Transitioning to McAfee SaaS Protection from Postini

Transcription

1 Technical FAQ Transitioning to McAfee SaaS Protection from Postini Frequently Asked Questions Google recently and abruptly announced that all Postini customers must either migrate to Google Apps, which includes a paralyzed version of Postini, or terminate their contract upon expiration and move to another vendor: To make matters worse, the Google Apps filter will not maintain many of the valuable features that IT departments have come to depend on. Therefore, it s no surprise that McAfee has welcomed scores of Postini customers to its award winning McAfee SaaS Protection service since the announcement. Q: Why Choose McAfee? A: There are many reasons why you should switch from Google/Postini to McAfee: As the world s largest dedicated security vendor, McAfee s primary focus will always be providing the highest level of security to our customers. When it comes to security, McAfee solutions goes beyond defending against spam, phishing, malware, and blended attacks, to also help customers secure outbound communications via integrated encryption, a robust set of pre-built compliance templates, the ability to scan 300+ attachment types, and data loss prevention technologies to safeguard data from bad actors or accidental mishaps. continuity and archiving are integrated as part of the solution. McAfee has a long-term commitment to security, demonstrated by our history of frequent product enhancements, and over 10 years of operational excellence. We understand that providing good customer service requires more than just a support web site, which is why McAfee provides 24x7 live customer support at no additional charge. McAfee recently received these important industry recognitions for security: Leader, Gartner Magic Quadrant for Secure Gateway Leader, Forrester Wave for Content Security Value Leader, EMA Radar Report for Hosted Security 5-Star Best Buy, SC Magazine Content Security Innovator: Data Protection, SC Magazine McAfee is ISO certified and serves tens of thousands of businesses and millions of end users worldwide: Console localized for end users in 18 languages Localized processing with data centers in North America, Europe, Asia, and Australia. Integration with McAfee SaaS Web Protection helps organizations optimize security for greater cost effectiveness. Q: How is McAfee SaaS Protection Different than Postini and Google Apps? A: First and foremost, McAfee keeps your safe with our defense In-depth approach to threat protection, utilizing three AV engines, zero hour protection, and most importantly, McAfee Global Threat Intelligence (GTI). GTI is McAfee s cloud-based threat identification network, drawing threat data from over 100 million global listeners and billions of transactions per day.

2 Differentiators to consider: McAfee offers Spooling options for instances when cannot be delivered to your network due to outages, including the ability for users to interact with spooled Outbound filtering including built-in DLP and integrated encryption services 60 days of audit logging versus Postini s 45 days Near-real time message audit records availability Proxy-based filtering, which minimizes disk writes and provides senders with accurate chain of custody information, as opposed to Google Apps store-and-forward model McAfee s proxy architecture won t overwhelm your system with unnecessary connections. No character limit on allow/deny list entries With convenient roles like quarantine administrator McAfee makes it easy for organizations to delegate appropriate levels of access to the corporate helpdesk Easy-to-use TLS, SPF, and DKIM functionality, supporting your ability to enforce authentication best practices Migration Process Overview In this guide, we ll show you the most common configuration tasks, but keep in mind that there is a lot more to McAfee SaaS Protection than what you ll find here! To learn more, we highly recommend attending one of our free online training classes. Setup can take anywhere from a few minutes to several days depending on your knowledge level and the complexity of your infrastructure. Tasks 1. Preparation 2. Configure inbound delivery 3. Configure inbound server failover 4. User creation 5. Configure inbound policies 6. Configure outbound policies 7. Inbound cutover 8. Outbound cutover

3 Data Sheet McAfee SaaS Security Complete security and access without the operational costs Protecting the Click McAfee ClickProtect helps you eliminate the threats from embedded URLs within an message, and is a core feature of the solution. Easy to Adopt Modules: SaaS Protection & Continuity SaaS Encryption SaaS Archiving In a difficult economy, many companies delay technology investments, including upgrades to security infrastructure and additional IT staff, or look to cut costs by moving the inboxes to the cloud. According to a SANS Institute study, 95% of all attacks on enterprise networks are the result of successful spear-phishing. 1 The threats they propagate are more sophisticated than even before and more dangerous. Blocking Spam and Malware Is Just Half the Battle Everyone who depends on to do business needs to put into place these security measures: Block inbound noise and threats before they can impact your network, employees, or business operations. Accurately identify and block outbound s that contain proprietary, inappropriate, or actionable content, whether in the message body or in attachments, and act on them appropriately. Ensure always-on access to communications. Maintain and document compliance to company, industry, and government regulations. Manage the complete environment for up-to-the-minute security, continuity, and compliance. Deferred Management Is Not an Option Staying on top of all these challenges can be particularly time consuming and costly. Fortunately, there s a much easier way to manage security, provide reliable storage and retrieval, and ensure continuous access at a lower cost and with minimal IT effort. Low-Cost, Easy-to-Manage Protection A snap to deploy, McAfee Security-as-a-Service (SaaS) security solutions are always on, always up-to-date, and require no additional hardware or software investment nor any extra time and resources to maintain them. Because these services stop spam and -based threats before they infiltrate your network, the load on your servers is greatly reduced, saving you valuable bandwidth and server storage. Worldclass 24/7 McAfee Customer Support ensures that help is never more than a phone call away. Simplified web-based administration and reporting With a single, intuitive web-based management console, policy updates are simple to manage across all your domains and locations. Administrators can configure and enforce policies for spam, malware, and content-filtering policies, including attachment content rules. Microsoft Active Directory integration enables easy, ongoing maintenance. Policies may be applied globally to user groups or individuals for ultimate flexibility. Reports, logs, message audits, and quarantines provide the necessary visibility. McAfee SaaS solutions also free up valuable IT resources and lower your total cost of ownership. is today s engine of productivity. Every day, with thousands of messages passing through a typical company s servers, managing to ensure security and availability has become a huge task. But there s a better way. McAfee SaaS security solutions provide you with total control over security and availability while freeing IT resources to focus on strategic work that advances corporate initiatives. Robust infrastructure and operations you can rely on The McAfee SaaS data-center strategy includes maintaining multiple data centers across four continents. McAfee SaaS is ISO certified and the service provides full redundancy with active-active redundant hardware at all network

4 Optimized Protection Bring it all together to simplify management while getting greater visibility with a single pane of glass. McAfee SaaS Protection is available as part of McAfee Protection, which enables customers to choose their deployment form factor, including an integrated hybrid approach via a single management console. Combine McAfee SaaS , web, and endpoint security into a one-stop console. layers: Firewall, router, and load-balancer switch. Within each data center, we also provide automated network and application monitoring, which provides visibility into alerts and alarms and security experts overseeing the systems 24/7. Fierce Security The power of billions McAfee Global Threat Intelligence (McAfee GTI ) The Security Connected framework from McAfee correlates cross-vector intelligence from , web, network, and endpoint threat data. McAfee GTI applies Big-Data analytics on the collective intelligence, so that McAfee security always has the latest, up-to-the-moment information for optimized security. Protecting the click McAfee ClickProtect helps you eliminate the threats from embedded URLs within an message. It checks for changes in URL intent occurring between the time the message is scanned (scan time), regardless of how harmless it may have appeared, and when the URL is clicked by a user (click time). This re-inspection may include both a URL reputation check and proactive emulation leveraging the same industry-leading Gateway Anti- Malware technology in McAfee Web Protection. Administrators can configure both scan-time and click-time policies, and enable URL emulation to protect users from the click. SafePreview offers a sneak peak, leveraging user intelligence as an additional layer of security. Superior spam protection The patented Stacked Classification Framework spam detection system applies multiple layers of analysis in a proxy-based filtering approach to determine the probability that an is spam, regardless of language. Because each filtering technology has unique strengths designed to identify specific threats, including image-based spam, the combination creates one of the most accurate and comprehensive filtering processes in the industry. McAfee GTI message reputation inspects each message to detect known and emerging messagebased threats such as spam, even if these messages come from a reputable source. Reputation scrutiny enables McAfee SaaS Protection & Continuity to block or quarantine more efficiently and accurately. SPF and DKIM validation provide yet another layer of security. SPF validates incoming messages to ensure that they are indeed originating from sender-verified registered domains, and DKIM validates that the messages have been electronically signed by the sender and are legitimate. Use gray/bulk mail filtering to further reduce unwanted Unwanted mail could be legitimate bulk mail that was once solicited by the user, but is now no longer wanted and may represent a nuisance to recipients. By using graymail filters, administrators can set graymail policies and even delegate to users to enable this capability to keep mailboxes clear of graymail. Block viruses and worms bidirectionally with triple-layer scanning In addition to blocking inbound attacks, outbound s are filtered to protect your clients against malware, scanning both the message body and attachments. Included is our proprietary WormTraq detection technology and our industry-leading, signature-based antivirus engine powered by McAfee GTI. Third-party antivirus technology is also included to help customers meet compliance requirements. Complete scalability to protect from massivescale attacks Our complete solution shields your network and critical messaging gateways from attack, instantly blocking denial-of-service and other SMTP-based attacks: Directory harvest attacks, bombs, and channel flooding. Identify Sensitive Data for Compliance and to Prevent Data Loss Prebuilt rules, advanced content scanning, and document fingerprinting Advanced data-loss prevention and compliance capabilities give you instant access to prebuilt content rules for PCI-DSS, healthcare, financial data, regional privacy regulations, and more to enable you to quickly create compliance policies. Scan and secure more than 300 document types to protect against outbound data loss.

5 Advanced document fingerprinting Verified technology enables you to train your security to determine which documents are policy controlled. By creating and storing digital fingerprints of selected documents, the solution learns what kind of content needs to be controlled by policy. Policies can be granularly enforced for whole or partial content matches in and attachments. Never lose another When outages occur, business-critical inbound s are not rejected. All incoming s are spooled during an outage and intelligently delivered when your servers come back online. Always-on continuity no matter what Whether the network is inaccessible due to natural disasters, power outages, or regular maintenance, McAfee SaaS Protection & Continuity keeps employees, customers, partners, and suppliers connected 24/7. The secure, easy-to-use web interface allows users to send and receive messages with continued protection, search for and retrieve stored messages, and manage quarantines and message stores just as they would in a live environment. And the service retains all messages sent or received during the outage, intelligently synchronizing an accurate record of all outageperiod message activity when your own servers come back online. Encryption Protects from Prying Eyes Built-in transport layer security (TLS) encryption for secure organization-to-organization communication For organizations that need a higher level of security for inbound and outbound , our TLS protocol accepts and filters encrypted inbound and outbound messages and delivers them across a secure tunnel. Easy-to-use push/pull encryption When your business requires secure communications with your customers, McAfee SaaS Encryption empowers you to take ownership of encrypting sensitive information, even if your recipient doesn t have an encryption solution. Our easy-to-use, mobileenabled push/pull encryption technology ensures that your data is protected from prying eyes. Branding for a consistent online experience Encryption notification s may be branded to match the look and feel of your organization to provide your customers with a consistent online experience. Better Security for Microsoft Office 365 and Google Apps It s easy to layer stronger security for Microsoft Office 365 and Google Apps for Business-hosted mailbox customers. With a simple checkbox in the management console and redirection of MX records, customers can turn on unparalleled inbound threat protection, including ClickProtect, and the ability to inspect outbound for sensitive content. This eliminates the need to manually input and maintain hundreds of IP addresses into your security service to inspect originating from Google or Microsoft. Intelligent Routing for a Strong Brand As your business grows, it becomes even more vital to maintain a strong corporate brand. McAfee SaaS intelligent routing empowers you to easily add new local domains to your existing public-facing domains, seamlessly routing s to the appropriate mail systems and recipients. It cuts bandwidth costs by eliminating the need to reroute mail from a primary location to users at satellite offices. Archive Unlimited Data, No Hardware Required Today s volumes are soaring. At the same time, government and industry regulations increasingly require you to produce documentation for all kinds of decisions and processes. Facing these pressures, companies need fast, simple, and affordable archiving and retrieval. The McAfee SaaS Archiving service reduces storage and management costs, securing your company s inbound, outbound, internal, and even historic as it s created, while shrinking Microsoft Exchange databases to a manageable size. It also satisfies compliance and e-discovery requirements, protecting your business and employees. Its powerful search features help authorized users find and retrieve messages simply in seconds, without IT assistance. A cloud-based service, McAfee SaaS Archiving requires no hardware or software to purchase, and no need to manage backup media and offsite storage. Choose a retention period of up to 10 years. McAfee SaaS Archiving is offered as a standalone service or with other McAfee Protection solutions.

6 McAfee Products McAfee SaaS Inbound Filtering McAfee SaaS Protection and Continuity McAfee SaaS Protection and Continuity with Encryption Infrastructure and Operational Services 24/7 support Capacity and performance management Automatic maintenance and upgrades ISO certified data centers Monthly, annual, multiyear subscription Administration and End-User Support Time for a Change Get enterprise-grade protection for less time, money, and stress. The savings don t stop with your purchase find out how you can minimize maintenance with our easy-to-use and award-winning service and free your overextended IT staff to focus on more strategic projects. Learn more at security, and sign up for a free trial at Message audit Support for more than 15 languages Security Connected from McAfee Google Apps and Microsoft Office 365 compatible Security McAfee GTI ClickProtect Inbound spam, phishing protection, and malware protection Gray/bulk mail filtering TLS encryption Enforced SPF and DKIM authentication DKIM signing Outbound policy enforcement and malware protection spooling Continuous access Push/pull encryption Encryption branding Attachment content scanning, more than 300 file types More than 114 pre-built compliance and data loss templates Document fingerprinting Optional archiving Intelligent routing 1 SANS Institute via Network World, March Mission College Boulevard Santa Clara, CA McAfee, the McAfee logo, McAfee Global Threat Intelligence, and McAfee GTI are registered trademarks or trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other marks and brands may be claimed as the property of others. The product plans, specifications, and descriptions herein are provided for information only and subject to change without notice, and are provided without warranty of any kind, express or implied. Copyright 2013 McAfee, Inc ds_saas- -security_0613_fnl_ASD