Mailwall Remote Features Tour Datasheet

Transcription

1 Management Portal & Dashboard Mailwall Remote Features Tour Datasheet Feature Benefit Learn More Screenshot Cloud based portal Securely manage your web filtering policy wherever you are without need for any desktop software Designed to blend-in with the Windows Server platform for that instant familiarity, the portal gives you access to all the features of Mailwall Remote. This is where you configure your policies, check quarantine and run reports. You can also configure security permissions to give various levels of access to different administrators. End users can also be granted limited access (for example to personal quarantine). Real time traffic and blocking statistics The reporting dashboard shows you all the vital stats legitimate mail and threats with the option to instantly review any time period. The reports section centralises inbound and outbound mail filtering statistics, breaking them by domain. You can use it to review how many s were screened in total, what proportion was legitimate and how many viruses and spam were blocked. You can instantly summarise these stats by day, month and even from the beginning of your subscription. On-demand scheduled reports The filtering information you need delivered to your inbox on regular basis You can schedule regular reports delivered to you in PDF format. They not only show live stats but also present you with useful summaries showing which users are sending and receiving most , what are the types of spam we block the most on your account and so on. A copy of each report is retained, so whenever needed, you can recall past reports from the portal.

2 Message tracking Get answers quickly - centralised message search tool allows you to query Mailwall for details of any message that it checked When and important doesn t arrive for whatever reason, you need answers straight away. Use the portal message tracking facility to search messages by date, sender, recipient or subject criteria. Quarantine access log A security audit log keeps a track of messages opened within the web interface Many s are confidential Mailwall Remote creates audit log entry even when your own users preview messages in quarantine or in the Contingency and Recovery (ECRS) tracking window. So whenever you need to find out who looked at what and when (or even released a message) it is ready to find. Login permissions Each login can be given granular control over the service functionality You can grant your technical support staff limited access to the portal and give them limited rights to view selected users or teams quarantine and white list or make limited policy changes.

3 Policy Editor Full control over domains You can add, remove domains and change their IP destinations without having to contact us There is no additional charge for adding/removing domains on your Mailwall Remote account. This portal section also allows you to specify which IP addresses are authorised to send outbound mail through the service. Setup Advisor Flexible rule Automated checks performed on your mail server every 24 hours ensure you are running optimal setup and if not, we will let you know Powerful policy editor allows you to configure virtually any desirable aspect of security policy Even when using a managed service to protect yourself from threats, issues with your mail server or firewall configuration may prevent you from getting the optimal protection. This is why based on our technical support experience of having opened thousands of service accounts - we regularly perform some basic checks on your mail server, so that we can spot common configuration issues such as relay permissions, firewall settings, catch-all accounts and so on. If any issue is spotted, a warning will be shown when you log on it will be cleared automatically when you address the issue. The policy editor is the key component of the Mailwall Remote solution this is where you configure all elements of your security policy. The editor simplifies complex rule by applying 3-stage logic when checking every - which messages to check (inbound, outbound etc) - what to check for (spam, virus, content etc) - what to do when found (quarantine, forward etc) Rules are executed from 1 st to last according to their priority in the list similar to rules in a firewall.

4 Mail traffic control Content control Rules can be applied to inbound/outbound mail, with support for exclusion lists and AD integration Scan any message for any content and take required action While most traffic rules are applied to inbound and outbound mail, sometimes you need to specify custom domains or recipients. The policy editor allows you to change this at any time. You could likewise want to exclude specific senders or recipients from certain rules and this also is configured here. You can also link rules to AD memberships for example execute a rule on messages to or from specific Security Group or Organisational Unit useful for example if you wanted to configure different disclaimers based on user s department. Rules can be also active only during specific time windows. Any element of a message can be scanned for specific content and custom action taken if found. Please check the dedicated section on Data Loss Prevention to learn more about existing features in Mailwall that help you secure your data. Attachment control Full control over e- mail attachments Mailwall Remote rules can detect attachments by name, mime type, extension, size, compression and encryption.

5 Advanced disclaimers Add text, HTML and images as disclaimers One of the key configuration requirements for any organisation is addition of disclaimers to outbound mail. Mailwall Remote can add them in text, HTML and image form, and you can also customise disclaimers based on the user s Active Directory membership. Custom rule actions Over 12 actions including the basics such as Quarantine, forward, delete, alert, reply everything you need to handle your messages The action rule setting decides what will happen to a message that is being auctioned by the current rule. The Initial action is what being invoked first and can include any combination of the following: - modify subject - forward a copy of the message to a recipient - reply with custom text (and HTML) - send alert to dedicated address - insert text or HTML into the message body (useful for disclaimers) - insert image - remove headers the Final action lets you decide what will happen to the message: - send to Trashcan - quarantine - delete - delay until off-peak time - allow through

6 Protection Antivirus and malware protection Omniquad Intercept engine Spam protection 4 concurrent antivirus engines perform deep message inspection Omniquad Intercept a bespoke Zero Day early detection of new threat outbreaks State of the art spam filtering with 99% guaranteed SLA It is generally recognised that multiple antivirus engines can offer greater level of protection from threats than a single product. This is one of key benefits of Mailwall Remote with extensive data centre hardware infrastructure at our disposal; we can perform more scanning than normally feasible onsite. We have partnered with several well known antivirus vendors to deliver high level of protection through OEM agreements. Our selection criteria are tough - some antivirus vendors improve their overall performance over time, others not this is why we periodically review performance of our partners and replace the lowest performing antivirus engine with a new one. Since we aggregate traffic, we are in a unique position to be first in line to spot emerging new types of threats whether it is virus, spam or an unknown type of threat not seen before. We can therefore take a preemptive action early often we supply samples to the antivirus companies which then produce signature updates. Mailwall Remote spam filtering balances all major anti-spam technologies available today to deliver high level SLA (Service Level Agreement) IP Blacklists Domain filtering Snowshoe spam protection Real-time Sender Reputation filtering Keyword weighting Link analysis

7 Quarantine Block backscatter Antifraud database check Protects you from floods of bounce notifications for messages you never sent Constantly updated protection from common types of fraudulent attacks Spammers frequently spoof sender addresses this in turns may cause you to receive unwanted flood of bounce notifications when the recipient s mail server will not (for whatever reason) deliver this mail. Mailwall Remote solves this problem by keeping a track log of outbound mail, and cross-referencing bounces against this log. We have built up one of the web s largest databases documenting various types of fraud: from 419 lottery winner, employment and investment to dating. Content of scanned by Mailwall Remote is compared lexically against this database to protect you from this type of threat. Crossover threat filtering Quarantine Uses intelligence from web filtering threats in filtering and vice versa. Centralised location to review all messages stored for whatever reason When we learn about a new web threat, it is not only the Surfwall Remote users who are protected - we pre-emptively ensure that our customers are protected at the same time. For example, each hyperlink in every is opened against known malware and spyware database, and this happens other way too (when we learn about a new malware site distributed by , we protect our Surfwall Remote customers who may not be using Mailwall Remote) The quarantine is one of the key components of Mailwall Remote this is where you go to review what has been blocked, so you need answer quickly and it needs to be easy to filter and understand. The default view will show messages blocked due to content and attachments rules at the top (since these are most likely messages you will want to release), followed by spam sorted by spam score in ascending order. You can search quarantine by sender, recipient, subject, date as well as particular reason why it has been stopped or even by specific rule.

8 Simultaneous release and white list Add addresses to white list while releasing them from quarantine When you release a message from quarantine, you often may want to exclude the sender from the specific rule. Rather than having to go to the policy editor every time, Mailwall Remote allows you to just exclude the sender from the particular rule at the same time as releasing the message itself. Individual quarantine logins Give every user permissions to view his or her own quarantine area Every end user can be given permission to review messages quarantined just for him or her. You may of course restrict this functionality so that they can only view messages quarantined due to spam, and not viruses or other threats. While the personal access to quarantine is a powerful feature for those who need it, we suggest that normally it is enough to enable spam digest (explained separately) Spam Digest for end users A daily report to each user who received spam Saving administrator s time is one of key reasons for choosing Mailwall Remote. But frequently end users need the visibility on what has been blocked for them, which means open support tickets when the end user expects something but hasn t received it yet. Spam Digest is a useful feature that sends a daily (or more frequent if required) report to every end user for whom spam was blocked, giving everyone peace of mind and full transparency over blocked mail.

9 Spam Digest Full customisation over spam digest frequency and contents For the ultimate power and flexibility when you need it, Spam Digest offers up to 30 different configuration options choose how often messages are delivered, and what kind of spam is reported in them. You would probably like to show bulk mail blocked, but you probably wouldn t want to show each users what viruses were blocked for them. Spam Digest can be also optionally configured to allow end users to release messages from quarantine themselves and add senders to end user s personal white list.