I primarily use Online Protection for technical support.
Senior Services Manager at a retailer with 1-10 employees
Scalable solution with great admin interface but issues with impersonisation
Pros and Cons
- "Online Protection's most valuable feature is its admin interface."
- "Online Protection has an issue in that it doesn't provide an option to stop impersonation."
What is our primary use case?
How has it helped my organization?
Online Protection has allowed our customers to keep their data on our site using the DLP the solution offers.
What is most valuable?
Online Protection's most valuable feature is its admin interface.
What needs improvement?
Online Protection has an issue in that it doesn't provide an option to stop impersonation.
Buyer's Guide
Microsoft Exchange Online Protection (EOP)
January 2026
Learn what your peers think about Microsoft Exchange Online Protection (EOP). Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,114 professionals have used our research since 2012.
For how long have I used the solution?
I've been using Online Protection for about a year.
What do I think about the stability of the solution?
I would rate Online Protection's stability seven out of ten.
What do I think about the scalability of the solution?
I would rate Online Protection's scalability ten out of ten.
How was the initial setup?
The initial setup was straightforward.
What's my experience with pricing, setup cost, and licensing?
Online Protection is fairly expensive.
What other advice do I have?
I would give Online Protection a rating of seven out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Software Engineer at a tech services company with 51-200 employees
Helpful safe links, reliable, and plenty of features
Pros and Cons
- "The most valuable features of Microsoft Exchange Online Protection are the EOP, ATP, safe links, fishing, and antispam."
- "Not all settings can be configured automatically and most still require manual configuration. However, there is an automation tool available that can be used to input all the configurations either as a script or a tool it would be helpful."
What is our primary use case?
We are using Microsoft Exchange Online Protection for the migration of users from on-premise to the cloud.
What is most valuable?
The most valuable features of Microsoft Exchange Online Protection are the EOP, ATP, safe links, fishing, and antispam.
What needs improvement?
Not all settings can be configured automatically and most still require manual configuration. However, there is an automation tool available that can be used to input all the configurations either as a script or a tool it would be helpful.
For how long have I used the solution?
I have been using Microsoft Exchange Online Protection for approximately three years.
What do I think about the stability of the solution?
The stability of Microsoft Exchange Online Protection is good. We have not had many issues.
I rate the stability of Microsoft Exchange Online Protection a nine out of ten.
Which solution did I use previously and why did I switch?
I have used Mimecast. I do not have a lot of experience in Mimecast.
Microsoft Exchange Online Protection can handle a more broad range of areas than Mimecast.
How was the initial setup?
The initial setup of Microsoft Exchange Online Protection and streamlining is complex. When we use a feature and we try to streamline them based on its outcomes can be difficult, such as false positives.
We often use third-party tools for the deployment. We try and use Microsoft native tools, such as Office Configuration Analyzer.
What about the implementation team?
I help my customers implement the solution and it typically takes one week with two consultants.
What's my experience with pricing, setup cost, and licensing?
The price of Microsoft Exchange Online Protection is reasonable.
What other advice do I have?
If you're looking for recommendations, I suggest selecting the standard or strict settings provided by Microsoft for configuring Microsoft Exchange Online Protection. You can start with the standard settings and gradually increase the blocking and other settings such as spam confidence level based on your experience over time. It's important to keep in mind that further tuning may be required based on false positives and other factors, which will require manual adjustments based on experience. This configuration process is not a one-time setup and will evolve based on your customer experience.
I rate Microsoft Exchange Online Protection a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Microsoft Exchange Online Protection (EOP)
January 2026
Learn what your peers think about Microsoft Exchange Online Protection (EOP). Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,114 professionals have used our research since 2012.
Security Specialist at a energy/utilities company with 1,001-5,000 employees
Scans and protects emails, attachments, and URLs against threats and has good integration with Windows
Pros and Cons
- "What I like most about Microsoft Exchange Online Protection is its integration with Windows, so we have one central view for all alerts and incidents."
- "Having orchestration features added to Microsoft Exchange Online Protection, particularly automation and remediation, would be quite useful."
What is our primary use case?
We use Microsoft Exchange Online Protection for scanning and protecting email attachments and URLs. Primarily we use Mimecast for URL protection, but it's good to have a second step, particularly Microsoft Exchange Online Protection, just in case something slips through.
What is most valuable?
What I like most about Microsoft Exchange Online Protection is its integration with Windows, so we have one central view for all alerts and incidents.
What needs improvement?
I'm pretty happy with Microsoft Exchange Online Protection, so off the top of my head, I can't think of any reason for me to want to change something in the solution.
Having orchestration features added to Microsoft Exchange Online Protection, particularly automation and remediation, would be quite useful.
For how long have I used the solution?
I've been using Microsoft Exchange Online Protection for five or six years.
What do I think about the stability of the solution?
Microsoft Exchange Online Protection is quite stable.
What do I think about the scalability of the solution?
Microsoft Exchange Online Protection is a scalable solution.
How are customer service and support?
I haven't contacted technical support for Microsoft Exchange Online Protection.
Which solution did I use previously and why did I switch?
Before Microsoft Exchange Online Protection, we used Mimecast. We still use Mimecast, but for an antimalware solution, we've always used what's available on Windows.
How was the initial setup?
I didn't configure the solution, so I can't tell if the setup was straightforward or complex. Our Exchange administrators were the ones who set up Microsoft Exchange Online Protection.
What about the implementation team?
We implemented the solution in-house.
What's my experience with pricing, setup cost, and licensing?
Our license for Microsoft Exchange Online Protection is covered by our enterprise agreement.
What other advice do I have?
There are three thousand users of Microsoft Exchange Online Protection in our company. There is no plan to increase the number of users, at least not in the near future.
Microsoft Exchange Online Protection is quite a difficult product. I would recommend it because it's a good product. My advice to others looking into using it is to make sure their rules are configured correctly, and they have turned on all the necessary features.
I'm rating Microsoft Exchange Online Protection eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Network and Infrastructure Manager at a manufacturing company with 201-500 employees
Provides valuable email protection and policy configuration features
Pros and Cons
- "The email policy configuration options in Microsoft EOP are satisfactory."
- "The product's end-of-life cycle could be extended."
What needs improvement?
The product's end-of-life cycle could be extended. When it gets upgraded, we should receive some incentives. For example, someone who has purchased a Microsoft professional license should be able to renew or upgrade without buying a new product.
There have been some online intrusions on security. If Microsoft packaged the updates more frequently, the protection would be better. If updates take less time, we might receive malicious emails.
Additionally, I would like to see changes in the licensing model. If someone has a corporate license with many users, they should get a better price.
For how long have I used the solution?
I have been working with Microsoft Exchange Online Protection (EOP) since 1998.
How are customer service and support?
We could get technical support services directly from Microsoft.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We use Sophos for email protection. Sophos enhances our accessibility and helps prevent malicious email intrusions.
What's my experience with pricing, setup cost, and licensing?
The product is expensive.
What other advice do I have?
The email policy configuration options in Microsoft EOP are satisfactory. I recommend it to any user who wants to use Microsoft.
I rate it a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior infrastructure engineer at a computer software company with 51-200 employees
Comes with a shared mailbox feature but needs to improve backup
Pros and Cons
- "Microsoft EOP's most valuable feature is a shared mailbox."
- "The solution needs to improve its backup."
What is most valuable?
Microsoft EOP's most valuable feature is a shared mailbox.
What needs improvement?
The solution needs to improve its backup.
What do I think about the stability of the solution?
I rate the tool's stability a ten out of ten.
What do I think about the scalability of the solution?
Microsoft EOP is scalable.
How was the initial setup?
The tool's deployment is straightforward. You need to get a license to use the product.
What other advice do I have?
I rate Microsoft EOP a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
CyberSecurity Executive IAM Engineer at a tech vendor with 10,001+ employees
An easy to setup solution that helps to manage special accounts
Pros and Cons
- "You can use the product to create special accounts."
- "We have experienced issues while migrating from on-prem to the cloud. The tool needs to improve its stability."
What is our primary use case?
I manage all the users and special accounts with the tool.
What is most valuable?
You can use the product to create special accounts.
What needs improvement?
We have experienced issues while migrating from on-prem to the cloud. The tool needs to improve its stability.
For how long have I used the solution?
I have been working with the solution for more than ten years.
What do I think about the stability of the solution?
I would rate the product's stability an eight out of ten.
How are customer service and support?
My experience with the tech support team is good.
How was the initial setup?
The product's setup is easy and quick.
What about the implementation team?
We relied on a third-party to complete the deployment.
What other advice do I have?
I would rate the solution a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Cloud Infrastructure Engineer at a tech services company with 201-500 employees
Highly capable when it comes to protecting against phishing attacks and malware threats
Pros and Cons
- "The scalability is pretty good; it does what it is supposed to do."
- "The reporting needs a little bit of improvement."
What is our primary use case?
We use it for email protection.
What is most valuable?
Microsoft Exchange Online Protection is very good when it comes to anti-phishing and anti-malware. And the fact that it has an impersonation feature for the domain as well as users.
What needs improvement?
The reporting needs a little bit of improvement. When you compare it to Mimecast features and data porting tools, it's less superior compared to EOP.
Another area of improvement could be pricing. So Exchange Online Protection has a higher price compared to its competitors.
For how long have I used the solution?
I've been working with it for over three years now.
What do I think about the stability of the solution?
I would rate the stability a nine out of ten.
What do I think about the scalability of the solution?
I would rate the scalability an eight out of ten. The scalability is pretty good; it does what it is supposed to do. I haven't encountered many issues because Microsoft regularly updates its product.
We're just over 650 users in our company using this solution.
How are customer service and support?
The customer service and support have been really helpful. Whenever we raise a support ticket with them, they respond in a timely manner, and almost 99.9% of the time, issues are resolved.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have used MessageLabs in the past, and I would say that EOP is better than MessageLabs in terms of the interface and ease of use.
How was the initial setup?
The initial setup is easy. Moreover, it is easy to maintain. The deployment model is cloud-based, but we are in a hybrid environment. So it does protect our on-premises environment as well.
What about the implementation team?
The initial deployment was done by our IT team. In our IT department, I would say roughly 12 people are required for maintenance.
What's my experience with pricing, setup cost, and licensing?
It's a high price. When comparing it to Microsoft Defender and Mimecast, it is more expensive.
What other advice do I have?
I would definitely require using this solution. Overall, I would rate the solution a nine out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Chief Information Security Officer at a tech services company with 11-50 employees
Excellent support, good functionality, and useful protection against online threats
Pros and Cons
- "It offers great security against malware and other threats."
- "It doesn't protect against everything. We do need protection for, for example, endpoints."
What is our primary use case?
I primarily use the solution for online protection. It protects us from malware and spam, among other threats.
I can employ my own policies, for example, attached files and email, and I can apply security to them and analyze threats that may come in. I put together the best configurations to help protect the users.
How has it helped my organization?
It has offered effective protection to help us avoid email issues. For example, my CEO in the past had been compromised with malware. When we deployed this solution, we've been able to avoid issues.
What is most valuable?
The functionality is good.
It helps maintain protection. It can protect our Microsoft operations. It offers great security against malware and other threats.
Technical support is excellent.
It is stable.
The solution can scale.
It offers good value for money.
What needs improvement?
It doesn't protect against everything. We do need protection for, for example, endpoints.
We'd like Citrix and Linux identity protection. We need security beyond just email so that we can avoid malicious threats.
For how long have I used the solution?
I've been using the solution for five years in total.
What do I think about the stability of the solution?
It is stable. I'd rate the reliability ten out of ten. There are no bugs or glitches and it doesn't crash or freeze.
What do I think about the scalability of the solution?
I'd rate the solution eight out of ten in terms of scalability. It can scale.
How are customer service and support?
Microsoft support is excellent. They are very helpful and responsive.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was very easy. It was not difficult. We had good documentation in order to assist us. There's a lot of information available.
What's my experience with pricing, setup cost, and licensing?
The pricing is expensive, however, it is valuable to have, so that pricing is okay.
What other advice do I have?
I'm not sure which version of the solution we're using.
Overall, I would rate the solution ten out of ten. I'm very pleased with the solution.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Microsoft Exchange Online Protection (EOP) Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2026
Popular Comparisons
Microsoft Defender for Endpoint
Microsoft Defender for Office 365
Proofpoint Email Protection
Check Point Harmony Endpoint
Check Point Harmony Email & Collaboration
Cisco Secure Email
Abnormal Security
Check Point Harmony SASE (formerly Perimeter 81)
Fortinet FortiMail
Barracuda Email Protection
Buyer's Guide
Download our free Microsoft Exchange Online Protection (EOP) Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- What to choose: an endpoint antivirus, an EDR solution or both?
- Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
- Looking for alternatives to Symantec Cloud Protection Engine
- Who provides a better antivirus solution: Bitdefender or Sophos?
- Which antivirus is best for isolated work PCs?
- How do you identify malware?
- Why are Anti-Malware Tools important for companies?
- When evaluating Anti-Malware Tools, what aspect do you think is the most important to look for?
- When evaluating Antimalware Tools, what aspect do you think is the most important to look for?



















