1 for Exchange/SMTP for Exchange/SMTP for Exchange for Exchange/SMTP Network Security Scanner for ISA Server
2 Overview of GFI products Anti-spam for Exchange, anti-phishing and management GFI MailEssentials for Exchange/SMTP offers spam and phishing protection and management at server level. GFI MailEssentials offers a fast set-up and a high spam detection rate using Bayesian analysis and other methods - no configuration required, very low false positives through its automatic whitelist, and the ability to automatically adapt to your environment to constantly tune and improve spam detection. GFI MailEssentials also adds management tools to your mail server: disclaimers, archiving and monitoring, Internet mail reporting, list server, server-based auto replies and POP3 downloading. anti-virus, content policies, exploit detection and anti-trojan GFI MailSecurity for Exchange/SMTP is an content policies, exploit detection, threats analysis and anti-virus solution that removes all types of -borne threats before they can affect your users. GFI MailSecurity's key features include multiple virus engines, to guarantee higher detection rate and faster response to new viruses; content and attachment checking, to quarantine dangerous attachments and content; an exploit shield, to protect against present and future viruses based on exploits (e.g., Nimda, Bugbear); an HTML Sanitizer, to disable HTML scripts; a Trojan & Executable Scanner, to detect malicious executables; and more. archiving of internal and external GFI MailArchiver for Exchange provides easy-to-use corporate archiving, enabling you to archive all internal and external into one or multiple databases, heavily reducing reliance on PST files. This allows you to provide users with easy, centralized access to past s via a web-based search interface and the ability to quickly restore s through a OneClick Restore process. GFI MailArchiver also aids you to meet the requirements of your retention policy and helps you to fulfill regulatory storage requirements such as the Sarbanes-Oxley Act. GFI MailArchiver for Exchange leverages the journaling feature of Exchange Server 2000/2003 and therefore provides unparalleled scalability and reliability at a competitive cost. Network fax server for Exchange/SMTP GFI FAXmaker for Exchange/SMTP is the leading network fax server. It integrates with Exchange Server, Lotus Notes and popular SMTP servers, allowing users to send and receive faxes and SMS/text messages directly from their client. By leveraging your infrastructure and Active Directory, GFI FAXmaker achieves unparalleled scalability, reliability and hassle-free administration. GFI FAXmaker has won the Windows IT Pro Magazine (formerly Windows &.NET) Readers' Choice Award for 3 years running. Network security scanner, port scanner and patch management GFI LANguard Network Security Scanner (N.S.S.) checks your network for possible security vulnerabilities by scanning your entire network for missing security patches, service packs, open shares, open ports, unused user accounts and more. With this information (displayed in customizable reports), you can easily lock down your network against hackers. GFI LANguard N.S.S. can also remotely deploy missing patches and service packs in applications and OS. GFI LANguard N.S.S. is the leading Windows security scanner and very competitively priced.
3 Network-wide event log management GFI EventsManager is an easy to use events management solution that monitors, archives, processes and reports on events collected from various log types including Windows events, W3C and Syslog. It boasts the most advanced event processing and filtering rules in the industry and includes vast reporting capabilities which will decipher the complex activity logs from servers, routers, firewalls, active directory and more, presenting you with exactly the right information you need to effectively monitor and manage your entire network. Network-wide control of ipods, USB sticks & other endpoint devices GFI EndPointSecurity offers you network-wide control of data flow via portable storage devices, allowing you to prevent users from taking confidential data or introducing viruses and Trojans to your network. GFI EndPointSecurity allows you to actively manage user access to media players (including ipod and Creative Zen), USB sticks, CompactFlash, memory cards, PDAs, Blackberries, mobile phones, CDs, floppies and other endpoint devices. Network monitoring GFI Network Server Monitor automatically monitors your network and servers for failures and allows administrators to fix and identify issues before users report them. Alerts can be sent by , pager or SMS. Actions, such as rebooting a machine, restarting a service or running a script, can be done automatically. Real-time HTTP/FTP monitoring, anti-virus & access control GFI WebMonitor is a utility for Microsoft ISA Server that allows you to monitor the sites users are browsing and what files they are downloading in REAL TIME. In addition it can block access to adult sites as well as performing anti-virus scanning on all downloads. GFI WebMonitor is the perfect solution to transparently exercise a degree of access control over users browsing habits and ensure legal compliance in a manner that will not alienate your network users!
4 for Exchange/SMTP Anti-spam for Exchange, anti-phishing and management With fraudulent, inappropriate and offensive s being delivered in vast quantities to businesses every day, anti-spam software is a vital component of your network security strategy. Spam wastes network users time and network resources, and can also be dangerous. GFI MailEssentials offers anti-spam for Exchange server and other servers and eliminates the need to install and update anti-spam software on each desktop. GFI MailEssentials offers a fast set-up and a high spam detection rate using Bayesian filtering and other methods no configuration required, very low false positives through its automatic whitelist, and the ability to automatically adapt to your environment to constantly tune and improve spam detection. GFI MailEssentials will eliminate over 98% of the spam from your network! GFI MailEssentials also detects and blocks phishing s through a system of Uniform Resource Identifier (URI) and keyword checks. In addition to anti-spam filtering and anti-phishing protection, GFI MailEssentials also adds management tools to your mail server: disclaimers, mail monitoring, Internet mail reporting, list server, server-based auto replies and POP3 downloading. Server-based anti-spam and anti-phishing GFI MailEssentials is server-based and installs on the mail server or at the Gateway, eliminating the deployment and administration hassle of desktop-based anti-spam and anti-phishing products. Desktop-based software involves training your users to create anti-spam rule sets, and subsequently users have to spend time updating these rules. Besides, this system does not prevent your server message stores from filling up with spam. Benefits Why choose GFI MailEssentials for anti-spam? Highest spam detection rate (98%) because of its Bayesian filtering technology Lowest false positives through its patent pending auto whitelist feature Server-based install, no client software required Allows users to review marked as spam from junk mail folder #1 server anti-spam solution at unbeatable pricing over 60,000 installations! Bayesian filtering technology Bayesian filtering is widely acknowledged by leading experts and publications as the best way to catch spam. A Bayesian filter uses a mathematical approach based on known spam and ham (valid ). This gives it a tremendous advantage over other spam solutions that just check for keywords or rely on downloading signatures of known spam. GFI s Bayesian filter uses an advanced mathematical formula and a dataset which is custom-created for your installation: The spam data is continuously updated by GFI and is automatically downloaded by GFI MailEssentials, whereas the ham data is automatically collected from your own outbound mail. This means that the Bayesian filter is constantly learning new spam tricks, and spammers cannot circumvent the dataset used. This results in a 98+% spam detection rate, after the required two-week learning period. In short, Bayesian filtering has the following advantages: Looks at the whole spam message, not just keywords or known spam signatures Learns from your outbound (ham) and therefore greatly reduces false positives Adapts itself over time by learning about new spam and new valid Dataset is unique to your company, making it impossible to bypass Multilingual and international. Downloads updates to spam profile database GFI MailEssentials can download updates to the Bayesian spam profile database from the GFI site, ensuring that it recognizes the latest spam and spamming techniques. GFI maintains the spam profile database by working with a number of spam collection organizations that continually supply spam samples.
5 Protect your users against the menace of phishing s GFI MailEssentials anti-phishing module detects and blocks threats posed by phishing s by comparing the content of the scam with a constantly updated database of blacklisted mails, thereby ensuring all the latest phishing s are captured. As extra protection, it also looks for typical phishing keywords in every sent to your organization. GFI MailEssentials configuration Users can review spam Sort spam to users' junk mail folders GFI MailEssentials gives you the flexibility to choose what to do with spam. You can delete it, move it to a folder, forward the spam mail to a public address or folder, or send it to individual customizable folders (for example, a junk mail folder) in the end-users inboxes. This allows users to easily review mail that has been flagged as spam. List server for newsletter lists and discussion lists A list server is the best method for distributing company newsletters, since it automates the process of allowing users to subscribe and unsubscribe (required by anti-spam regulations). However, until now, list servers have been expensive and difficult to administer and they did not integrate with Exchange Server. GFI MailEssentials integrates with Exchange and can use Microsoft Access or Microsoft SQL Server as the backend. Both newsletter lists and discussion lists are supported. Easy tuning of the Bayesian engine via public folders Administrators can easily tune the Bayesian engine by dragging and dropping spam or ham to the appropriate public folder. GFI MailEssentials learns from the spam and ham that it picks up from these folders and further improves its spam detection rate. Administrators can control access to this feature through the use of Public Folder security. Allow users to whitelist or blacklist via public folders GFI MailEssentials allows users to whitelist or blacklist senders simply by dragging and dropping the appropriate mail to a public folder. This gives users more control and reduces administration. Administrators can control access to this feature through the use of Public Folder security. Newsletter list options header analysis & keyword checking GFI MailEssentials intelligently analyzes the header and identifies spam based on message field information. It detects forged headers, encoded IPs, spam mutation, spam sent from invalid domains, and more. It also enables you to configure keywords to check for spam using keyword checking. 3rd party DNS blacklists (DNSBL) checking GFI MailEssentials supports DNS blacklists (real time black hole lists), which are databases of known spammers. If the sending mail server is on one of those lists, it marks the as spam. GFI MailEssentials supports popular third party blacklists such as ORDB, SpamHaus, Spamcop and also enables administrators to configure custom RBL servers. Support for multiple 3rd party SURBL servers GFI MailEssentials checks content against SURBL servers. Administrators can configure multiple SURBL servers, add their own and also define the priority of which server should be checked first. More information on SURBL can be found at Search archive from anywhere via the web-based interface Create advanced reports on spam filtering Automatic whitelist management reduces false positives Whitelists enable you to ensure that from particular senders or domains are never flagged as spam, permitting more stringent anti-spam rules. GFI MailEssentials includes a patent-pending automatic whitelist management tool, which automatically adds outgoing mail recipients to your whitelist. This greatly reduces false positives, without any need for additional administration. Whitelists can also be built based on domain names, addresses and keywords. Instant view of s from new senders The New Senders feature provides users with an instant view of s sent from people they never had previous contact with, thereby helping users to better organize s in their client. If an is not found to be spam by the GFI MailEssentials anti-spam modules and is also not on the whitelist, then the New Senders module has the ability to move the to a user's subfolder, for example, Inbox\NewSenders.
6 Eliminates directory harvesting Spammers often try to guess recipient addresses by generating multiple random addresses at a domain; they then send their spam mail to all those addresses. GFI MailEssentials checks the validity of ALL the addresses included in the mail sent, either via a query to Active Directory or through support for LDAP, and if they are not all valid, marks the mail as spam. Reports on spam filtering and usage The database-driven reporting engine allows you to create advanced reports on your inbound and outbound . You can report on the amount of spam filtered and on rules which caught most spam. You can also generate reports on user, domain and mail server usage. Support for SPF - the Sender Policy Framework As most of today s spammers spoof addresses, it is important to be able to check whether an is genuine or if it has been sent from a forged sending address. This can be done via the Sender Policy Framework (SPF), which allows users to test whether a particular originates from its claimed source. GFI MailEssentials is one of the first commercial anti-spam solutions to support this framework. Its SPF module automatically checks whether the mail from a particular company was actually sent by its registered mail servers. For more on SPF, visit Set priorities for each anti-spam module You can configure which method of capturing spam is to be given priority, and create your own hierarchical list. For example, the administrator can select that the whitelisting anti-spam feature must be applied first to all incoming mail, then Bayesian scanning, and so on. monitoring The monitoring feature enables you to keep a central store of the communications of a particular person or department. By configuring the to be copied to an address, all can be stored in an Exchange or Outlook store, making searching for or content easy. archiving to a SQL database GFI MailEssentials can archive all inbound and outbound mail to a Microsoft SQL Server database. You can search for a particular or an entire thread via the included web interface. Mail archiving is essential for back-up and search reasons. For a complete archiving solution, please check out GFI MailArchiver for Exchange. Seamless integration with Exchange Server 2000/2003 & 5.5 GFI MailEssentials integrates seamlessly with Microsoft Exchange 2000/2003: It installs on the Exchange SMTP service and does not require gateway configuration. Via the SMTP protocol, it also works with Exchange 5.5, Lotus Notes and other popular SMTP/POP3 servers. Checkmark certified GFI MailEssentials holds Checkmark certification from West Coast Labs and more awards. Content checking, anti-virus & anti-trojan Get anti-virus, content checking and anti-trojan protection for your mail server with the GFI MailEssentials & GFI MailSecurity Suite. GFI MailSecurity for Exchange/SMTP is an content checking, exploit detection, threats analysis and anti-virus solution that removes all types of -borne threats before they can affect your users. Company-wide disclaimer/footer/header text GFI MailEssentials enables you to add disclaimers to the top or bottom of an . Text and HTML formats are supported. You can include fields/variables to personalize the disclaimer. You can also create multiple disclaimers and associate them with a user, group or domain. System requirements Awards Windows 2000/ Pro, Server or Advanced Server or Windows XP Professional. IIS5 SMTP service installed and running as an SMTP relay to your mail server. Microsoft Exchange server 2000, 2003, 4, 5 or 5.5, Lotus Notes 4.5 and up, or an SMTP/POP3 mail server. For the list server feature, Microsoft Message Queueing Services is required. Download your evaluation version from
7 for Exchange/SMTP anti-virus, content policies, exploit detection and anti-trojan The need to monitor messages for dangerous, offensive or confidential content has never been more evident. The most deadly viruses, able to cripple your server and corporate network in minutes, are being distributed worldwide via in a matter of hours. Products that perform single vendor anti-virus scanning do not provide sufficient protection. Worse still, has become the means for installing backdoors (trojans) and other harmful programs to help potential intruders break into your network. Products restricted to a single anti-virus engine will not protect against exploits and attacks of this kind. Your only defense is to install comprehensive granular user-based content policy and anti-virus software to safeguard your mail server and network. GFI MailSecurity acts as an firewall and provides mail security by protecting you from viruses, exploits and threats, as well as attacks targeted at your organization. GFI MailSecurity may be deployed in Gateway or VS API mode. The gateway version should be deployed at the perimeter of the network as an relay server and scans inbound and outbound mail. The VS API version integrates seamlessly with Exchange Server 2000/2003 and scans the Exchange information stores. Virus checking with multiple virus scanning engines GFI MailSecurity uses multiple virus scanners to scan inbound . Using multiple scanners drastically reduces the average time to obtain virus signatures which combat the latest threats, and therefore greatly reduces the chances of an infection. The reason for this is that a single anti-virus company can never ALWAYS be the quickest to respond. For each outbreak, virus companies have varying response times to a virus, depending on where the virus was discovered, etc. By using multiple virus engines, you have a much better chance of having at least one of your virus engines up-to-date and able to protect against the latest virus. In addition, since each engine has its own heuristics and methods, one virus engine is likely to be better at detecting a particular virus and its variants, while another virus engine would be stronger at detecting a different virus. Overall, more virus engines means better protection. Note: Independent research showed that brand names are no guarantee for faster response times; in fact some of the big brand names were found to be among the slowest. Benefits Why choose GFI MailSecurity to protect against viruses and malware? Multiple virus engines guarantee higher detection rate and faster response Unique Trojan & Executable Scanner detects malicious executables without need for virus updates MyDoom was detected immediately! Exploit Engine and HTML Sanitizer disable exploits & HTML scripts Unbeatable price: USD 575 (25), USD 1900 (100) and USD 8630 (1000) mailboxes. Scan against trojans and executables The GFI MailSecurity Trojan & Executable Scanner detects unknown malicious executables (for example, trojans) by analyzing what an executable does. Trojans are dangerous as they can enter a victim s computer undetected, granting an attacker unrestricted access to the data stored on that computer. Anti-virus software will NOT catch unknown trojans because it is signature-based. The Trojan & Executable Scanner takes a different approach by using built-in intelligence to rate an executable's risk level. It does this by disassembling the executable, detecting in real time what it might do, and comparing its actions to a database of malicious actions. The scanner then quarantines any executables that perform suspicious activities, such as accessing a modem, making network connections or accessing the address book. Norman Virus Control & BitDefender virus engines are included GFI MailSecurity is bundled with Norman Virus Control and BitDefender. Norman Virus Control is an industrial strength virus engine that has received the 100% Virus Bulletin award 32 times running. It also has ICSA and Checkmark certification. BitDefender is a very fast and flexible virus engine that excels in the number of formats it can recognize and scan. BitDefender is ICSA certified and has won the 100% Virus Bulletin award and the European Information Technologies Prize GFI MailSecurity automatically checks and updates the Norman Virus Control and BitDefender definition files as they become available. The GFI MailSecurity price includes updates for one year.
8 GFI MailSecurity GFI MailSecurity configuration Kaspersky, McAfee and AVG virus engines (optional) To achieve even greater security, users can add the Kaspersky, McAfee and/or AVG anti-virus engines as a third, fourth or fifth anti-virus engine or as a replacement to one of the other engines. Kaspersky Anti-Virus is ICSA-certified and is well known for the unsurpassed depth of its object scanning, the high rate at which new virus signatures are released and its unique heuristic technology that effectively neutralizes unknown viruses. The McAfee virus engine is particularly strong at detecting non-virus attacks such as rogue ActiveX controls. With 15 years of experience in the anti-virus industry, GRISOFT employs some of world's leading experts in anti-virus software, specifically in the areas of virus analysis and detection. Automatic removal of HTML scripts The advent of HTML has made it possible for hackers/virus writers to trigger commands by embedding them in HTML . GFI MailSecurity checks for script code in the message body and disables these commands before sending the "cleaned" HTML to the recipient. GFI MailSecurity is the only product to protect you from potentially malicious HTML using a GFI patented process, safeguarding you from HTML viruses and attacks launched via HTML . exploit detection engine GFI's Exploit Engine builds on GFI's leading research on exploits, and safeguards you from future viruses and attacks that use known application or operating system exploits. For example, GFI MailSecurity would have protected you against the Nimda and Klez viruses when they first emerged without needing any updates, because these viruses use known exploits. GFI SecurityLabs regularly finds new exploits, and these are automatically downloaded by GFI MailSecurity. GFI MailSecurity is the only security product to detect exploits. Configure attachment checking Spyware detection GFI MailSecurity's Trojan & Executable Scanner can recognize malicious files including spyware and adware. GFI MailSecurity can also detect spyware transmitted by via the Kaspersky virus engine (optional) which incorporates a dedicated spyware and adware definition file that has an extensive database of known spyware, trojans and adware. Attachment checking GFI MailSecurity's attachment checking rules enable administrators to quarantine attachments based on user and file type. For example, all executable attachments can be quarantined for administrator review before they are distributed to the user. GFI MailSecurity can also scan for information leaks, for example, an employee ing a database. You can also choose to delete attachments like.mp3 or.mpg files. GFI MailSecurity supports multiple virus engines GFI MailSecurity ReportPack GFI MailSecurity ReportPack add-on The MailSecurity ReportPack provides administrators with the easy-to-view information they need to fully understand their security patterns. User interface
9 Multiply the value of GFI MailSecurity with powerful reporting The GFI MailSecurity 10 ReportPack is a full-fledged reporting companion to GFI MailSecurity 10. From trend reports for management (ROI) to daily drill-down reports for technical staff; the GFI MailSecurity ReportPack provides you with the easy-to-view information you need to fully understand your security patterns. Full automation and custom scheduling allow you true install-and-forget functionality! The GFI MailSecurity ReportPack offers several default and customizable reports that can be prepared on an hourly, daily, weekly or monthly basis including: Viruses blocked Inbound traffic Outbound traffic Total inbound and outbound traffic Processed s Blocked s And more! Granular user-based content policies/filtering Using GFI MailSecurity's powerful content policies rules engine, you can configure rule sets based on user and keywords that allow you to quarantine potentially dangerous content for administrator approval. In this way, GFI MailSecurity can also scan for offensive content. Custom quarantine filters GFI MailSecurity enables you to configure a series of search folders (similar to MS Outlook Search Folders) within the Quarantine Store, permitting you to manage quarantined s better and faster. For example, you can set up a folder for s that were quarantined by virus checking and another for s quarantined by attachment checking for a particular user, allowing you to prioritize which folders you check first: It may be more important to examine the attachment checking folder first as it is more likely to contain s that need to be approved and forwarded to users. Enable easy quarantine folder monitoring through RSS feeds GFI MailSecurity takes advantage of the power of RSS (Really Simple Syndication) feeds to simplify your work as an administrator in keeping an eye on your quarantine store. Through RSS feeds, you will be informed of all new quarantined objects, avoiding the need to log onto the quarantine store to check for new updates manually. Web-based configuration enables remote management from any location The product s web-based configuration allows you to configure and monitor the product and manage quarantined s remotely from any computer that is equipped with a browser. This means that you can monitor and manage GFI MailSecurity from anywhere in the world. Approve/reject quarantined using the moderator client, client or web-based moderator GFI MailSecurity provides several options for moderating quarantined . The moderator client gives you a familiar Windows interface for approving/rejecting . The web-based moderator allows you to approve/reject s from anywhere on your network. Alternatively, GFI MailSecurity can also forward quarantined s to an address, enabling you to use a public folder to distribute the quarantined items to multiple administrators. System requirements Awards Windows 2000 Server/Advanced Server (Service Pack 1 or higher) or Windows 2003 Server/Advanced Server or Windows XP. Note: Since Windows XP has some speed limitations, installing GFI MailSecurity on a machine running Windows XP could affect its performance. Microsoft Exchange server 2000 (SP1), 2003, 4, 5 or 5.5, Lotus Notes 4.5 and up, or any SMTP/POP3 mail server. When using Small Business Server, ensure you have installed SP 2 for Exchange Server 2000 and SP1 for Exchange Server Microsoft.NET Framework 1.1/2.0. MSMQ Microsoft Messaging Queuing Service. Internet Information Services (IIS) SMTP service & World Wide Web service. Microsoft Data Access Components (MDAC) 2.8. Download your evaluation version from
10 for Exchange archiving of internal and external GFI MailArchiver for Exchange provides easy-to-use corporate archiving, enabling you to centrally archive all internal and external . GFI MailArchiver allows you to archive past, present and future s into one or multiple databases, providing both the network administrator and employees with a number of benefits. Network administrators can now avoid the pains of PST file management and: Eliminate corrupted PST files and the lengthy troublesome process of fixing them Overcome the risk of PST loss in the case of hardware failure on the employees workstations Free yourself from complex backup plans to copy PST files from each employee s workstation. GFI MailArchiver allows employees to perform the following actions without needing the assistance of a network administrator: Use their browser to easily locate and access all their s from anywhere in the world Quickly restore s back to their mailbox through a OneClick Restore process, avoiding the cumbersome process of retrieving an from a backup tape or disk, saving the network administrator s time. In addition, GFI MailArchiver also aids in fulfilling regulatory storage requirements (such as the Sarbanes-Oxley Act). Features for the administrator Integration with Exchange and other servers GFI MailArchiver leverages the journaling feature of Exchange Server, providing unparalleled scalability and reliability. Other archiving solutions actually replace the with a link to their database this can be a point of failure and can bring down your entire system. GFI MailArchiver works in parallel and does not touch the way Exchange works. GFI MailArchiver can be used with Exchange as well as other servers with the capability of polling s from a mail server which supports IMAP and Active Directory. Benefits Why choose GFI MailArchiver? Reduce reliance on cumbersome PST files prone to corruption, loss through hardware failure and requiring complex backup plans Provide end-users with a single, web-based location in which to search and restore past s through a OneClick Restore Significantly reduce storage requirements for by up to 80% Increase Exchange performance and ease backup and restoration Helps comply with Sarbanes-Oxley, SEC and other regulations. Automatically archive corporate into one storage area Your mail server is not the ideal place to store all organizational Over time this will cause a severe decline in performance. Moving old s into a database will keep your mail server performance high and stores compact. You may archive your in: A SQL database: Because is stored in a standard SQL database, it is easy to backup and restore; no special Exchange backup tools are required. This setup is strongly recommended for high volume environments. Directly to an NTFS hard drive You may store in a database that is located on an NTFS-formatted hard drive, saving you the license costs of Microsoft SQL Server! This setup is suitable for low volume environments and for small enterprises intending to save on license costs of Microsoft SQL Server. Multiple database support and automatic database management support It is possible to archive s in multiple databases this overrides the problem of having one large database that becomes slow and requires more maintenance. GFI MailArchiver allows you to automatically archive s to a new database after a specified time, for example, every month or quarter.