Quick Links
Avanan Blog Attack Briefs Events Webinars
Anti-Phishing Avanan vs ATP Contact Us About Us
  • Search
  • Support
Avanan
  • Solutions
    Platforms
    • Microsoft 365
    • G Suite
    • Slack
    • Teams
    • File Sharing
    • All Solutions
    Security
    • Anti-Phishing
    • Malware & Ransomware
    • Account Takeover Protection
    • DLP & Compliance
    • Archiving
    • Incident Response-as-a-Service
    Read Our Case Studies

    See how well we have worked for different industries

    Learn More
  • Pricing
  • Why Avanan
    Why Avanan
    • How it Works
    • About Us
    • True AI
    • Threat Calculator
    Compare Avanan
    • Compare
    • Avanan vs Other API Solutions
    • Avanan vs Secure Email Gateways
    See How Others Compare
    View Now
  • Partners
    Resellers
    • Become a Reseller
    MSP/MSSP
    • Become a MSP/MSSP
    Access Our Partner Portal
    Go Now
  • Resources
    Blog
    • Attack Briefs
    • Industry Insights
    • Cloud Security Tips
    • All Blog Posts
    Events
    • Upcoming Webinars
    • Conferences
    • Regional Events
    • All Events
    Resources
    • On-Demand Webinars
    • White Papers & Solution Briefs
    • Case Studies
    • Avanan Comics
    • Videos & Presentations
    • News
    • All Resources
    Sign Up for Attack Briefs

    Be the first to know about advanced threats, and what you can do about them.

    Sign Up
  • Free Trial
  • Get Demo

Avanan Support

Documentation

Documentation

Open a Ticket

Open a Ticket

`
  1. Blog Home
  2. Industry Insights
  3. Microsoft ATP: Millions of Emails Reveal ATP and EOP Offer Similar Protection

Microsoft ATP: Millions of Emails Reveal ATP and EOP Offer Similar Protection

  • Posted by Jeremy Fuchs on December 8, 2020
    Jeremy Fuchs
    • Tweet

After analyzing over 360 million emails, Avanan researchers have classified the number of malicious emails missed by Microsoft Advanced Threat Protection (ATP) and Exchange Online Protection (EOP).

EOP is Microsoft 365's default anti-virus security. ATP is an add-on service available for an additional cost, or included with higher-priced enterprise options, such as the E5 license package.

Though many companies use one of these protections, Gartner has noted that its clients "have routinely reported dissatisfaction with EOP and ATP and have enlisted the aid of one or more third-party email security products."

Our research lays out one of the reasons why. Our analysis, focused solely on malicious email delivered to the inbox, found that ATP only offers slightly more protection than EOP. 

 

This analysis finds that ATP doesn't provide that much more protection than EOP. This jives with our 2020 ATP Report, which found a 40.7% catch rate for EOP and a 48.4% catch rate by ATP.

Download our Report on what ATP Misses

We've also extended that analysis to the junk folder. We found that, in a typical O365 junk folder, 4.5% of emails are actually phishing. With ATP, that number is only marginally better, at 2.8%.

This is a problem because users have been trained to "Dumpster Dive" in the junk folder. Microsoft's Office 365 ATP policies flag an unusually high percentage of legitimate emails as phishing. Because of this, companies and organizations use the junk folder as a way to help protect end users from phishing attacks.

Sending ATP detections to quarantine, however, introduces a great risk of blocking legitimate emails to your users. And so users are accustomed to dumpster diving in the Junk folder for legitimate messages.

But there’s a lot of trash to root through when looking for that one piece of treasure. And it increases the likelihood that a phishing email is acted upon by a harried employee, especially when there's a significant amount of phishing emails in the junk folder. 

The more phishing emails in the junk folder, the higher risk of infecting the organization there is.

Avanan researchers have also done a similar analysis against Secure Email Gateways, which can be seen here.

Avanan, using its patented, inline approach, consistently allows far fewer bad emails into the inbox. 

Subscribe to Our Attack Briefs for More Research

  • Tweet
Topics:  
Industry Insights
NEXT POST:
Can Phishing Training Replace Email Security?
Read more avanan-cloud-email-security reviews
Get a Demo

Experience the power & simplicity.

Learn More
  • Popular

Categories

  • Blog (561)
  • Attack Briefs (219)
  • Industry Insights (164)
  • Cloud Security Tips (65)
  • News (51)
14-Day Free Trial – Experience the power and simplicity of Avanan Cloud Security.   Start Free Trial

About

  • About Us
  • Careers
  • Partners
  • Terms of Service
  • Privacy Policy

Explore

  • Platform
  • How it Works
  • View Pricing
  • Free Trial
  • Get a Demo

Get in Touch

  • Contact Us
  • +1 (855) 528-2626 info@avanan.com 259 West 30th Street
    New York, NY 10001

    Latest From the Avanan Blog

    Hackers Dangling Fake Job Offers to Students

    Hackers Dangling Fake Job Offers to Students
    • View All Blog Posts →

    © Copyright Avanan. All Rights Reserved.