Functional but not Excellent
Use Cases and Deployment Scope
Webroot Email Security is used by our organization to act as our secure email gateway. It filters out bad emails (spam, phishing, etc.) and allows us to input specific allow & block list rules. We have this in place for the entire organization, so all emails are being filtered through this system.
Pros
- Webroot Email Security has a message retraction feature that can pull bad emails from inboxes.
- This platform has some fine grain filtering options to restrict emails based on originating country, confidence of spam thresholds, and even the ability to create custom rules that can go as far as to look at specific keywords in the body of an email.
- There are ways to manipulate individual user settings, instead of just global settings, which allows for further customization.
Cons
- I think that Webroot Email Security lets in too many bad emails and it becomes too time consuming to figure out why certain emails made it through while others didn't.
- There is very little reporting in the tool and so it is hard for me to filter down the results beyond just knowing how many total emails came in and how many in total were blocked. For example, it would be nice to know how many emails were blocked based on different rules I have in place to see how effective they are or not.
- There are no alerts or way for the system to tell me if a bad email made it through. Proofpoint TAP is a good example, because that platform will tell you if they let a bad email through and now it's been categorized as phishing.
- The way that the block and allow lists are handled is a bit frustrating, because you can specify individual block and allow lists, but then you have to setup overrides and sometimes those don't always work the way you think they will.
- There isn't a way to allow list the link protection, and I can't see any links that people are clicking on that were stopped by link protection, so I have no idea if that is doing anything.
Likelihood to Recommend
I think that Webroot Email Security is good for small-medium sized businesses who are on a budget for email security. They actually have a great encryption system for outbound email, and so if you bundle those together then it puts everything in the same pane of glass and that is nice. Over the last few years this company was purchased by OpenText, and I have seen some improvements because of that, but this product is not innovating like other emails solutions based on new threats that are emerging. I would say if you have a relatively low volume of inbound email, then this solution would suffice.