and licensing are very fair compared to competing companies in the same field.

Which other solutions did I evaluate?

Perception Point did a really good job versus the other products that we evaluated. This is one of the main reasons that we chose them.

What other advice do I have?

Do not hesitate to buy this solution.

I would rate this solution as nine out of 10.

Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
reviewer1522758 - PeerSpot reviewer
Chief Security Officer at a hospitality company with 1,001-5,000 employees
Real User
Reduced time investigating incidents from the endpoint layer
Pros and Cons
  • "I see from time to time that Perception Point is being proactive. They approach us, and say, "Can you check this, and this?" So, it does seem that they are an extension of my incident response."
  • "They can do better on the spam. Today, Perception Point is not our only solution. We have two solutions, and they are the second in line because the spam filtering is not yet the best."

What is our primary use case?

Email protection from:

  1. All malicious attachments. 
  2. Phishing URLs
  3. Phishing and spam emails.

How has it helped my organization?

We work mostly with Slack for incident management with their Incident Response team. Everything is recorded, maintained, and operated in Slack. This is easier for every team, making it easier for us to stick with this solution. They are online. We show evidence. In general, we have good communication.

What is most valuable?

Email is still the first victim, e.g., it is number one for hackers to use. This is why you want to have the best protection against those attempts. The mechanism Perception Point Advanced Email Security has against malicious, phishing attempts and all these hackers' attempts via email was the main reason to use this solution. It protects the company from all the email attempts that can put the company at risk.

What needs improvement?

They can do better on the spam. Today, Perception Point is not our only solution. We have two solutions, and they are the second in line because the spam filtering is not yet the best. 

From an operational perspective, as a customer, we want to have the ability to do all the changes that we want. I don't want to have to approach the Perception Point guys, and say, "Please do: A, B, C, D." I prefer to have my guys do our customizations.

For how long have I used the solution?

I started to use Perception Point Advanced Email Security even before my current position. So, I would have been using it for about four years.

What do I think about the stability of the solution?

In the four years that I worked with them, we have had maybe two downtimes. Obviously, that is a good percentage of uptime. I haven't had any big issues with them. So, the stability is very good.

Two security engineers manage the solution out of the SOC.

What do I think about the scalability of the solution?

We started small, then we expanded. Because it is a cloud-based solution, it is very easy to scale. 

From a user perspective, there are around 7,000 mailboxes with almost 300,000 emails a day. The solution is fully deployed (100 percent).

How are customer service and technical support?

We have used the technical support. Usually we use them when we have a false positive or false negative. It depends. We are using Slack, so they answer right away. They check and investigate it, so the technical support is quite good.

The vendor commits to the solution’s effectiveness when it comes to detection, but this is around an accuracy and detection rate of 99.5 percent. They sometimes miss and we find them. Obviously, we report them back, then they try to fix and solve them for the next time, which is a good thing. 

It is very important that the vendor’s Incident Response team work in the background and proactively help. They are also providing 24/7 support, so if something is happening while it is night, holidays, or weekends, then it is important that they will be proactive if they find something suspicious or something that requires actions. Therefore, we need them to be responsible. Some of this stuff, we can manage on our own, but there is stuff that they need to do on the back-end.

I see from time to time that Perception Point is being proactive. They approach us, and say, "Can you check this, and this?" So, it does seem that they are an extension of my incident response.

Once we report any stuff that we found, and for some reason haven't detected, they do everything very fast. It is almost real-time, and they are closing this gap. If they found something that they missed, or we told them, then they acted quickly.

Which solution did I use previously and why did I switch?

We had an email protection system that wasn't as good before. Now, our block percentage is much higher. So, we have fewer incidents happening in the company. Obviously, this shows in the ROI. I don't need my guys to start dealing with all these incidents. Perception Point Advanced Email Security also provides a very good investigation report of what it was trying to do. Then, we take it and leverage it, using it to improve our detection in our protection systems. Therefore, we have increased the effectiveness of our detection against malicious attacks, plus our SOC team is not spending as much time dealing with them.

We added Perception Point Advanced Email Security. We still have Fortinet FortiMail because of the anti-spam. Fortinet is the first in line to block the spam, but they are second in line when blocking all the malicious stuff.

How was the initial setup?

The initial setup was very straightforward. We did it in two phases, mostly. 

The phase one: Right away, we did all the malicious attachments. Obviously, we did it first in detection mode. After we saw there were not too many false positives, we changed it to block mode quite fast. It took one to two weeks, then we just changed it to block mode. 

The second phase was phishing URLs, which was a little more complicated than attachments. It was for detection only on URLs. We whitelisted all the legit URLs that had false positives. Once we finished with whitelisting, we enabled it on block mode. From that moment, it was quite straightforward. There were no issues. 

We can go into full production (fully live) with this solution in one month.

Sometimes, we have a URL that goes into a whitelist, but it happens once a month or something. It is a very low number. 

After deploying the solution, you can see all the blocking right away.

What about the implementation team?

One security engineer deployed it out of the SOC.

What was our ROI?

For specific incidents coming via email, we have reduced our SOC team time dealing with problems by 99 percent.

Perception Point Advanced Email Security has helped us reduce our false positive rate. We currently have a 99 percent success rate with one percent false positives. 

The solution has helped to reduce the number of alerts received by our endpoint layer. We have around 99.5 percent accuracy. This has affected our security operations a lot. The ROI has been very good. My guys have spent less time on investigating incidents from the endpoint, because it was already blocked on the Perception Point level. 

What's my experience with pricing, setup cost, and licensing?

They are not the most expensive vendor. There are much more expensive vendors. They are not cheap, but they are not the most expensive. They are somewhere in the middle.

The pricing is for the number of emails. There are additional costs for the number of files and scans.

Which other solutions did I evaluate?

I did evaluate two other solutions, Mimecast and Bitdam. Eventually, it was a combination of cost, integration, and support. I did want something that would work very fast and adjust to my needs. Also, the cost was important. We wanted something priced in the middle, not too expensive nor cheap.

Perception Point Advanced Email Security had a very good detection rate score. Obviously, that was one of the reasons we chose them eventually. It was not only because they are nice, but because the solution was top-ranked.

What other advice do I have?

If you are looking for a one stop solution that will deal with all your email security, then they are probably not the perfect one because you will still need to add more tools. If you are looking to be the best in security and stop all security threats coming through via email, add this solution to your current environment and trust that they have 99.9 success rates when blocking any malicious stuff. Depending on the company, you can either add them to your portfolio or replace other solutions that are not as good as them.

You need to remember to whitelist your internal services so they will not get blocked. For example, sometimes there are internal services that the company uses. Because they are internal, and not coming from the outside, most security tools will detect them as suspicious.

I would rate this solution as a nine out of 10.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
GOUTHAM KRISHNA P S - PeerSpot reviewer
Information Security Analyst at Channel Next
Real User
Top 5
User-friendly platform with efficient scalability
Pros and Cons
  • "The most valuable feature is the technical support services."
  • "They could provide additional data loss prevention features as we encounter different kinds of attacks in today's scenario."

What is our primary use case?

We use the product to safeguard your organization's email communication from various threats, particularly targeting senior-level employees. The aim is to prevent phishing attempts, spam, and other malicious attacks that often target executives or individuals accessing sensitive information.

What is most valuable?

The most valuable feature is the technical support services. They are doing a notable work. We can easily send requests to resolve issues in case of malicious attacks. Their response time is good. Additionally, the user interface is accessible. Even users from non-technical backgrounds can easily understand the status and nature of emails, whether they're spam, phishing, or malicious. This user-friendliness stands out as a significant positive point.

What needs improvement?

They could provide additional data loss prevention features as we encounter different kinds of attacks in today's scenario. It leads to data losses. It would be beneficial to include such functionality.

For how long have I used the solution?

We have been using Perception Point Advanced Email Security for five months.

What do I think about the stability of the solution?

The product is stable.

What do I think about the scalability of the solution?

The product scalability has been much appreciated. We do not encounter any lag or downtime. It doesn't impact the email flow aspect as well.

Which solution did I use previously and why did I switch?

We have used Mimecast before. Their user interface was complex and complicated to navigate. During the POC, it was evident that Perception Point could detect and prevent certain malicious emails that Mimecast had missed.

We switched to Perception Point as it has better reviews than other competitors in email security scenarios.

How was the initial setup?

The initial setup of Perception Point, whether deployed on-premises or in the cloud, was straightforward and efficient. The installation and configuration process took approximately an hour, including onboarding and DNS settings. Compared to other email security solutions, it was a quick setup process, requiring minimal time.

What was our ROI?

The product generates a good return on investment.

What other advice do I have?

Some features related to the user interface need improvement. While the pricing for email security alone remains reasonable, their additional offerings for collaboration apps like Teams, Zoom, and other web security vendors might entail a slightly higher cost.

I rate Perception Point Advanced Email Security an eight out of ten.

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)
Disclosure: My company has a business relationship with this vendor other than being a customer: customer/partner
PeerSpot user
Belgin Abraham - PeerSpot reviewer
Chief Executive Officer at Channel Next
Real User
Top 20
Provides valuable insights into threat scenarios, enhancing the understanding of potential risks and highly stable solution
Pros and Cons
  • "One is the hardware-assisted platform that provides more insight into the threat scenarios. And the other is their instant response team's availability, 24/7, for identifying and responding to incidents. These are the two main things that everyone likes."
  • "There is room for improvement in terms of adding the DLP (Data Loss Prevention) solution, which would be a good option for Perception Point to look into."

What is our primary use case?

There are multiple use cases. There are those who are facing big-time, sophisticated attacks through emails. Those who are looking for not only email security but also security for other cloud collaboration channels. Both scenarios. We sold the Perception Point.

What is most valuable?

One is the hardware-assisted platform that provides more insight into the threat scenarios. And the other is their instant response team's availability, 24/7, for identifying and responding to incidents. These are the two main things that everyone likes.

What needs improvement?

There is room for improvement in terms of adding the DLP (Data Loss Prevention) solution, which would be a good option for Perception Point to look into.

In future releases, additional features that our clients would like to see included in the next release of Perception Point are Phishing Link Protection (PLP) and security awareness training. Security awareness training used to come along with email security solutions.

For how long have I used the solution?

I have been selling this solution for two and a half years. We currently offer the latest version with web security. 

What do I think about the stability of the solution?

I would rate the stability a ten out of ten. 

What do I think about the scalability of the solution?

I would rate the scalability a ten out of ten. There have been no restrictions till now. We didn't face any issues.

We have around 50 clients. They are a mix of small, medium, and enterprise businesses.

How are customer service and support?

The customer service and support are okay. We didn't face any problems.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial setup is super easy because, from the last year's end, I didn't even miss any renewals. All the clients renewed. So, ten out of ten. I would rate it a ten on ten, where one being difficult and ten being easy. 

What about the implementation team?

The solution is deployed both on the cloud and on-premises. 

However, most of our clients have deployed the solution on the public cloud and either use G-Suite or Microsoft 365 as the cloud provider. 

If it's a straightforward deployment, around 15 to 20 minutes, or a maximum of 40 minutes with all configurations and training. There are multiple ways. If we do it within 15 minutes, that's for basic configurations. If there are extra configurations required for the client, it could reach 30 to 45 minutes.

ur deployment process is API-based and in-line mode. The basic 90% is in-line mode.

What's my experience with pricing, setup cost, and licensing?

I would rate the pricing model a five out of ten, where one being cheap and ten being expensive. 

The solution is neither cheap nor expensive. There are no additional costs to the standard license. 

What other advice do I have?

I would suggest believing in the solution's technology and believing in the right partners who are supporting the implementation of the solution.

Overall, I would rate the solution a ten out of ten. 

Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Buyer's Guide
Download our free Perception Point Advanced Email Security Report and get advice and tips from experienced pros sharing their opinions.
Updated: November 2024
Buyer's Guide
Download our free Perception Point Advanced Email Security Report and get advice and tips from experienced pros sharing their opinions.