What email filtering services are you using with Google Workspace clients, especially schools? We'd like to protect or license only staff accounts rather than every student account, but I'm unsure which vendors support that setup and how best to configure it.
5 Answers
Avanan, now part of Check Point, seems like a straightforward fit. API-based filtering can let you target staff accounts without requiring licenses for all students.
We’ve used Securence for years, but it’s being discontinued. We’re evaluating SpamHero, which appears to offer similar filtering with some administration improvements. It can sync users from Active Directory, so limiting protection to a selected group of faculty or staff should be possible.
API-based services such as Avanan or INKY can filter selected users, so you may be able to route only staff mail through the service instead of licensing the entire domain.
Proofpoint was one of the better solutions I’ve used, but verify the current licensing terms and vendor support before committing. We’ve had trouble getting responses, and older contract language suggested that every account needed to be licensed.
Avanan has also been catching significantly more for us than Proofpoint Essentials, even though the advertised detection rates are supposed to be comparable to Enterprise.
Google Workspace licenses are assigned per user, so students do not automatically need the same filtering license as staff. Put staff in a separate organizational unit or group and apply the mail-routing and filtering policies only to those accounts. FortiMail can also work, although administration may be more complicated.

That sounds like the direction I’ll investigate next. Thanks!