What are your thoughts? It's come time that we need to put something in front of Exchange Online... we've created rules over the years that have filtered out much of the spoof/impersonation attempts and EOP does an okay job... but more and more is getting through https://192168ll.link/ .
We're pretty happy with Sophos Endpoint Protection and Phish Simulator... and we're considering their Email Gateway product. The cost is very reasonable and appears to have a decent feature set. Thoughts??? Any experiences?
You can do both. You can do the classic MX Integration, which sends all Emails to Sophos and then to M365 or you could do a API based "Mailflow" integration. Which means, Sophos Email is not the MX, instead it is the external scan engine working with API directly on your M365.