Sophos email appliance with Sandbox. Does it do a good job? Say, compared to Mimecast.

Question

Hi. 
 
 I know this is a bit of a daft question, as i'm asking on Sophos so of course you'll say Sophos. but then again...... 
 
 So i'm looking at a Sophos email appliance either virtual or physical (with the full sandbox facilities) as opposed to having it all done in the cloud via Mimecast. Our ISP is trying to sell us Mimecast, and i've said well I think Sohpos should be pretty much the same job except for archiving emails, which we have something else for, and at half the cost... Am i talking rubbish or does it do the job. 
 
 Those of you that are using the Sophos solution do you think it's a sensible idea or not :)

Red_Warrior · Answer

Highly recommend you download the trial of vmware workstation, then grab the 30 day trial of the sea.. 
 this will give you more of a seance of its abilities. the SEA is an industrial email solution.. there are not to many cloud services that can compete with the flexibility of been able to willy nilly scan mail anyway you wish or simply drop an entire country. 
 It is "more" work but well worth the effort.

Navar Holmes · Answer

The only option available to you with SEA is turn it off or turn it on. 
 Other than on or off you have no other controls over Sandstorm. 
 You can't tell it to sandbox all Office documents. 
 You can't tell it to sandbox all emails with attachments from a certain domain. 
 You can't run a report to see which recipients are getting the most sandbox triggered emails. You manually have to go to sandstorm monitoring, copy the sender, go to search and search for the sender. 
 SEA only sandstorms what it wants to not what you want to. 
 Remember it is called "Security Made Simple"