Skip to main content
Mimecast Advanced Email Security

Mimecast Advanced Email Security


What is Mimecast Advanced Email Security?

The Mimecast Secure Email Gateway is a messaging security option with anti-spam / anti-malware, data loss prevention, large file send, and other features, from UK company Mimecast.

Read more
Recent Reviews
Read all reviews


Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Popular Features

View all 7 features
  • Threat Detection (16)
  • Anti-malware (17)
  • Management Tools (17)
  • Customizability (17)

Reviewer Pros & Cons

View all pros & cons
Return to navigation


View all pricing

What is Mimecast Advanced Email Security?

The Mimecast Secure Email Gateway is a messaging security option with anti-spam / anti-malware, data loss prevention, large file send, and other features, from UK company Mimecast.

Entry-level set up fee?

  • No setup fee


  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Would you like us to let the vendor know that you want pricing?

40 people also want pricing

Alternatives Pricing

What is FileWall?

odix - a provider of Enterprise CDR (Content Disarm and Reconstruction), is now offering its own native application for securing Microsoft Office 365 mailboxes. CDR technology is a detection-less method to disarm zero-days and Windows Defender (formerly APT)’s in files, that the vendor says is…

What is MX Layer?

MX Layer is an enterprise security company based in the United States, focusing on providing cloud-based solutions for email security, business continuity, data loss prevention and email archiving services. MX Layer aims to ensure that their comprehensive email security platform protects company's…

Return to navigation


Secure Email Gateway

Secure email gateway software prevents the transmission of emails that contravene company policy or contain malware, phishing attacks, spam or other unwanted emails

Avg 8.4
Return to navigation

Product Details

What is Mimecast Advanced Email Security?

Mimecast offers advanced email and collaboration security through two different deployment methods.

A Secure Email Gateway in the cloud, Mimecast Email Security Cloud Gateway is designed to keep any type of email environment, even the most complex, secure.

Mimecast Email Security Cloud Integrated
is an integrated cloud email security solution that does not require an MX record change, and is purpose-built to enhance and extend M365 protections.

Both solutions include AI-powered protection, include a range of specifically designed benefits, and offer a complementary suite of additional capabilities like collaboration security, awareness training, and archiving.

Mimecast Advanced Email Security Features

Secure Email Gateway Features

  • Supported: Anti-malware
  • Supported: Customizability
  • Supported: Data Loss Protection
  • Supported: Threat Detection
  • Supported: Sandboxing
  • Supported: End-to-End Encryption
  • Supported: Management Tools

Mimecast Advanced Email Security Technical Details

Deployment TypesSoftware as a Service (SaaS), Cloud, or Web-Based
Operating SystemsUnspecified
Mobile ApplicationNo
Supported CountriesGlobal

Frequently Asked Questions

The Mimecast Secure Email Gateway is a messaging security option with anti-spam / anti-malware, data loss prevention, large file send, and other features, from UK company Mimecast.

Microsoft Defender for Office 365, Abnormal Security, and Proofpoint Email Protection are common alternatives for Mimecast Advanced Email Security.

Reviewers rate End-to-End Encryption highest, with a score of 8.7.

The most common users of Mimecast Advanced Email Security are from Mid-sized Companies (51-1,000 employees).
Return to navigation


View all alternatives
Return to navigation

Reviews and Ratings


Attribute Ratings


(1-25 of 29)
Companies can't remove reviews or game the system. Here's why
January 26, 2024

Mimecast Review

James Brown | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
Mimecast sits in front of our On Premise Virtual Machine Exchange 2019 Exchange Server. Used for blocking filtering emails, checking contents of Emails and attachments for suspicious activity stripping, rejecting or holding emails or attachments and re writing urls. Allowing users to access email via the mobile App with 2 factor authentication
  • Blocking Emais
  • Re writing URLS
  • Blocking Senders
  • Allowing multipe atachments to be released in one click
  • Orgainised folders in the mobile App
  • Keeping rejected messages longer instead of going to the cvs data folder
It is a must for any business dealing with volume email, senders spoofing your address are automatically blocked if you have your profiles set up, newly created domains are not trusted, emails are always accessible even if deleted from your deleted folder Maybe could have a cheaper version for smaller firms
Score 5 out of 10
Vetted Review
Verified User
We used Mimecast for all of our incoming and outgoing email filtering. Mimecast helped deal with a lot of spam. It also handled our outgoing email encryption. It also helped with VIP impersonation protection. We were customers for a little over five years. We out-grew the platform as our security needs increased.
  • Spam Filtering.
  • Impersonation Protection.
  • On-hold Queue.
  • Outbound Encryption.
  • Granular Email Views.
  • BEC Detection.
  • Slow, messy UI.
  • Process for trusting emails is confusing.
  • Creating blocklists is all or nothing.
Mimecast is good when you are needing a basic email security platform. It does some basic things really well, but when you start hitting some advanced needs, it lacks. Mimecast does not do a good job with BEC detection. Mimecast does spam filtering alright, but it could be much better. It really doesn't care about gmail or other external addresses. It doesn't check for age of accounts, etc.
Score 8 out of 10
Vetted Review
Verified User
We use Mimecast Secure Email Gateway to control spam, block unwanted viruses, send/receive large files, send/receive secure emails and utilize it for user awareness training.
  • Provides secure email transactions.
  • Ability to send and receive very large files.
  • Blocks a large amount of unwanted spam and dangerous files.
  • Allows to train users about bad email actors.
  • Web filtering and blocking.
  • The new updated portal when released was very difficult to use.
  • The customer support via phone is not always on par.
  • Email support when used could be a bit quicker when responding.
  • CyberGraph implementation is taking too long.
  • Feature requests should not take that long to complete.
Mimecast Secure Email Gateway is well suited for very large companies that need to control spam, unwanted attachments, Etc.
I would say it would be less appropriate for smaller companies as the cost may not be a good fit.
Score 9 out of 10
Vetted Review
Verified User
As our primary protection gateway for all incoming and outgoing email against current and next gen threats. Increased levels of phishing, weaponized links, attachments, nested documents and social engineering attempts make this an essential toolbox for our business.

Added to the feature-set of Large file send and additional optional addon's you really get what you pay for!
  • Anti Spam
  • Anti Phishing
  • URL Protection
  • Attachment Management
  • Anti Spoofing
  • User Awareness
  • Secure Transmission of Large or/and Sensitive Files
  • Admin Complexity is High - To Fine Tune Features you need to invest in training or high level support
  • Flexibility in delivery could be better, some solutions are on or off
  • Cost is high and inflexible when it comes to trying out new features
On an established email domain where malicious or spam email is a significant percentage it works well - but if you have admin in the background using it as a live tool assessing and fine tuning it in the background. Leaving end users to manage held mail isn't always the best solution.

Works well in terms of end user experience with the Outlook plugin ideally with SSO enabled (so they don't have to remember to keep logged into it if their pw changes). The web plugin is less detailed and feature rich.
Mike Montagna | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
We use Mimecast Secure Email Gateway across our whole organization. It helps protect our end users from unwanted SPAM and phising emails along with archiveing all our emails.
  • Sandboxing incoming attachments, instead of opening directly on your computer.
  • Scanning links in emails for websites that could harm the organization
  • Keeping SPAM out of users email boxes and increasing efficiencies by reducing the number of emails a user has to wade through.
  • Archiving all emails so if a use deletes something they can go back to the archive and retrieve an old email.
  • There is a lot to learn to be good with Mimecast and it can be confusing at times
  • It is easy for a user to Whitelist a email address or domain, but cumbersome to do it for the organization
  • They have made many changes to the interface to make it easier to navigate, but sometimes it still is not intuitive where you need to go.
Mimecast does a good job at protecting all areas of vulnerability in the email systems. From scanning emails themselves to links and attachments to impersonation attacks. Mimecast wraps the email system in a protective blanket and helps protect users and organizations.
Score 8 out of 10
Vetted Review
Verified User
Our company uses Mimecast to secure all incoming and outgoing email, and filter out any incoming spam or malicious emails. Mail is received first by the Mimecast servers where it is thoroughly analyzed before it is delivered to our on premises Exchange environment. All outgoing mail is also sent through the Mimecast servers so recipients can rest assured the email is safe when it gets to them. We also make use of the stationary layouts to add a legal disclaimer to all of our outgoing mail. Mimecast has dramatically limited our end users exposure to spam, phishing attempts, and malicious emails.
  • Great spam filtering services
  • Filtering of potentially dangerous attachments
  • Link protection
  • Highly customizable
  • Less than intuitive admin console. I've found a few things to be difficult to understand and implement.
Mimecast has been great at filtering our email for spam, phishing attempts, and potentially dangerous email attachments. We have been very happy with the reliability of the Mimecast services - I don't remember it being down in 2 years of using the service. My one complaint is that the admin console is not very easy to navigate, which makes some of the services difficult to implement. That being said, their support team has been great about walking us through these issues.
Score 8 out of 10
Vetted Review
Verified User
We have been using Mimecast Services including Secure Email Gateway for many years now. It addresses our need to communicate with our clients in a secure fashion and maintain Attorney Client privilege. It also allows for us to discuss patient medical records in a secure format.
  • Maintain Confidentiality
  • Able to maintain our brand awareness
  • Easier access to your contacts
  • Automatic Read Receipts
Great for communicating regarding patient health, attorney client privileged conversations or for any private conversation that you might not want to sit on your in house email server.
March 14, 2021

Mimecast works well

Score 8 out of 10
Vetted Review
Verified User
We use Mimecast Secure Email deployed organization-wide to manage all of our email services - it processes all incoming messages before sending them on to our Office365 environment for delivery. We use it to enforce our 5 year retention policy on all e-mails and it allows all of our users to access their older emails even if they've been deleted from Outlook which they appreciate. We also use it to manage our mail policies and prevent SPAM and Phishing emails from reaching our end users and I would say it has about a 90% efficacy in blocking malicious emails - there are several false positives with the medium or high setting for SPAM scanning, but we would much rather have to release a held message than have several users reporting SPAM to our helpdesk.
  • Email retention - convenience for the end-users to access older messages even if they've deleted them from Outlook
  • SPAM management - allows us to prevent SPAM and Phishing attacks with custom policies that fit our organizational needs
  • URL protection - allows incoming emails with a URL to be scanned and protects our end-users from clicking on malicious URLs
  • Policy management could be easier to use and more intuitive
I think Mimecast secure email gateway is a great product and it is well suited for all aspects of e-mail management including retention, SPAM prevention, URL protection, and remote e-mail access. It's great for a large organization to use concurrently with Office365 and our users appreciate the easy to use interface in the web portal.
February 28, 2020

The Benefits of Mimecast

Jessica Rondash | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Mimecast is used across our whole organization. It serves as our email archiving system as well as our spam filter. It is also a great tool for catching phishing emails before they get to our end users. Mimecast also allows us to send large files, basically serving as a dropbox but cutting out the step of uploading the files.
  • Catches spam and phishing emails
  • Saves and archives all emails for the designated period
  • Sends large files that are too big for Outlook to handle
  • It has a great search feature for finding old emails.
  • Phishing scams are getting more and more sophisticated so it could always improve on catching phishing emails.
Mimecast Secure Email Gateway is great for searching for previous emails. It allows you to get very granular and create a very specific search to easily find the email you are looking for. It also makes it easy to save all emails, without having to go through an archiving process. You can also set Mimecast to save emails for x number of years and therefore remove all emails older than that period.
Score 10 out of 10
Vetted Review
Verified User
Mimecast is used as the primary spam filtering software for our company. Mimecast protects our main mail services by being an intermediary between our company and the outside internet. We then go further and only permit Mimecast to send our company email directly. Furthermore email is smarthosted out of the Mimecast gateway, so our customers can be assured clean emails.
  • Anti-Spam.
  • Anti-Malware.
  • Death by details - admins can screw things up easily when it comes to advanced message routing.
  • How-to's to train users/admins on more difficult functions.
The product is best used for medium and larger businesses with more than 100 people. It's not cost-effective for less than 100 users.

It's good for any company that wants to block spam before it gets to your on-premise servers and end-users. Their anti-spam engines are amongst the best in the business. The number of customizations on sending and on-premise delivery available can be mind-boggling at first, but are incredibly powerful to get your messages to the right place.
Score 10 out of 10
Vetted Review
Verified User
Mimecast Secure Email Gateway is first and last stop our email makes as it traverses to and from us. We have our MX records set such that all email sent to our domain is actually sent to Mimecast first and they forward it to our on-premise mail server. All users in the company benefit from it. Having it as our front end gives us the capability of knowing it is very unlikely an actual virus laden email makes it through while also blocking the majority of phishing type emails. It also benefits us by not having to expose our SMTP services to the internet.
  • Allows you as the user to not expose your SMTP gateway to the internet. All emails go to Mimecast and you just need to allow SMTP traffic from Mimecast only.
  • Very reliable in up time with rarely an issue receiving or sending mail through it.
  • They have limited electronic resources available for support. It is rare that I find the answer to an issue without having to call them.
  • They are frequently emailing in an attempt to sell extra services...which can be annoying.
Mimecast Secure Email Gateway is appropriate for any mid- to large-scale business that wants to limit their exposure to internet-based mail threats. It basically runs itself so requires very little admin time once it is setup and executing properly. The pricing is also a HUGE bargain when compared to what some companies pay for other cloud-based services. Just about any company can afford to set aside this amount to secure their email. Having it lessens the impact of dealing with local users who either do not care about security or are not trained well enough to avoid schemes. The only place where it may not be suited is really small business where the cost may be overkill vs. making sure the users are well versed in avoiding email virus and malware trickery.
Score 10 out of 10
Vetted Review
Verified User
We use Mimecast as our mail delivery point for the entire organization. Both incoming and outgoing mail is filtered and scanned through the service. It addresses the serious issue of malicious emails entering our environment. We find that it is a much more effective solution than what it replaced, which was a third party adaptation of spam assassin.

  • Sandbox filtering of mail attachments is great, and we are alerted to caught items.
  • Greymail tagging is useful to some employees.
  • There have been issues of downtime or slow delivery, but we have not lost any mail.
  • The initial setup is a bit counter-intuitive.
If you host your own mail you really do need a solution such as this. Keeping malicious actors out of your user mailboxes is a high priority with current threat vectors. Mimecast is always highly recommended to this purpose. It may be less needed if you are on GSuite and make use of Google's filtering.
November 16, 2019

Mimecast, Great for DR.

Score 8 out of 10
Vetted Review
Verified User
Mimecast Secure Email Gateway is being used by our whole organization, but our end-users typically do not interact with it on a daily basis. We use Mimecast behind the scenes to scan all incoming email and filter out ones that may be considered spam or threatening. We also use it to encrypt any outgoing email. We use this in conjunction with Proofpoint to further protect our end-users from email attacks. We also utilize Mimecast for disaster recovery purposes. In the event of a disaster where we are unable to connect to our on-premise exchange server, we utilize Mimecast to allow our users to log in and see an exact 1:1 copy of their email inbox. This also allows them to send and receive an email if our exchange server is down.
  • Standing up an exact 1:1 copy of email inboxes for DR purposes.
  • Scanning any incoming email to be filtered for spam/threats.
  • Automatically encrypting all outgoing email.
  • Email filtering can be hit or miss. Will incorrectly filter out emails that will go noticed by end-users.
  • Admin web UI can be confusing and not so intuitive.
  • Inability to release incorrectly filtered messages to the end-user mailbox.
Specifically for our organization, we use Mimecast as a defense for our users. This can seem redundant because we also utilize Proofpoint to do basically the same thing. In my opinion, Proofpoint does seem to do this better, but the needs may differ from other Organizations. What I think Mimecast does really well is email backup. For DR testing purposes, we have to stand up a copy of every user's inbox ready for access at any time. Mimecast is able to handle this really well, and also allows our users to send and receive in the event of a disaster.
Score 7 out of 10
Vetted Review
Verified User
Mimecast Secure Email Gateway is being used across our entire organization for e-mail security. The security solution covers both desktop and mobile clients. Being in the defense industry, a lot of very sensitive information is transmitted via e-mail, and to ensure that this is securely done is very important. Protection against unsafe links and phishing is another key problem that Mimecast solves.
  • Runs relatively unnoticed in the background, not interfering with daily tasks.
  • Has a very powerful search feature.
  • Has a very intuitive management console for users to manage blocked addresses, their online inbox, and various other configuration settings.
  • Requires each device used with it to be enrolled to open links. This enrollment is removed every time cache is clear.
  • Links that are opened in e-mails are first scanned, and then the user is asked to confirm that they think the link is safe, and then only do you possibly get access to where the link is pointing.
  • Sometimes Mimecast will place e-mails on hold, without sending a notification, resulting in delayed delivery. This can be avoided by working within the online mailbox and keeping a look-out for held mails.
The software is well suited to large corporate organizations with a high volume of emails sent each day within, and out of, the organization. Another good fit is in organizations where communication does not take place in the public domain, but rather contains confidential information. Organizations, where a phishing attack could be of greater significance than in non-defense related industries, are also a big market.

Mimecast is not well suited to smaller businesses in which communication volume is low, and the staff is very technically savvy. These staff can typically ascertain the safety of e-mail content themselves and speed up their working experience.
Jeff Nickles | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
We switched to Mimecast Secure Email Gateway for our entire organization three years ago when our former provider discontinued the product we were using. It was a great upgrade for us! Mimecast does an excellent job of filtering spam and other unwanted messages. It also provides a lot of control in terms of the ability to modify rules, make exceptions, and search to find what happened to an email message. Furthermore, Mimecast offers additional security features which protect our users from threats. For example, Mimecast rewrites the URLs in all incoming messages and checks those when a user clicks to block malicious URLs.
  • Excellent filtering of spam and unwanted messages. It really cleans things up in this regard without producing a lot of false positives.
  • It has great security features that enable us to protect our users from email borne threats.
  • Powerful configuration options that help you to dial in exactly how you want Mimecast to behave.
  • A great Outlook add-in for users that is simple and convenient.
  • Mimecast offers the ability to spool mail if your mail server is down. Users can access this spooled mail for business continuity.
  • The admin console is powerful, but it isn't always intuitive. It seems like things could be a little better organized to make it easier for admins to use.
  • The impersonation protection rule is good and keeps getting better, but could still use work.
In my opinion, Mimecast is suitable for any business that wants greater control over the content, URLs, and attachments they receive via email. It also serves a great business continuity function, given the business-critical nature of email communication today. We have been very pleased with the value of our investment in Mimecast's services and would sign up again in a heartbeat if we had it to do all over.
Jon Shurtliff | TrustRadius Reviewer
Score 7 out of 10
Vetted Review
Verified User
We implemented Mimecast Secure Email Gateway to combat the many vulnerabilities that have blossomed through email over the past decade. This is implemented company wide and integrates with our G Suite email architecture. With Mimecast we have been able to limit phishing scams, minimize spam, prohibit unsafe links and give our users a customizable experience to keep them focused on the safe, secure and important emails that they need to perform their job.
  • Mimecast really minimizes Spam distraction by providing an hourly or daily digest (time length is fully customizable) of questionable emails. Now, our users only have to monitor those occassionally, and can train the system to prevent spam in the future.
  • Mimecast's sandbox can analyze any questionable email and prevent it from ever getting delivered or executed by our users.
  • The software prevents any malicious links from getting through and even obfuscates to real link until it is proven safe.
  • While the daily or hourly digest of spam/questionable emails is very useful, it does make it easy for users to forever block senders - which they may actually needd those emails in the future. Providing a link to the management console with blocking may be a better option - training the user how to unblock and use the more sophisticated management console.
For both Office 365 as well as G Suite Email platforms, Mimecast provides an excellent layer of security and protection from unwanted and malicious emails. I do admit that training is a key part of the implementation process and if not careful, users can block emails so much that they cause problems receiving valid emails in the future. But with proper training this can be avoided.
Score 10 out of 10
Vetted Review
Verified User
Mimecast's Secure Email Gateway is being used by our firm for all users to perform the following critical functions:
Filter out spam.
Detect and block emails containing dangerous malicious links and attachments.
Manage whitelisting and blacklisting senders, both on a firm-wide bases and by individual users.
Detect outgoing email with potentially dangerous content.
Cache email during production email system downtimes and then deliver it when the production system comes back online.
  • Filters spam well. About 66% of our email is rejected and never hits user Outlook Mailboxes. There are very few times when a legitimate email is blocked.
  • Catches malware-laden attachments. Mimecast catches the vast majority of these.
  • Filters and blocks dangerous links embedded in email. Mimecast blocks almost all of these.
  • The Outlook plugin is intuitive and works well.
  • Has been extremely reliable. Virtually no down time.
  • The user interface could be a little more intuitive on the admin side.
  • Sometimes response times for accessing features via the Outlook features is slow
  • Proper configuration to optimize filtering can require quite a bit of tweaking.
Mimecast is well suited for any enterprise of over 25 individuals who wish to have first-class spam and malware protection on inbound email. It is reasonably priced and straightforward to implement. It does require some attention, and I would not recommend it to anyone who does not have a technical person who can invest the time to learn the system's administration to provide for its maintenance and ongoing adjustment as threats and desires for varying system performance evolve.
Score 10 out of 10
Vetted Review
Verified User
Our law firm uses Mimecast Secure Email Gateway to protect our network from email malware delivery, spam and phishing attempts. Everyone in the firm uses Mimecast and I couldn't be happier. We saw an immediate reduction in the number of malicious emails getting through to end users.
  • Mimecast has a great spam engine, and great controls to permit, deny or release spam it puts on hold.
  • Mimecast does a great job of preventing impersonation and phishing attacks.
  • Mimecast does a great job of providing failover Outlook connectivity if our on premise Exchange server is down.
  • Mimecast administration is complicated, I wish the admin console and policies were more intuitive.
  • I wish Mimecast error messages were more granular, you get the same error message for multiple issues.
  • Other than those two minor issues, Mimecast is great.
Mimecast Secure Email Gateway is well suited for businesses that need email security and protection from phishing/social engineering attacks, so basically it's good for businesses of all sizes. All it takes is one malicious email to get clicked by an end user and your whole network is down, Mimecast security is well worth it.
Score 9 out of 10
Vetted Review
Verified User
We are using Mimecast to scan all inbound and outbound email for spam and malicious content for the entire organization. We're also using the secure messaging product as well.
  • Impersonation Detection - We've received a lot of fake CEO emails recently. The previous product we had had limited ability to detect this. Mimecast on the other hand can use multiple factors to help determine whether an email from outside the organization is impersonating an employee.
  • It allows you to customize rules for specific people or groups
  • It has a lot more features
  • The web interface, while powerful, can be counter intuitive to use. If you're not in there all the time and very familiar with how it works, often you will have to reach out to support to remind you how to get something done
  • The email support is just okay. I would be very frustrated if I didn't opt for the option for phone support.
When we were a smaller company we couldn't justify the cost of something like Mimecast. However, for a medium to large organization, a product like Mimecast is well suited.
Debbie Johnson | TrustRadius Reviewer
Score 7 out of 10
Vetted Review
Verified User
Mimecast is used by our entire organization for our business continuity plan as well as our production email security. We added the email threat management package to our original subscription in 2017. We license each user and use it in conjunction with high availability Exchange on prem and SMSMSE for antivirus.
  • Mimecast is fantastic as a spam blocker. Our users get the traditional noon day email with their "held" items for release at their discretion, but we have a small rate of failure for recognizing true spam vs. true emails.
  • It is extremely easy for the users to use, especially with the Outlook ribbon feature enabled so that they can access their held (spam) emails, allowed senders list (white list), blocked senders list (blacklist) and other features quickly.
  • We have experienced a few outages or maintenance windows internally for our on prem email system, but we have not had Mimecast unavailable for us once. It's been 100% reliable.
  • The Admin Management console is absurdly complicated. For every first time we wanted to setup we've had to call their support for assistance. Support is quick and fantastic but it's so difficult to do anything yourself. They seem to have gone out of their way to call features unique things instead of using standard language from other providers so you as an IT professional know what you're looking for to setup.
  • They have lots of KB articles, which their support will point you to. They are written on the most basic level and don't actually provide the help you need. For example, the KB page will tell you the list of options on the page... but not actually tell you what you do, why you might use them, or define their terminology.
  • Their email threat management system has several nice features. One of the features available is that it will rewrite links in emails so that users click the link and it sandboxes the link, testing it on their server space and the user sees it there. This means the actual link in the email gets changed to the address of one of their servers. As a law firm, the EXACT LINKS are important to maintain in our communications and editing actual data from our clients to point to a Mimecast server is an unacceptable practice. I wish they had an alternative that did not edit the link itself on the page.
For companies with larger IT departments, especially someone Exchange savvy, Mimecast is a great tool that works terrific after you set it up. Administering and managing it is easy once it's up. The initial setup of any rules or functionality is overly complicated and takes great patience and lots of support time to accomplish what you want. The ability to use the Mimecast app or website during our onsite Exchange maintenance periods is terrific and it works great for business continuity.
Score 9 out of 10
Vetted Review
Verified User
We use Mimecast Secure Email Gateway to scan all of our incoming and outgoing e-mail for approximately 10 unique domains, and 1400 users. It performs multiple security functions: scanning for unsolicited commercial email (spam), scanning and removing malicious content, preventing impersonated emails for all internal users, phishing prevention, and preventing users from sending out sensitive content like credit card numbers, social security numbers, etc.
  • Spam detection - Mimecast does a great job of filtering spam and giving admins and users control over the sensitivity of the spam filter.
  • Email security - we love how Mimecast detects and removes malicious attachments.
  • URL & link security - all URLs within emails are scanned and re-written so that when users click on links, they are first checked for security and blocked if the destination is malicious.
  • Data loss prevention - Mimecast does a good job of scanning outgoing email for sensitive content.
  • Admin interface is a little clunky but slowly improving.
  • Methodology - their approach to policies and rules is a little different from other products. It can take a little bit of time to "think like Mimecast" when setting up your environment.
  • Control - some policies and scanning sensitivity give you a lot of control, other areas could be better.
Mimecast Secure Email Gateway is well suited to companies looking for a cloud-based email security solution at a reasonable price. Mimecast offers several different pricing levels and optional packages so you can craft a solution that has the features you need, within your budget. It works well with Office365 and with on-premise e-mail systems. If you are hesitant to route your email through a cloud-based provider, then Mimecast (and other cloud solutions) might not be suitable for your environment.
Score 2 out of 10
Vetted Review
Verified User
Mimecast Secure Email Gateway is being used by our organization to filter unwanted email for half of our company. We had been experiencing less than stellar filtering results with our previous vendor and decided to go with Mimecast, who was viewed as a leader in the field.
  • Filtering of spam, viruses and fraudulent emails
  • Mail Archival (going forward from the time of install only)
  • Account Managment
  • Integration with Outlook and Active directory
  • User friendly client interface
  • Mimecast contract has an autorenew clause, if you don't notify them by the given date that you plan on canceling service you will be locked in to paying for another year.
  • It is very very very hard to export your archived data in a format that can be used should you need to.
  • Mimecast charges to ingest emails from before the date of service. The prices are very high.
Mimecast's ability to act as a email filter is amazing. While their archiving service is little beyond useless. The cost to ingest pre-existing email is astronomical compared to the cost of their product. The cost to download email (in bulk) from the archival platform in a format that is easily usable is also nuts. The inability to cancel service in the weeks leading up to your renewal because of a line in their contract is goofy. It's a shame that a company with such a fantastic product uses such shady sales practices.
Hans Huang | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
Our entire organization uses Mimecast Secure Email Gateway; it handles all of our spam/junk email bounce/blocks as well as offers other features such as attachment threat scanning/blocking, anti-phishing measure (replaces URLs with a Mimecast URL), and DR continuity. Mimecast offers even more products and services at the perimeter but we do not use all of their features.
  • Spam/malware blocking
  • Allows you to customize rule sets for specific individuals, groups, or all staff
  • Good support and an engaging user base that offers questions and solutions to issues
  • The web portal for end users could be a bit more UI friendly
  • Getting a message to pass through the Mimecast policies can be a bit long sometimes depending on how many policies are applied
Very good for SMBs and large organizations to have an email security solution at the perimeter and also if you need a solution that can do things like archiving, legal holds and disaster recovery. These would be very useful in not just day to day operations but also in the event of a major disaster declaration.
Dale Simpson | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
We implemented Mimecast as an extra layer of protection in our cyber security plan. We opted to implement company-wide to ensure all departments were protected.

When we were first shown the platform we were only looking for a solution to replace our then current automatic disclaimer, however, we soon realised it was much more than this. The disclaimer option was just one feature of a security gateway platform.
  • URL Protection - Mimecast filters and checks every URL which allows a double check for malicious links. Each link is re-directed through the Mimecast platform and if it is malicious the user is prohibited from accessing it. Occasionally it will ask the user to decide whether the link is clean or not to help train user awareness. I find this very helpful in reducing downtime from false links.
  • Attachment Protection - alongside filtering URLs Mimecast also checks all attachments for malicious code and other undesirable content. If it identifies something that doesn't look right it will hold the email and notify the user. If it is an expected email, it can be released to a sandbox to verify the contents. We have found this very useful in preventing phishing attacks through malicious code sent in word documents.
  • Bounced & Rejected mail - Mimecast employs a host of different filters and rules for mail traffic. Should mail meet certain criteria it either bounces or is rejected. This can be for many reasons. Impersonation is a classical and very useful filter which rejects phishing mail from people trying to impersonate individual users. Following implementation, we have seen a vast reduction in mail purporting to be from us sent to us.
  • Held mail - this is a form of junk mail filtering. When an email is identified by Mimecast as potential junk or spam it will hold the email in the queue and send a notification email to the user allowing them to block, allow, or release. If you release the email it will allow you to receive that specific email but hold all future emails from the sender until you select allow. This has helped to dramatically reduce spam and junk email entering our system.
  • Mimecast also applies an automatic disclaimer to all outbound email. There is a lot of functionality which allows for different disclaimers to be used for different domains or departments etc. This flexibility is very useful for us as it enables us to use one system for multiple domains and departments.
  • Designing the disclaimers is a little bit difficult as it requires advanced HTML knowledge. Currently, there isn't a visual editor just a preview page which displays the HTML content. It would be very good if they could add this functionality in the future.
I would say Mimecast is well suited to most organisations - the bigger the more important. That said, even small organisations need to protect themselves and Mimecast is a fantastic offering. I can honestly vouch it is the market leader in providing a secure email gateway.
Kurt Ferguson | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
We use Mimecast as our email gateway. It filters all inbound and outbound messages for our entire organization. Mimecast helps us make sure that virtually all of our outbound email messages were encrypted, provides us with both a secure website and an Outlook add-in to review blocked/filtered messages. Being able to be certain that our outgoing messages are properly encrypted, as well as being able to send secure messages via the web portal to companies that don't accept inbound encryption, has proven indispensable.
  • Encrypts email quickly and efficiently - We went from having a large amount of unencrypted outbound email to over 96% of outbound messages being encrypted, which was a big win for both IT Security and the company as a whole.
  • Easy access to blocked/filtered messages - The Mimecast Outlook add-in makes checking your filtered and/or blocked messages a breeze, and also allows adding new entries to block lists to be done without needing to log in to the website, which is very popular with our end-users.
  • Simple administration - Administering Mimecast is quite simple. SSO makes login a snap, and the web interface is very easy to navigate, while still offering robust controls and information about our Mimecast environment.
  • Imperfect for shared mailboxes - Accessing the blocked/filtered messages for shared mailboxes is much trickier. The Mimecast add-in for Outlook is bound to the user that's logged in, so it won't function correctly for accessing the blocked/filtered messages for mailboxes for which the user has Full Access Permissions in Exchange.
  • Dependence - While this is certainly true of just about any email gateway if the gateway servers go down or are otherwise inaccessible, your email system is effectively dead in the water. This only happened to us once in two years, but it was still very disruptive when it did happen.
  • Lack of notifications - Aside from the daily quarantine summary you receive, you really have no way of knowing when messages have been either blocked or filtered. It would be nice if there was an Outlook or tray icon notification informing you that you had new messages to attend to, rather than manually doing so periodically.
I think that overall, Mimecast is an excellent email gateway. The performance is great, the overall accessibility is very good, and the administration is fairly straightforward. Many companies may be very attached to the notion of on-premise email gateways, but we have been extremely happy with Mimecast's cloud-based email gateway. Overall it has proven very effective and reliable for our organization, and I wouldn't hesitate to recommend it to other companies. It is best-of-breed, in my opinion.
Return to navigation