While Broadcom has not announced an official end-of-life for Symantec Email Security.cloud, many organizations have reported challenges with the solution since its 2019 acquisition by Broadcom, including perceived declines in service quality due to reduced investment and portfolio consolidation.
For this midsize structural engineering firm, their Symantec contract was set to expire on June 27, 2025, and they didn’t want to renew. Faced with that deadline, this firm faced a common dilemma: move quickly to replace their email security or risk going without a vital layer of protection.
With a lean IT team and mounting pressure, the firm turned to Proofpoint. The result? Rapid deployment, seamless integration, and a future-proof path forward.
Challenge: looming deadline, limited bandwidth, and evolving threats
The firm’s IT director was caught off guard by the earlier-than-expected expiration date. While they had already begun evaluating replacements, the compressed timeline created urgency—and anxiety. The VP of IT put it plainly: “We can’t afford any gaps in protection—especially with today’s threats.”
Like many companies, they trusted Microsoft 365 as their foundational platform but also recognized that today’s threats often require layered defenses. Given the increasing frequency of advanced phishing and business email compromise (BEC) attacks, their small team simply didn’t have the time or capacity for a complex migration under pressure. They needed coverage fast, without burdening their team or compromising future plans.
Solution: start with API, transition to gateway-based protection later
Proofpoint delivered a flexible, choice-first, journey-based approach that provided immediate protection through API-based email security while preserving the option to move to a secure email gateway (SEG) when the team was ready. This strategy offered the best of both worlds: instant protection and future flexibility.
This choice-first, journey-based approach allowed the firm to:
- Deploy quickly without changing MX records or disrupting mail flow
- Enhance their Microsoft 365 security posture with Proofpoint’s AI-driven threat detection
- Plan their SEG migration on their timeline
While their long-term vision includes a full SEG deployment, the team opted to start with Core Email Protection API to meet the urgent deadline. As their IT director described it, “We needed a solution we could activate right away, but also one that could grow with us.” The team appreciated having the option to switch to a SEG during their contract period. Proofpoint’s flexibility made all the difference.
Why Proofpoint won
The decision came down to five key factors:
- Advanced threat detection. Proofpoint’s Nexus AI, behavioral analytics, and robust threat intelligence added a critical layer of security to address email risks.
- Unified user experience. The team had already been exploring ZenGuide, Proofpoint’s behavior-based security awareness solution, to replace KnowBe4. They liked the idea of built-in training to enhance user learning.
- Integrated reporting. End users were confused by the mix of Microsoft and KnowBe4 reporting tools. With Proofpoint, they could standardize on native Outlook experiences across training and email threats.
- Cost efficiencies. The team liked having email protection and security awareness training bundled together under one vendor. Not only did this help to reduce costs, but it also streamlined vendor management.
- Deployment flexibility. Because they were able to start with API-based protection—and migrate to an SEG when ready—the team got peace of mind and a clear path forward.
A growing trend: augmenting Microsoft with purpose-built protection
This story reflects a broader shift. Even as organizations invest deeply in Microsoft 365, many are choosing to extend its native capabilities. They’re looking for dedicated solutions that provide greater visibility, precision, and control—especially around people-targeted threats.
Consider this:
- Attackers are using large language models (LLMs) to cut attack costs by over 95%, enabling more sophisticated, varied, and frequent attacks.
- BEC losses hit $2.8 billion in 2024, often using tactics that bypass traditional filters.
- Hybrid work, personal devices, and external collaboration continue to increase the attack surface and expose users to impersonation and credential theft.
Proofpoint works alongside Microsoft to help you address these evolving threats. At the same time, we help you to preserve the operational benefits and investments your organization has made in Microsoft.
Key takeaways for security teams
- Your email security journey can start with API and evolve into gateway-based protection—depending on your team’s needs and timing.
- Proofpoint enhances Microsoft 365 by addressing advanced threats without adding operational burden or complexity.
- You can meet urgent timelines with flexible deployment options—without rushing long-term decisions.
- Integrated training and detection make it easier to manage user risk and drive behavior change, reducing organizational risk.
Ready to explore your options with Proofpoint?
At Proofpoint, we believe the best security is human-centric. Whether you’re facing an uphill battle against email threats, or stretched thin on resources, Proofpoint can help.
Take the next step to protect your people and business from human-centric cyberattacks. Learn more about Proofpoint Core Email Protection. To explore your options for strengthening your Microsoft 365 security posture, contact us.
