What email filtering solutions work well for Google Workspace schools?

Google Workspace licenses are assigned per user, so students do not automatically need the same filtering license as staff. Put staff in a separate organizational unit or group and apply the mail-routing and filtering policies only to those accounts. FortiMail can also work, although administration may be more complicated.

Proofpoint was one of the better solutions I’ve used, but verify the current licensing terms and vendor support before committing. We’ve had trouble getting responses, and older contract language suggested that every account needed to be licensed.

API-based services such as Avanan or INKY can filter selected users, so you may be able to route only staff mail through the service instead of licensing the entire domain.

We’ve used Securence for years, but it’s being discontinued. We’re evaluating SpamHero, which appears to offer similar filtering with some administration improvements. It can sync users from Active Directory, so limiting protection to a selected group of faculty or staff should be possible.

Avanan, now part of Check Point, seems like a straightforward fit. API-based filtering can let you target staff accounts without requiring licenses for all students.