The short answer
Sophos Email suits organizations that already use Sophos for endpoints, firewalls or managed detection, want one console for all of it, and need sandboxing, post-delivery clawback, data loss prevention or encryption. iBlockSpam suits businesses that want inbound filtering at a published price per domain, with unlimited mailboxes, flexible per-user digests, free DNS tools and a 30-day money-back guarantee.
Competitor details below were checked on Sophos's own pages in October 2026. Sophos is renaming Sophos Central to Sophos Fusion in stages, so you may see either name.
Side by side
| Item | Sophos Email | iBlockSpam |
|---|---|---|
| How you buy it | Sophos says the best way to buy is through a certified partner; MSPs can buy it monthly through MSP Connect Flex | Directly online; partners (MSPs and web hosts) by conversation |
| Pricing model | Per user and shared mailbox needing protection; aliases, distribution lists and public folders not counted | Per domain, unlimited mailboxes (mailbox count, not message volume) |
| Published price | Not published (quote on request) | Protect $12 per domain/month billed annually ($144/year) or $15 month-to-month; Protect Plus $19 annually or $24 monthly. Beta pricing, USD, excluding tax |
| Tiers | Sophos Email and Sophos Email Plus; Portal Encryption and DMARC Manager add-ons | Protect and Protect Plus |
| Trial or guarantee | Free trial of 30 days with all Sophos Email features | No free trial; 30-day money-back guarantee on a domain's first annual subscription |
| Deployment | Mailflow mode for Microsoft 365 (mail flow rules created through Microsoft APIs, no MX change) or Gateway mode (MX change) | MX change plus platform steps, with a guided setup wizard and rollback steps |
| Platforms | Mailflow: Microsoft 365. Gateway: Microsoft 365, Google Workspace, Exchange and other mail servers | Microsoft 365, Google Workspace, cPanel/WHM, Exchange and other mail servers |
| Management | Sophos Fusion (formerly Sophos Central), shared with other Sophos products | iBlockSpam portal and filtering panel |
| Quarantine and summaries | End-user quarantine; summary emails on the days and time slots an admin selects, listing new items only; kept 30 days (90 with Email Plus) | Personal quarantine for every user; digests hourly, daily, on a chosen weekday or custom; shared admin quarantine |
| Outage handling | Inbound delivery retried for up to five days; Emergency Inbox shows the last 30 days (90 with Email Plus); with Email Plus, inbound messages from the last 90 days can be redelivered | Mail spooled for up to 5 days when your server is down; 30-day message history (not a compliance archive) |
| Wider protection | Sandboxing, post-delivery clawback for Microsoft 365, DLP and content control, portal encryption add-on | Spam, virus, malware, phishing and spoofing filtering; attachment-type and Office macro filters; no sandboxing |
| DMARC | DMARC Manager: add-on, or included with Email Plus | DMARC monitoring on both plans |
What it costs at 10 and 50 mailboxes
Assumptions: one domain, published prices only, USD, excluding tax.
| Item | 10 mailboxes | 50 mailboxes |
|---|---|---|
| Sophos Email | Not published (quote through a partner) | Not published |
| iBlockSpam Protect, annual | $12/month ($144/year) | $12/month ($144/year) |
| iBlockSpam Protect Plus, annual | $19/month ($228/year) | $19/month ($228/year) |
| iBlockSpam Protect, month-to-month | $15/month | $15/month |
Sophos licenses by users and shared mailboxes, so its cost grows with headcount; ours doesn't. If Sophos Email comes bundled in a wider Sophos agreement, compare the whole agreement, not just the email line. Our per-domain vs per-user pricing page explains the trade-off.
When Sophos Email is the better choice
- You already run Sophos. If your endpoints, firewall or managed detection service are in Sophos Fusion, email in the same console has real value.
- You're on Microsoft 365 and don't want to change MX. Sophos Mailflow routes mail through Sophos with mail flow rules instead of a DNS change. See gateway vs API email security.
- You need post-delivery clawback. Sophos can remove malicious messages from Microsoft 365 inboxes after delivery. iBlockSpam filters before delivery only.
- You need sandboxing, DLP or encryption. Sophos offers sandboxing, data loss prevention and content control, plus a portal encryption add-on. iBlockSpam offers none of these.
- Users need to read mail during a long outage. Emergency Inbox gives users the last 30 days of inbound mail, or 90 with Email Plus.
- You want to test before you pay. Sophos has a free 30-day trial; iBlockSpam has none.
When iBlockSpam is the better choice
- You want a price you can read before talking to anyone. Prices and per-domain limits are on the pricing page.
- You have many users or shared mailboxes on one domain. One price per domain covers unlimited mailboxes and domain aliases, with 100,000 inbound messages a month.
- You're on Google Workspace, cPanel or another mail server. MX filtering works the same way on every platform we support, such as Google Workspace.
- Users want to choose how often they hear about held mail. Digests can run hourly, daily, on a chosen weekday or custom.
- You want DNS drift alerts and free tools. Domain monitoring is included, and our tools need no sign-up.
- You want a money-back guarantee instead of a trial. A domain's first annual subscription has a 30-day money-back guarantee.
How to switch from Sophos Email
- If a partner manages Sophos for you, tell them your plan and check your licence term and notice period.
- Export allow and block lists and any policies you rely on, and download anything you need from message history or Emergency Inbox.
- Save your current DNS with the Email Health Check and lower the MX TTL a day or two ahead.
- Add your domain in iBlockSpam and follow the guided setup for your platform, such as the Microsoft 365 steps.
- If you used Sophos Mailflow, remove the mail flow rules Sophos created in Microsoft 365, and any related connectors, at cutover. If you used Sophos Gateway, update any connector or firewall rule that only accepts mail from Sophos IPs, and move your outbound relay and SPF if it runs through Sophos.
- Change MX, test with the Email Header Analyzer, and keep Sophos active until the old TTL has passed and no new mail arrives there.
Our migration plan covers each step and the rollback.
Sophos, Sophos Email, Sophos Central and Sophos Fusion are trademarks of their owner; iBlockSpam is not affiliated with Sophos.
Sources
Checked October 2026.
- Sophos: Sophos Email product page (Microsoft 365 and Google Workspace, gateway or API deployment, sandboxing, post-delivery clawback, DLP, portal encryption, free trial)
- Sophos: Sophos Email pricing (licensed by users and shared mailboxes, quote on request)
- Sophos: Email licenses (licensing basis, Sophos Email and Email Plus, DMARC Manager and Portal Encryption add-ons, MSP Connect Flex)
- Sophos: Email trial license (30-day trial, temporary licence after the trial)
- Sophos: Sophos Email onboarding (Mailflow and Gateway modes, supported platforms)
- Sophos: Processed report (inbound delivery attempted for up to five days, redelivery with Email Plus)
- Sophos: Quarantine Summary Settings (days, time slots, new items only)
- Sophos: Quarantine self-service (quarantined messages kept 30 days, 90 with Email Plus)
- Sophos: Emergency Inbox (30 days, 90 with Email Plus)
- Sophos: How to buy (through a certified partner)
- Sophos: Sophos Central is becoming Sophos Fusion
Frequently asked questions
Does Sophos Email require changing my MX records?
Not always. Sophos documents two modes. Sophos Mailflow, for Microsoft 365 only, uses Microsoft APIs to create mail flow rules that route mail through Sophos and back without touching DNS. Sophos Gateway changes your MX records and also covers Google Workspace and Exchange. iBlockSpam always works at the MX level, followed by platform steps.
Which Sophos Email mailboxes count toward the licence?
Sophos's licensing guide says individual users and shared mailboxes need licences, while aliases, distribution lists and public folders don't. Usage is based on mailboxes processed in the past 30 days. iBlockSpam charges one price per domain, so adding users or shared mailboxes doesn't change the bill; the monthly message allowance still applies.
How long does Sophos Email keep trying to deliver if my server is offline?
Sophos's documentation says it attempts to deliver inbound messages for up to five days and outbound messages for up to one day. Emergency Inbox lets users read the last 30 days of inbound mail, or 90 days with Email Plus. iBlockSpam also holds inbound mail for up to 5 days, but has no emergency inbox.
What happens when a Sophos Email trial ends?
Sophos offers a 30-day trial with full access to Sophos Email features. Its licensing guide says protection may continue for up to 30 more days on a short-term temporary licence, which may carry a fee. Without a licence, you must route mail away from Sophos. iBlockSpam has no trial, but offers a 30-day money-back guarantee instead.
Related guides
How to switch spam filter providers without a gap in protection
Move from one MX spam filter to another: export lists, keep quarantine access, run both connectors during overlap, change MX and remove the old service.
9 min read Switching & migrationHow to change MX records without losing email
A cutover checklist for MX changes: lower TTL, stage the new destination, keep the old server accepting mail, verify with headers and roll back cleanly.
11 min read Phishing & threatsEmail security for trucking and logistics companies: stopping cyber-enabled freight fraud
Email risks for carriers, brokers and 3PLs: fake broker emails that install remote access tools, load board takeover, FMCSA phishing and cargo theft.
10 min readOther comparisons
- Barracuda alternative
- Check Point Harmony Email alternative
- Cisco Secure Email alternative
- Microsoft Defender for Office 365 vs an inbound email gateway
- Google Workspace built-in protection vs an inbound gateway
- Hornetsecurity alternative
- Libraesva alternative
- MailChannels alternative
- Mailprotector alternative
- Microsoft 365 built-in filtering vs an inbound gateway
- Mimecast alternative
- MX Guarddog alternative
- Mail Assure alternative
- Per-domain vs per-user pricing for email filtering
- Proofpoint Essentials alternative
- SpamExperts alternative
- SpamTitan alternative
- Trend Micro Email Security alternative
- Zix / AppRiver alternative
Last updated: