Proofpoint Enterprise Data Loss Prevention (DLP)

Very accurate in catching sensitive data, their Smart Identifiers were good and precise, policy engine was consistent across email and endpoints, good centralized management, fairly streamlined UI (refreshed relatively recently!) and UX for search and investigations. Detection and prevention logic was reliable.

The ease of set up and configuration.

1. It accurately detects and flags sensitive information, especially things like PII or financial data. 2. It catches risky content without blocking legitimate communication. 3. The reporting interface is easy to use and access.

Not for the faint of heart. Initial setting up was, as stated, a chore, a highly complex grind that lasted longer than anticipated, but it was within reason... mostly. If you err in configuration, you'll be rewarded with a bunch of FPs, so attention is necessary. MacOS agents were not stable, but that wasn't much of an issue as our PC fleet is mostly Windows (and Proofpoint is, in all its aspects, Windows-friendly). That being said, there's not much in way of customization in the UI.

It requires some tweaking to reduce false positive detections.

One thing I found a bit bothersome was how complex some of the policy creation steps were. The UI can definitely be improved here. It lacks pre-built templates, limited tools etc.