FC

Fraser C.

Network Engineer

Information Technology and Services

Mid-Market (51-1000 emp.)

8/7/2019

"TRAP has been valuable in a short amount of time"

2.5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

TRAP is a great product and has helped us hugely in a very short period of time.

It completely mitigated several attack vectors in our annual pen-test, which is great for us.

The reports I find particularly useful as our management team find these particularly useful and it is also easy to show the worth of a product if there is good reporting available!

Specifically in the reporting I like the top 10 of internal/external hosts, this gives a good starting point in investigations. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

The UI looks very dated compared to TAP and even PPS.

It is hard to read, navigate and use. It's quite disappointing I will admit. I would like to see a complete UI overhaul for the product before I would rate it higher.

One thing that annoys me is there are clickable menus that do nothing, the mouse cursor changes to a clicker and nothing can happen. The bar graphs can not be drilled down into so I find it hard to find more information on things. Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

Do not let the UI put you off, this is an extremely valuable product.

Very useful in mitigating threats even after these threats have landed, extremely impressive in this respect. Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

It has shown us that sometimes threats do get delivered and that even when this happens proofpoint can mitigate those threats.

This product has allowed us to protect users even when threat emails have been delivered, I find this very impressive personally. Review collected by and hosted on G2.com.

AH

Verified User in Higher Education

Enterprise (> 1000 emp.)

6/11/2019

"Proofpoint TRAP - excellent add-on to Proofpoint TAP"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

Automatically identifies email that passed initial scan which has later been identified as a new threat and pulls it from recipient mailboxes.

Lifesaver! Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

Resource heavy appliance,latest version requires 8 CPU cores and 16GB RAM, luckily it can be a virtual appliance Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

Also ask Proofpoint or your 3rd party vendor about CLEAR, it integrates TRAP with Phish Alarm and Phish Alarm Analyzer. These add a button to mail clients that allow end users to report messages they are unsure of and send them back through for a second scan. If it is found to be dangerous it will then look for all copies of the message and pull them, even ones forwarded by original recipients. Very useful tool Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

Previous email gateway was a one time scan and done. Proofpoint TAP, with the addition of TRAP provides a more robust protection model. TAP does the one time scan, TRAP sits and watches for updates to the filters and acts on items originally seen as safe that are now seen as a threat. I see it pull messages out of user mailboxes regularly where our previous system would have left them there and allowed users to open the message and attachments Review collected by and hosted on G2.com.

AM

Verified User in Management Consulting

Enterprise (> 1000 emp.)

4/15/2019

"TRAP is the missing piece of the phishing response puzzle"

3.5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

I like the fact that it automatically pulls bad mail from the inbox. Whether from TAP, or from PhishAlarm Analyzer, the identified threats can be quickly removed from users inboxes. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

I don't like the duct-tape and bailing wire feel to the products. However, the front-end is really slick and makes up for it. Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

When configuring the product, be sure to allocate a couple of extra mailbox licenses up front. Also, be sure you know how to define the proper mailbox permissions to impersonate other mailboxes. This is crucial for the quarantine functions. Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

If you need to rely on a messaging team to remove mail from users inboxes as part of your Phishing Response plan, then you may have a minimum 1 hour wait time, and usually a couple of day response time. This allows identified phishing or malware emails to automatically be removed. Review collected by and hosted on G2.com.

DR

Daniel R.

Technical Security Officer

Gambling & Casinos

Enterprise (> 1000 emp.)

8/7/2019

"Does mostly what is has to do"

4/5

What do you like best about Proofpoint Threat Response Auto-Pull?

It autopulls the malicious email from the mailbox. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

Well, there still is a bug where occasionally TRAP gets the recipient address incorrect (MD5 hashed, but not "unhashed") so TRAP cannot autopull. Review collected by and hosted on G2.com.

AU

Verified User in Utilities

Mid-Market (51-1000 emp.)

6/14/2019

"An excellent product! Dont know what we would do without it."

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

TRAP is a fantastic product that integrated well with our incident response processes. The interface is simple to use and shows some valuable statistics that help management view our Threat Landscape. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

Not sure there are any from my experience. Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

Consider the time it takes to act on a phishing or potentially malicious email. Then add the fact that a product which addresses just these areas will do it for you automatically or within a reasonable amount of time. Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

Threat response has reduced the amount of time it takes to respond because its done automatically or through a handful of manual steps that have been extremely simple. Review collected by and hosted on G2.com.

AH

Verified User in Hospital & Health Care

Enterprise (> 1000 emp.)

9/9/2019

"TRAP Works!"

4/5

What do you like best about Proofpoint Threat Response Auto-Pull?

If there is an urgent issue you can count on TRAP to pull the email Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

Honestly? There are none that I can think of! Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

Try it, you won't be sorry as its quick and efficient! If you need to pull more than 50 emails this is your solution! Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

Pulling mass spams message with bad malicious links in them. Review collected by and hosted on G2.com.

AI

Verified User in Insurance

Enterprise (> 1000 emp.)

4/24/2019

"TRAP is the coolest thing in the history of email security"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

Brand new threat snuck by your security appliance? No worries. As soon as that bad message starts getting detected elsewhere, TRAP will go get it from your users' mailboxes. POOF, it never happened. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

TRAP makes my life so much easier as an incident responder it could literally punch me in the face and I still wouldn't dislike anything about it. Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

Gone are the days of having to beg the Exchange team to run a Powershell script that takes three days to remove messages from mailboxes and still isn't able to report on what got removed. TRAP streamlines our IR workflow like waow and for a small team (like most IR teams!) that's a big thing. Review collected by and hosted on G2.com.

AC

Verified User in Construction

Mid-Market (51-1000 emp.)

12/10/2018

"Proofpoint TRAP is a must have tool for Network Admins"

4.5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

Anyone who is a network admin or tasked with managing email protection knows that one of the hardest tasks is mitigating potential phishing/malware 0-day attack emails after they have been delivered. Proofpoint TRAP (in conjunction with TAP) automatically removes emails that have been discovered to be malicious after they were initially deemed safe. It's the automation of this process that is the best feature of this tool. In addition, the ability to go into Proofpoint Email and Security and generate a CSV of emails, upload this to TRAP, and have TRAP automatically pull these emails from all sources is fantastic. TAP is great, but TAP without TRAP is like pasta without sauce. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

Not much to dislike really. It is easy to setup and maintain. I guess my only complaint would be that the web app interface could be updated a little to make drilling down into the incidents a little easier (i.e. how the threat levels change over time changes the order incidents are viewed). Otherwise, I find the product to be pretty much as advertised, which is fantastic. Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

Unless you enjoy manually going into your email environment and managing 0-day malware and phishing campaigns that were not detected at the time of delivery, I'd suggest looking into this product. Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

The problem this solves is the issue of how to quarantine and/or delete emails that have already been delivered. Several use cases are possible to solve with TRAP because of the ability to automate the pulling of emails based on threats post delivery. Because this is automated, there is less time spend by IT resources managing this issue manually. And because we use TRAP, emails are usually pulled before the user has a chance to follow a malicious link, or even answer a phishing attempt. This means less chance for a malware outbreak, resulting in potential network downtime and expensive mitigating solutions. Review collected by and hosted on G2.com.

JP

Jennifer P.

Sr. Systems Engineer

Information Technology and Services

Enterprise (> 1000 emp.)

4/16/2019

"Love Proofpoint TRAP!"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

The auto-pull makes any admin's life so much easier, it even pulls any forwarded messages from mailbox! Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

I don't really have any downsides, you have to setup a service account that has access to your mailboxes but I don't really think that is a negative Review collected by and hosted on G2.com.

AP

Verified User in Photography

Enterprise (> 1000 emp.)

4/15/2019

"TRAP is used by us for post malware quarantining."

4.5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

The way that TRAP enables us to quarantine TAP, and user reported malware has saved us countless hours from manually quarantining these emails. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

When navigating "incidents" in TRAP, you cannot save customized views for later use of default use. Review collected by and hosted on G2.com.