Abnormal Security vs. Clearswift SECURE Email Gateway (SEG)

Another local organization was compromised, and we were one of the targets of their further attempts. We were 100% protected because the behavioral analysis protected us, but also allowed me to contact that organization and report their compromise. This has actually happened more than one time since going live.

Incentivized

The CS SEG appliances are running as virtual appliances by now. They do need not much power in the ESX environment. I recommend to use at least two peers running in a cluster. The cluster feature is working very well. The CS SEG can process a huge number of emails in a very short time frame.

Incentivized

• Spam filtering...we have been able to turn our spam sensitivity down on Exchange allowing more legitimate messages through to user inboxes.
• Malicious email filtering...we experienced several successful phishing attacks over the past year. Abnormal Security has prevented hundreds of individual campaigns since going live in August '22. I cannot thank them enough!
• Automated response for reported emails...my team is small and we do not have enough hours in a day to review and respond to each reported email. Abnormal Security performs additional analysis on those reports and automatically responds for us. If the message is spam or malicious, copies of those emails are looked for throughout the server and deleted.

Incentivized

• CS SEG is fast in email processing
• Managing the quarantine is easy
• Display of the reasons why an email has been processed this is very detailed

Incentivized

• None so far, I have been extremely happy with their service.

Incentivized

• Improvement is needed in the area of AV/Antispam update processing (internally)
• Improvement is needed in the log file processing. Many log file entries are not understandable for an operator or administrator without special insider knowledge
• Clearswift has recently changed the support provider. Now there are no german supporters anymore.

Incentivized

Abnormal Security blocks malicious emails that both PhishER and Cisco Secure Email Threat Defense miss. One thing that PhishER does have is the ability to flip a malicious message into a user education phishing email. That's cool, but I think we can just copy/paste the same info into a custom campaign.

Incentivized

The Clearswift Secure Email Gateway (CS SEG) has very low license costs. A two peer cluster is enough to run a complete emailing gateway environment. Compared to the Proofpoint PPS the CS SEG does not need a management appliance. The CS SEG peers can manage the quarantine by themselves. This is easy to use and quite fast.

Incentivized

• Preventing compromises that have historically led to payroll or accounts payable threats.

Incentivized

• Since this CS SEG environment is operated for a customer, I cannot answer this question

Incentivized