Mimecast Threat Intelligence vs. Palo Alto Networks AutoFocus

I think Mimecast is great for companies who want granular control over their email. Once it is setup, it really does just run along without IT needing to get involved too much. Any time we have 'issues' - such as incorrectly blocked emails or attachments, we can easily figure out what we need to do and how to fix it. Mimecast is great for teams who don't want to sit there all day and manage and look at emails. It would suit a large organisation who want deep control.

Incentivized

Analytics, Threat Hunting and detailed investigations for the security incidents are the main use cases. Automation on the cloud based on the feeds through the minemeld is another use case. When you deploy PAN on perimeter, Autofocus gives you a temendaous value. If you have non PAN firewall/products running Auto focus doe not make sense.

Incentivized

• Because all incoming and outgoing (with journaling setup for internal email) go through Mimecast it is a one-stop-shop for searching out emails from past months or years. It is light years better than using local archives such as .pst files.
• Since they touch all incoming email Mimecast is excellent our filtering out spam, malware and virus emails before it even gets to your server whether on-premise or in the cloud.

Incentivized

• Threat intelligence
• Emerging Threats
• Intelligence feeds

Incentivized

• The interface for the threat intel dashboard could use some updating
• Slowness in the console persists occassionally

Incentivized

• third party product integration
• simplicity of the managment console
• integration to cortex agents directly

Incentivized

It works perfectly and is really easy to manage when you understand the menu and how it works. It really is 'set and forget' with minor changes needed from time to time to blacklist and whitelist senders and domains. It makes our life really easy and gives us a lot of data to understand how or business and users operate.

Incentivized

Mimecast has a 24 hours phone hotline available to assist you with issues as they arise. This is the typical help desk situation where you reach level one and go to level two if this issue is extensive however I have found their level one techs to more than capable of dealing with most issues I have called about. The only negative I would mention is that their email support is less hardy when it comes to response time so I have grown to realize that calling is the only way to get timely support.

Incentivized

I was shown the areas we would need to use and understand, along with the settings. It was perfect as it didn't go too deep.

Incentivized

we were not using any other products before Mimecast. It is working perfectly as per our needs.

Incentivized

If you have Palo Alto, autofocus is the selected choice. If you have Checkpoint than the threat cloud. Price of autofocus is much cheaper. Unit42 is the real differentiator. Minemeld is unique to PAN and working perfectly. Search outputs and are detailed and gives lots of data. Integration with SOAR is much easier with autofocus. Indicator list is huge. Tagging works magnificent.

Incentivized

• Saves time and manpower as the console can easily be managed by 1 person
• Using the continuity feature could potentially save an email outage from preventing an organization from conducting business.

Incentivized

• Cheap for us
• Easy integration
• Easy management

Incentivized