Barracuda Email Protection

We value most the ease of administration, we do not need to constantly monitor the quarantine or make changes to the settings or whitelists in order to rectify problems. Where there is an issue with email being delivered incorrectly, it is easy for both users and IT admins to submit feedback reports to Barracuda and also where necessary request a response. The impersonation protection is very good when correctly configured with DMARC and DKIM, very little gets through. Where we do need to escalate, their support team is very knowledgeable and takes the time to ensure you are fully satisfied with the resolution before closing off the call.

Strengths: GeoIP policy (love that), easy to use dashboard, ability to quickly deny or allow users or domains. The Barracuda Security Alerts that give you information of why it's flagged and possible remediation steps. It's in the U.S.

We have implemented several of the services - EGD, Impersonation Protection, Domain Fraud Protection, SecureEdge, Incident Response, Security Awareness Training. I like all of the solutions implemented because I took time to add additional solutions. EGD gives excellent insight into blocked/deferred emails. The ATP feature protects our network by opening the URLs in the Barracuda network and blocking emails with infected /suspicious attachments. Allowing users to manage their own mailboxes for any deferred emails eases the workload on the Barracuda administrator. Impersonation Protection, added this year, has been instrumental in protecting users by alerting them of suspicious senders. Domain Fraud Protection feature has helped to block several suspicious domains that were sending us volumes of SPAM emails. Incident Response is a great feature to report those SPAM emails that were still delivered into the mailboxes. You can look up all the suspicious SPAM emails by searching on some key words/documents etc and send alert notifications to the recipients in the company. The Security Awareness Training is a great tool to run security training campaigns. It has hundreds of Phishing/SPAM email templates to select and tailor them to our business requirements.

As with most email security products, there can occasionally be false positives that require review, but these can be reduced drastically by reviewing the reasons for these and correcting them either by a tweak to the configuration or by submitting feedback to Barracuda so they can improve their algorithms. The reporting and analysis options could be a little better to assist with monitoring trends, but the ones 'out of the box' are more than adequate for most needs and can be scheduled to run as needed. When we first rolled out the product it did take us a little while to find our way around and configure this as we needed, it can run pretty much as is out of the box with limited initial set up but Barracuda's support team took the time to connect through and walk us through the settings and suggest areas we could fine tune. Getting this set up right the first time for us was invaluable and one of the key reasons we have been so happy with the product ever since, with very few further changes required other than minor fine tuning.

Weaknesses: Third-party companies like dropbox and docusign get through with what seems like obvious phishing. Bulk phishing attempts get through too often. High false positive rate.

Incident Response's automatic remediation expires after 72 hours, and then you have to manually extend the continuous remediation. I have seen examples where the remediation has expired and the users have again received similar SPAM emails. EGD search tool/filter at times is cumbersome and does not work correctly. Barracuda support is aware of the issue and said it would be corrected in new EGD. I have not worked in new EGD to share my experience.