We use Microsoft Exchange Online Protection for scanning and protecting email attachments and URLs. Primarily we use Mimecast for URL protection, but it's good to have a second step, particularly Microsoft Exchange Online Protection, just in case something slips through.
Security Specialist at Engen
Scans and protects emails, attachments, and URLs against threats and has good integration with Windows
Pros and Cons
- "What I like most about Microsoft Exchange Online Protection is its integration with Windows, so we have one central view for all alerts and incidents."
- "What I like most about Microsoft Exchange Online Protection is its integration with Windows, so we have one central view for all alerts and incidents."
- "Having orchestration features added to Microsoft Exchange Online Protection, particularly automation and remediation, would be quite useful."
- "Microsoft Exchange Online Protection is quite a difficult product."
What is our primary use case?
What is most valuable?
What I like most about Microsoft Exchange Online Protection is its integration with Windows, so we have one central view for all alerts and incidents.
What needs improvement?
I'm pretty happy with Microsoft Exchange Online Protection, so off the top of my head, I can't think of any reason for me to want to change something in the solution.
Having orchestration features added to Microsoft Exchange Online Protection, particularly automation and remediation, would be quite useful.
For how long have I used the solution?
I've been using Microsoft Exchange Online Protection for five or six years.
Buyer's Guide
Microsoft Exchange Online Protection (EOP)
April 2026
Learn what your peers think about Microsoft Exchange Online Protection (EOP). Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,164 professionals have used our research since 2012.
What do I think about the stability of the solution?
Microsoft Exchange Online Protection is quite stable.
What do I think about the scalability of the solution?
Microsoft Exchange Online Protection is a scalable solution.
How are customer service and support?
I haven't contacted technical support for Microsoft Exchange Online Protection.
Which solution did I use previously and why did I switch?
Before Microsoft Exchange Online Protection, we used Mimecast. We still use Mimecast, but for an antimalware solution, we've always used what's available on Windows.
How was the initial setup?
I didn't configure the solution, so I can't tell if the setup was straightforward or complex. Our Exchange administrators were the ones who set up Microsoft Exchange Online Protection.
What about the implementation team?
We implemented the solution in-house.
What's my experience with pricing, setup cost, and licensing?
Our license for Microsoft Exchange Online Protection is covered by our enterprise agreement.
What other advice do I have?
There are three thousand users of Microsoft Exchange Online Protection in our company. There is no plan to increase the number of users, at least not in the near future.
Microsoft Exchange Online Protection is quite a difficult product. I would recommend it because it's a good product. My advice to others looking into using it is to make sure their rules are configured correctly, and they have turned on all the necessary features.
I'm rating Microsoft Exchange Online Protection eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Network and Infrastructure Manager at Sonysugar
Provides valuable email protection and policy configuration features
Pros and Cons
- "The email policy configuration options in Microsoft EOP are satisfactory."
- "The product's end-of-life cycle could be extended."
What needs improvement?
The product's end-of-life cycle could be extended. When it gets upgraded, we should receive some incentives. For example, someone who has purchased a Microsoft professional license should be able to renew or upgrade without buying a new product.
There have been some online intrusions on security. If Microsoft packaged the updates more frequently, the protection would be better. If updates take less time, we might receive malicious emails.
Additionally, I would like to see changes in the licensing model. If someone has a corporate license with many users, they should get a better price.
For how long have I used the solution?
I have been working with Microsoft Exchange Online Protection (EOP) since 1998.
How are customer service and support?
We could get technical support services directly from Microsoft.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We use Sophos for email protection. Sophos enhances our accessibility and helps prevent malicious email intrusions.
What's my experience with pricing, setup cost, and licensing?
The product is expensive.
What other advice do I have?
The email policy configuration options in Microsoft EOP are satisfactory. I recommend it to any user who wants to use Microsoft.
I rate it a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Microsoft Exchange Online Protection (EOP)
April 2026
Learn what your peers think about Microsoft Exchange Online Protection (EOP). Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,164 professionals have used our research since 2012.
Senior infrastructure engineer at Cubic Information Systems
Comes with a shared mailbox feature but needs to improve backup
Pros and Cons
- "Microsoft EOP's most valuable feature is a shared mailbox."
- "The solution needs to improve its backup."
What is most valuable?
Microsoft EOP's most valuable feature is a shared mailbox.
What needs improvement?
The solution needs to improve its backup.
What do I think about the stability of the solution?
I rate the tool's stability a ten out of ten.
What do I think about the scalability of the solution?
Microsoft EOP is scalable.
How was the initial setup?
The tool's deployment is straightforward. You need to get a license to use the product.
What other advice do I have?
I rate Microsoft EOP a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
CyberSecurity Executive IAM Engineer at Tata Consultancy
An easy to setup solution that helps to manage special accounts
Pros and Cons
- "You can use the product to create special accounts."
- "We have experienced issues while migrating from on-prem to the cloud. The tool needs to improve its stability."
What is our primary use case?
I manage all the users and special accounts with the tool.
What is most valuable?
You can use the product to create special accounts.
What needs improvement?
We have experienced issues while migrating from on-prem to the cloud. The tool needs to improve its stability.
For how long have I used the solution?
I have been working with the solution for more than ten years.
What do I think about the stability of the solution?
I would rate the product's stability an eight out of ten.
How are customer service and support?
My experience with the tech support team is good.
How was the initial setup?
The product's setup is easy and quick.
What about the implementation team?
We relied on a third-party to complete the deployment.
What other advice do I have?
I would rate the solution a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Consultant at a consultancy with 11-50 employees
Effective scanning and integrated right into Office 365 but needs better support
Pros and Cons
- "It is scalable."
- "The biggest issue that I experience is that Microsoft keeps moving things around, and it's very inconsistent as to where you find the information when you're trying to work on different pieces."
What is our primary use case?
The solution is for general protection, specifically for email scanning to protect against threats.
How has it helped my organization?
The value of the solution is the fact that it's completely already integrated into the Office 365 environment so you don't have to go do different things to manage and be able to control, configure, and integrate security as part of the overall Mailpack.
For some customers, they don't feel comfortable having all their eggs in the Microsoft basket. Some prefer to have another scanner to do the scanning for protection.
What is most valuable?
The scanning is quite effective.
It's integrated right into Office 365.
The solution is stable.
It is scalable.
What needs improvement?
The biggest issue that I experience is that Microsoft keeps moving things around, and it's very inconsistent as to where you find the information when you're trying to work on different pieces. The fact that they keep changing it, keep changing the portals and moving things around, gets to be very frustrating when you're trying to get something configured for customers.
Technical support needs improvement.
The solution is a bit pricey.
For how long have I used the solution?
I've used the solution for quite a while at this point.
What do I think about the stability of the solution?
We've had no issues with stability.
What do I think about the scalability of the solution?
We've had no problem with scalability.
How are customer service and support?
We deal with support all of the time. Technical support could be better.
How would you rate customer service and support?
Negative
How was the initial setup?
The implementation is somewhere in the middle of easy and difficult. You do need to know what you're doing, and you're not always sure of both the level of the spam policies and the protection you're putting on, for example, what it's actually gonna do to mail. It takes experience. Somebody new is not generally going to figure it out quickly.
The level of maintenance depends on the size of the organization. That said, it doesn't take a lot of care and feeding once it's set up properly.
What's my experience with pricing, setup cost, and licensing?
The pricing is moderate. I'd rate them five or six out of ten. They are a bit expensive, considering I'm already paying for staff in the portal.
What other advice do I have?
I spend 99% of my time working with Microsoft products. We do resell Microsoft. We're a small business partner.
I'd rate the solution seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Senior Services Manager at NextCom Systems Inc
Scalable solution with great admin interface but issues with impersonisation
Pros and Cons
- "Online Protection's most valuable feature is its admin interface."
- "Online Protection has an issue in that it doesn't provide an option to stop impersonation."
What is our primary use case?
I primarily use Online Protection for technical support.
How has it helped my organization?
Online Protection has allowed our customers to keep their data on our site using the DLP the solution offers.
What is most valuable?
Online Protection's most valuable feature is its admin interface.
What needs improvement?
Online Protection has an issue in that it doesn't provide an option to stop impersonation.
For how long have I used the solution?
I've been using Online Protection for about a year.
What do I think about the stability of the solution?
I would rate Online Protection's stability seven out of ten.
What do I think about the scalability of the solution?
I would rate Online Protection's scalability ten out of ten.
How was the initial setup?
The initial setup was straightforward.
What's my experience with pricing, setup cost, and licensing?
Online Protection is fairly expensive.
What other advice do I have?
I would give Online Protection a rating of seven out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Efficient Email safety, but gray email handling needs improvement
Pros and Cons
- "The pre-set policies and configuration analyzer are the most valuable features."
- "When you're using a Microsoft product solution, you can scale it, but if you're not, there are limitations."
What is our primary use case?
Microsoft Exchange Online Protection's use case can be email collaboration, data protection from various threats such as phishing or malware, and deploying anti-spam policies and anti-malware policies to ensure user safety. Additionally, the attack simulation and training features within the solution can be used to train end users across different campaigns happening over the internet. Other features like saved attachments, saved documents, and disabling options in Microsoft Exchange Online Protection can also be utilized.
What is most valuable?
The pre-set policies and configuration analyzer are the most valuable features in my opinion. The configuration analyzer is a great function to bring about strong external protection, and one can either turn on the pre-set policies or take help from the configuration analyzer to get recommendations for better protection.
What needs improvement?
One area that could be improved is handling gray emails, which are emails with attachments or newsletters that are not necessarily malicious, but are coming from different providers and are being received by various customers. Microsoft Exchange Online Protection may not be fully capable of stopping these emails until submitted for investigation over a specific period of time by Microsoft experts. This process needs improvement.
For how long have I used the solution?
I have been working with the product for approximately six years.
What do I think about the stability of the solution?
The stability of this solution is quite good. It's been working well for a long time. Microsoft is constantly updating it and adding more features. I would rate it a nine out of ten.
What do I think about the scalability of the solution?
I would rate its scalability a seven out of ten. There are certain restrictions. When you're using a Microsoft product solution, you can scale it, but if you're not, there are limitations.
If a company is doing business transactions, sending and collaborating, or choosing teams, I suggest they use Exchange Online Protection. But it may not be enough for any organization that is doing its best, as many threats are happening through different communication channels. I suggest using Office 365 as well, which comes with more advanced functionalities.
How are customer service and support?
The experience with customer service from Microsoft varies. For example, if you open a ticket and get good engineers or support representatives, the experience is obviously good. It really depends on the quality of the support you receive. Overall, my experience has been average. Sometimes I get very bad responses from engineers or developers who don't understand the service or may not be properly trained on it. It can be hard for someone like me to explain everything so that they can understand the problem, and they may need to consult their team or do some research before providing a solution. These things take time. But if you get a good representative who is knowledgeable, then the experience is very smooth.
How was the initial setup?
The initial setup is very simple. There are certain policies within the environment that will do the job automatically if you don't do anything. Moreover, every organization has default policies that are automatically applied if you don't do anything, but Microsoft provides documentation if you want to customize the policies. It is easy to work around the default policies if you need to make changes.
What about the implementation team?
EOP is mainly deployed for the public cloud and there is no on-premises version available. However, if an organization has an on-premises email solution, they can choose to connect it to EOP to protect their emails with external protection. Organizations can reroute their emails through EOP so that all inbound and outbound emails go through the EOP solution and get filtered accordingly.
What's my experience with pricing, setup cost, and licensing?
I would rate it a seven out of ten. It is a low-price solution.
What other advice do I have?
Overall, I would rate Microsoft Exchange Online Protection a six out of ten. It is a good product. However, it may not meet all the requirements of today's business world. But if you combine it with different solutions in production, then it becomes a lot more effective.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Software Engineer at Eighty 20 Solutions
Helpful safe links, reliable, and plenty of features
Pros and Cons
- "The most valuable features of Microsoft Exchange Online Protection are the EOP, ATP, safe links, fishing, and antispam."
- "Not all settings can be configured automatically and most still require manual configuration. However, there is an automation tool available that can be used to input all the configurations either as a script or a tool it would be helpful."
What is our primary use case?
We are using Microsoft Exchange Online Protection for the migration of users from on-premise to the cloud.
What is most valuable?
The most valuable features of Microsoft Exchange Online Protection are the EOP, ATP, safe links, fishing, and antispam.
What needs improvement?
Not all settings can be configured automatically and most still require manual configuration. However, there is an automation tool available that can be used to input all the configurations either as a script or a tool it would be helpful.
For how long have I used the solution?
I have been using Microsoft Exchange Online Protection for approximately three years.
What do I think about the stability of the solution?
The stability of Microsoft Exchange Online Protection is good. We have not had many issues.
I rate the stability of Microsoft Exchange Online Protection a nine out of ten.
Which solution did I use previously and why did I switch?
I have used Mimecast. I do not have a lot of experience in Mimecast.
Microsoft Exchange Online Protection can handle a more broad range of areas than Mimecast.
How was the initial setup?
The initial setup of Microsoft Exchange Online Protection and streamlining is complex. When we use a feature and we try to streamline them based on its outcomes can be difficult, such as false positives.
We often use third-party tools for the deployment. We try and use Microsoft native tools, such as Office Configuration Analyzer.
What about the implementation team?
I help my customers implement the solution and it typically takes one week with two consultants.
What's my experience with pricing, setup cost, and licensing?
The price of Microsoft Exchange Online Protection is reasonable.
What other advice do I have?
If you're looking for recommendations, I suggest selecting the standard or strict settings provided by Microsoft for configuring Microsoft Exchange Online Protection. You can start with the standard settings and gradually increase the blocking and other settings such as spam confidence level based on your experience over time. It's important to keep in mind that further tuning may be required based on false positives and other factors, which will require manual adjustments based on experience. This configuration process is not a one-time setup and will evolve based on your customer experience.
I rate Microsoft Exchange Online Protection a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Download our free Microsoft Exchange Online Protection (EOP) Report and get advice and tips from experienced pros
sharing their opinions.
Updated: April 2026
Popular Comparisons
Microsoft Defender for Endpoint
Microsoft Defender for Office 365
Proofpoint Email Protection
Check Point Harmony Endpoint
Check Point Email Security (formerly Harmony Email & Collaboration)
Check Point Harmony SASE (formerly Perimeter 81)
ESET Endpoint Protection Platform
Cisco Secure Email
Abnormal Security
Fortinet FortiMail
CyberArk Endpoint Privilege Manager
Buyer's Guide
Download our free Microsoft Exchange Online Protection (EOP) Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- What to choose: an endpoint antivirus, an EDR solution or both?
- Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
- Looking for alternatives to Symantec Cloud Protection Engine
- Who provides a better antivirus solution: Bitdefender or Sophos?
- Which antivirus is best for isolated work PCs?
- How do you identify malware?
- Why are Anti-Malware Tools important for companies?
- When evaluating Antimalware Tools, what aspect do you think is the most important to look for?
- When evaluating Anti-Malware Tools, what aspect do you think is the most important to look for?


















