Mimecast Threat Intelligence vs. ThreatConnect Threat Intelligence Operations Platform

I think Mimecast is great for companies who want granular control over their email. Once it is setup, it really does just run along without IT needing to get involved too much. Any time we have 'issues' - such as incorrectly blocked emails or attachments, we can easily figure out what we need to do and how to fix it. Mimecast is great for teams who don't want to sit there all day and manage and look at emails. It would suit a large organisation who want deep control.

Incentivized

If ThreatConnect is going to be used to create playbooks the required technical knowledge and try and error that is required may not be for everyone. The application provides an app builder capability that is really useful but in order to be used the user needs to have intermediate to advanced programing abilities.

• Because all incoming and outgoing (with journaling setup for internal email) go through Mimecast it is a one-stop-shop for searching out emails from past months or years. It is light years better than using local archives such as .pst files.
• Since they touch all incoming email Mimecast is excellent our filtering out spam, malware and virus emails before it even gets to your server whether on-premise or in the cloud.

Incentivized

• One of the most beneficial features of the ThreatConnect is its ability to automatically enrich IOCs from multiple sources such as VT WHOis and assign a dynamic threat score.

Incentivized

• The interface for the threat intel dashboard could use some updating
• Slowness in the console persists occassionally

Incentivized

• Need to have more native (out of the box) integrations
• Need more focused training courses and certificates

Incentivized

It works perfectly and is really easy to manage when you understand the menu and how it works. It really is 'set and forget' with minor changes needed from time to time to blacklist and whitelist senders and domains. It makes our life really easy and gives us a lot of data to understand how or business and users operate.

Incentivized

The platform is feature rich in enrichment and multi tenant management additionally have the ease of the use for new analysts or smaller teams.

Incentivized

Mimecast has a 24 hours phone hotline available to assist you with issues as they arise. This is the typical help desk situation where you reach level one and go to level two if this issue is extensive however I have found their level one techs to more than capable of dealing with most issues I have called about. The only negative I would mention is that their email support is less hardy when it comes to response time so I have grown to realize that calling is the only way to get timely support.

Incentivized

I was shown the areas we would need to use and understand, along with the settings. It was perfect as it didn't go too deep.

Incentivized

we were not using any other products before Mimecast. It is working perfectly as per our needs.

Incentivized

As ThreatConnect Threat Intelligence Operations Platform has a ready HTTP Client App, we can virtually integrate it with any system that supports REST APIs. This gives great room for integration and automation that is not found on other systems.

Incentivized

• Saves time and manpower as the console can easily be managed by 1 person
• Using the continuity feature could potentially save an email outage from preventing an organization from conducting business.

Incentivized

• Playbooks allow for extensive automation of tasks the team would otherwise spend hours on

Incentivized