Microsoft Exchange Online Protection (EOP) Reviews

We use our company's Microsoft Exchange Online Protection as a spam filter, virus protection, and malware protection.

I find the solution's filtering and malware protection features to be the most valuable ones.

Other users wish to see the encryption feature added to the solution in the future.

I have been using Microsoft Exchange Online Protection for three or four years. My company has used it for a longer time. Also, I don't remember the version of the solution I am using. My company is an end customer of the solution.

The solution's stability is very, very good. I didn't face any problems in the last year.

Between 50 and 100 users are using the solution in my company. At the moment, we have three administrators for the solution. Normally, I am the one working on the solution. I am not sure whether I am going to increase the solution's usage in the future. At the moment, we are still going strong with Microsoft Exchange Online Protection.

I haven't contacted technical support. It has been a really long time since I contacted Microsoft technical support. So, it has been more than thirteen or fourteen years. I have no idea how it is today. A long time ago, it was very good.

It was deployed long before I got over the task in my company, so I wasn't a part of the deployment process.

My boss told me that he checked an alternative for Microsoft Exchange Online Protection, maybe because of the cost, which I am not sure. I don't know how much we pay for this. My boss looks after the payment part. So, Mimecast was the other solution he was considering as an alternative. Mimecast could be much more expensive or much cheaper, but I have no idea. So my boss asked me to check out Mimecast and see if there's any difference. In my opinion, there is no big difference between Microsoft Exchange Online Protection and Mimecast. They both are reliable and work quite well. As we are now running with Microsoft Exchange Online Protection for years, I don't see the need to switch over to Mimecast.

I am satisfied with the overall product. It wasn't easy or intuitive enough for me to start using it. So, the reason was that the solution changed. I started to work with it shortly after it changed from the servers and changed to another part of Azure network. It was not quite easy, but it was okay for me since I'm used to such problems and switching over to other problems.

Our team was responsible for everything in our company, but since I started using Microsoft Exchange Online Protection, it's much easier for me as an administrator.

Overall, I rate the product an eight out of ten.

Microsoft Exchange Online Protection's use case can be email collaboration, data protection from various threats such as phishing or malware, and deploying anti-spam policies and anti-malware policies to ensure user safety. Additionally, the attack simulation and training features within the solution can be used to train end users across different campaigns happening over the internet. Other features like saved attachments, saved documents, and disabling options in Microsoft Exchange Online Protection can also be utilized.

The pre-set policies and configuration analyzer are the most valuable features in my opinion. The configuration analyzer is a great function to bring about strong external protection, and one can either turn on the pre-set policies or take help from the configuration analyzer to get recommendations for better protection.

One area that could be improved is handling gray emails, which are emails with attachments or newsletters that are not necessarily malicious, but are coming from different providers and are being received by various customers. Microsoft Exchange Online Protection may not be fully capable of stopping these emails until submitted for investigation over a specific period of time by Microsoft experts. This process needs improvement.

I have been working with the product for approximately six years.

The stability of this solution is quite good. It's been working well for a long time. Microsoft is constantly updating it and adding more features. I would rate it a nine out of ten.

I would rate its scalability a seven out of ten. There are certain restrictions. When you're using a Microsoft product solution, you can scale it, but if you're not, there are limitations.

If a company is doing business transactions, sending and collaborating, or choosing teams, I suggest they use Exchange Online Protection. But it may not be enough for any organization that is doing its best, as many threats are happening through different communication channels. I suggest using Office 365 as well, which comes with more advanced functionalities.

The experience with customer service from Microsoft varies. For example, if you open a ticket and get good engineers or support representatives, the experience is obviously good. It really depends on the quality of the support you receive. Overall, my experience has been average. Sometimes I get very bad responses from engineers or developers who don't understand the service or may not be properly trained on it. It can be hard for someone like me to explain everything so that they can understand the problem, and they may need to consult their team or do some research before providing a solution. These things take time. But if you get a good representative who is knowledgeable, then the experience is very smooth.

The initial setup is very simple. There are certain policies within the environment that will do the job automatically if you don't do anything. Moreover, every organization has default policies that are automatically applied if you don't do anything, but Microsoft provides documentation if you want to customize the policies. It is easy to work around the default policies if you need to make changes.

EOP is mainly deployed for the public cloud and there is no on-premises version available. However, if an organization has an on-premises email solution, they can choose to connect it to EOP to protect their emails with external protection. Organizations can reroute their emails through EOP so that all inbound and outbound emails go through the EOP solution and get filtered accordingly.

I would rate it a seven out of ten. It is a low-price solution.

Overall, I would rate Microsoft Exchange Online Protection a six out of ten. It is a good product. However, it may not meet all the requirements of today's business world. But if you combine it with different solutions in production, then it becomes a lot more effective.

Our primary use case is to support client environments. We need to check if everything is working fine if the email flows are fine, and if any certificates need to be renewed. Those are the system admin jobs that we do as system engineers.

The console has everything we need for management. We use all the available features. Every feature available in the management console is sufficient for us to manage.

All those features within the management, the exchange management, whether it's the shell management or the console management, are sufficient by themselves for the versions of the PUs. They keep changing the versions with every update, and they also add feature updates to the consoles. So that also keeps upgrading. So, the solution keeps improving. 

The best part is Microsoft EOP also includes publishing management, more inclusive with Exchange and all SharePoint and everything as well. So, they have partial modules for each Exchange and SharePoint. So that is a good thing as well. We can now manage things through partial. It could be done remotely as well. You don't have to sit on the server. It could also be on a jumpbox and just shell into it directly to an exchange server and manage that exchange server.  

I've been using it since I started working, so it's been a while. So, I have been working with this solution since 2016. 

The solution is fairly stable. The stability depends on when there's an outage or issues. From the Microsoft standard, they have had some issues within, maybe if there are some vulnerabilities in use. If there are some rogue actors or somebody has compromised the Exchange servers or something, they've affected the Exchange server services in the past. So, they do send out information. You can obtain that information from their site, which states, "This is what has happened with the Exchange servers, or all the Exchange servers may be down at the moment." So, those sorts of outages are already reported. And if Microsoft detects them, they report it across all the platforms and communities, providing information through chat as well. So, some visibility is always there.

Stability also depends on the way you manage it, basically. It comes down to how well it's managed, set up, and managed for individual organizations at their sites. So, that's why we have server admins to see how it's managed.

If the server hardware is sufficient enough, if they have sufficient memory, or if they're properly supporting Microsoft EOP. The system requirements need to be fine-tuned. All the VMs hosted need enough memory, and there should be sufficient storage for the databases and such.

So, from Microsoft's point of view, the stability of Exchange as a product depends on the servers running based on our recommendations and specifications. So, it all hinges on the licensing the users have purchased from Microsoft. Unless there's an outage or a vicious attack, or some malicious attack on the service itself, which they report immediately, there aren't any significant issues.

So, I would rate the stability an eight out of ten.

I would rate the scalability an eight out of ten. Almost everyone in the company uses it, probably thousands of end users. We didn't encounter any problems with scalability. In fact, Microsoft provides recommendations on how to migrate to the cloud and such. So, everything is seamless. 

Even when configuring reserves, it automatically alerts you with exceptions and errors. Especially during mailbox migrations to the cloud, like stage migrations or batch migrations, it provides suggestions. For example, it might notify you that you're processing too many mailboxes at once based on their sizes and recommend reducing the quantity. These prompts are readily available. 

We opted for this solution because most of the enterprises we have to support the basic applications we support. We are the 365 admins as well as Azure admins, and also in the on-prem environment. So we keep migrating mailboxes and chatboxes over, and sometimes, we have to do complete exchange migrations to the cloud. SharePoint migrations, we handle, as well as a server management team.

The initial setup is just a standard process. You just need to follow the Microsoft documentation and send whichever you're very comfortable with your experience. For everything, there are articles and documentation with Microsoft. You just need to follow them, and it's just that you need to consider what your environment is and how to expand information about your current infrastructure. Based on that, you have to consider things while upgrading it or moving it across the cloud.

Some of them are completely cloud. Some of them are hybrid environments. They have a few on-premises for legacy printers and legacy applications. So, for SMTP communication and other stuff. But mostly, most of the users' mailboxes are on the cloud.

The time taken for deployment depends on the size of the organization, how many mailboxes they have, and the main databases. There's no one standard procedure. It could range from a few hours for a small organization to weeks for a large organization.

The licensing can be on the expensive side, especially in the cloud space. They may not be the absolute most expensive option, but they are indeed on the higher end. However, that comes with a certain level of quality. It's like comparing Apple products to other phones in the market. For example, Apple iPhones and tablets are priced higher for a reason. They are known for their security and quality, which is why they can command a premium price.

And people are willing to pay that premium because they trust the brand.

I would rate it nine out of ten because of its widespread usage and trust in the market at the enterprise level. Microsoft products, especially Exchange, are widely used and trusted. 

They have a significant presence, capturing a major share of the enterprise market. All their applications are widely used, whether it's for emails, databases, SQL, backups with OneDrive, cloud storage, or SharePoint, and more. They offer a suite of products for office tools. So, these are the commonly used tools in any organization, be it medium-sized, small, or even a small retailer. Given this, I would rate them a nine or ten because of their extensive market share, both globally and locally.

Microsoft's dependability and trust are a result of its long-standing presence in the industry. They've been in business for a significant amount of time.

Not a lot of our company's clients actually get Microsoft Exchange Online Protection (EOP) implemented in their IT environments.

My company's clients use Microsoft Exchange Online Protection (EOP) for email protection.

The most valuable feature of the solution is that it is a one-stop shop going through Microsoft. You don't have to worry about additional out-of-the-box features since the solution already offers a very good amount of basic protection or security for your emails. Most of our clients are small-sized businesses, so it suits them fine.

Our company faces difficulty with Microsoft Exchange Online Protection (EOP) because it's too big, clunky, and difficult for a small client to implement quickly and easily. Microsoft's competitors work a lot better since their products come out of the box directly, and one needs to turn them on to make them work. Microsoft Exchange Online Protection (EOP) requires a lot of configuration, support, and management. The aforementioned areas can be considered for improvement.

I have been using Microsoft Exchange Online Protection (EOP) for five years. I work at an IT support company that resells, implements, and offers support for Microsoft products.

My company hasn't faced any stability issues with the solution.

My company hasn't had the need to use the solution's scalability, but I believe that it is a scalable product.

My company works with small to medium-sized businesses, where even among the medium-sized ones, we prefer the smaller ones.

In general, my company is happy with Microsoft support, and we haven't needed support specifically for Microsoft Exchange Online Protection (EOP).

I rate the technical support an eight to nine out of ten.

Positive

The initial setup of the solution does not consist much of installing it, but meeting the needs of our company's clients. The setup phase requires quite a bit of planning.

There is no standard amount of time taken when it comes to the deployment of the solution. After our company's clients are prepared to make payments toward the solution, it takes around four hours to deploy the solution.

The solution falls on the higher or more expensive side of the spectrum.

The maintenance of the solution is neither too easy nor too difficult. The maintenance is not so easy because what tends to happen is things get set up, and those decisions don't get revisited regularly. There needs to be some process where the settings, decisions, and configurations get reviewed to determine whether they still meet the company's clients' needs regularly.

The solution can be more beneficial for medium and large-sized businesses compared to the smaller ones.

I rate the overall solution a six out of ten.

My company uses Microsoft Exchange Online Protection for additional security, spam filtering, and DNS spoofing.

The most valuable features of the solution are the security and compliance it offers to users.

The solution lacks to elaborate on its spam policies. For improvement, spam policies need to be more elaborate.

I have been using Microsoft Exchange Online Protection for seven years. I use the solution's latest version. I am a customer of the solution.

Stability-wise, I rate the solution a seven and a half out of ten.

The product's availability is somewhat limited. Scalability-wise, I rate the solution a seven out of ten.

I contacted the solution's technical support in the past, and they quickly responded. I rate the technical support a nine out of ten.

Positive

The initial setup of Microsoft Exchange Online Protection was easy.

The solution is deployed on the cloud.

The pricing for the solution depends on what you are trying to achieve with the use of the product, but I know that it is not a cheaply priced product. Yearly payments have to be made towards the licensing fees of the solution.

Microsoft Exchange Online Protection is a good product.

I rate the overall product a seven out of ten.

The reason for the use of Microsoft Exchange Online Protection is that the solution is native to Microsoft Exchange.

It is easy to configure, easy to use, easy to add exclusions, easy to track, and easy to add anything else if you want.

We have come across cases pointing out that if one is not registered with DKIM on the solution, certain features don't work. Also, tools don't work if you do not register your SPF. So, the aforementioned areas should be considered for improvement. That's why one needs to configure the tenant perfectly. After that, the features and security tools can be used nicely. Also, If one could have any other email gateway that is not working and acts as a secondary gateway on your tenant, then it would be a helpful update. As I see right now, there is no such feature update on Microsoft 365's roadmap. So, such changes can lower the cost of licenses. The solution can be made cheaper.

I have experience with Microsoft Exchange Online Protection for fourteen months. My customers have been using the solution for three years. A lot of customers changed their antiviruses to Microsoft Defender. We are consultants and not resellers. We give samples of Microsoft products, and our customers decide what is what. Owing to budget, our customers opted for Microsoft Defender. Also, there is no version of Microsoft Exchange Online Protection.

The product could be more stable. Microsoft products could be more stable because sometimes, even though they are updating some things, we cannot find those updates. Sometimes, they change their UI, and since we are not made aware of it fully, we keep searching for the new UI feature. Sometimes they also depreciate some of the features. At times, there are new viruses being introduced, and they need time to adjust the viruses.

It is a scalable solution. Scalability-wise, I rate the solution a ten out of ten. My clients range from small to very large enterprise-sized businesses. One of our clients has five million users, while some of our clients have a hundred and fifty users. So it varies extensively.

Microsoft support is the worst. If you are in a hurry, they don't address your issues. As a consultant, my problems are level two and above, not level one. We are creating cases and tickets while level-one issues are coming to us, which is a time-consuming thing. We do not have any time to spend on such issues. It's their job to manage us, but we can solve the level one problem. Maybe we can solve the level two problem as well, but we have to start from zero again and again. Also, sometimes they go on holiday for one month maybe, and we are our cases. So, we keep waiting. It takes too much time to get to a support partner. I rate the technical support a three out of ten.

Negative

The solution's initial setup process was easy. Even a finance employee can do the setup.

Those with previous experience can deploy it in one hour. If you need to check the documents and check the videos, then it may take two or three days to deploy the solution. Only one engineer is required for deployment.

Maintenance is required because sometimes it doesn't work. If you have not registered to DKIM or SPF, you cannot use the solution on the cloud. If you delete it somehow, you cannot use the solution. Hence, you need to check the solution regularly. So, it is not Microsoft's problem. It's your problem. So, it's a tenant-owner problem, so you need to check them.

I am the only person involved in maintaining the solution.

My clients have deployed the solution on public and hybrid clouds.

The solution is very expensive right now.

On some occasions, it's cheap compared to the Microsoft Defender. If I check online, its prices can be made a little bit lower. On a scale of one to ten, where one is cheap, and ten is very expensive, I rate the pricing a six. For licensing, we can make monthly or yearly payments. Right now, we pay 5 USD per month to secure a person's license.

Microsoft Exchange Online Protection is easily accessible. Also, it's easy to use and configure. The solution offers a user-friendly UI, and tracking incidents becomes effortless. It provides the convenience of easily monitoring specific aspects and utilizing KQL to track any additional requirements. Considering these advantages, I would rate the overall solution an eight out of ten.

The solution is for general protection, specifically for email scanning to protect against threats.

The value of the solution is the fact that it's completely already integrated into the Office 365 environment so you don't have to go do different things to manage and be able to control, configure, and integrate security as part of the overall Mailpack. 

For some customers, they don't feel comfortable having all their eggs in the Microsoft basket. Some prefer to have another scanner to do the scanning for protection.

The scanning is quite effective.

It's integrated right into Office 365.

The solution is stable.

It is scalable.

The biggest issue that I experience is that Microsoft keeps moving things around, and it's very inconsistent as to where you find the information when you're trying to work on different pieces. The fact that they keep changing it, keep changing the portals and moving things around, gets to be very frustrating when you're trying to get something configured for customers.

Technical support needs improvement.

The solution is a bit pricey. 

I've used the solution for quite a while at this point. 

We've had no issues with stability.

We've had no problem with scalability.

We deal with support all of the time. Technical support could be better.

Negative

The implementation is somewhere in the middle of easy and difficult. You do need to know what you're doing, and you're not always sure of both the level of the spam policies and the protection you're putting on, for example, what it's actually gonna do to mail. It takes experience. Somebody new is not generally going to figure it out quickly.

The level of maintenance depends on the size of the organization. That said, it doesn't take a lot of care and feeding once it's set up properly.

The pricing is moderate. I'd rate them five or six out of ten. They are a bit expensive, considering I'm already paying for staff in the portal. 

I spend 99% of my time working with Microsoft products. We do resell Microsoft. We're a small business partner. 

I'd rate the solution seven out of ten. 

I primarily use Online Protection for technical support.

Online Protection has allowed our customers to keep their data on our site using the DLP the solution offers.

Online Protection's most valuable feature is its admin interface.

Online Protection has an issue in that it doesn't provide an option to stop impersonation. 

I've been using Online Protection for about a year.

I would rate Online Protection's stability seven out of ten.

I would rate Online Protection's scalability ten out of ten.

The initial setup was straightforward.

Online Protection is fairly expensive.

I would give Online Protection a rating of seven out of ten.