McAfee SaaS . Blocking Spam and Malware Is Just Half the Battle

Transcription

1 Security Complete security and access without the operational costs Protecting the Click ClickProtect, a feature of McAfee Protection, helps you eliminate the threats from embedded URLs within an message, and is a core feature of the solution. Easy-to-Adopt Modules: Protection & Continuity Encryption Archiving In a difficult economy, many companies delay technology investments, including upgrades to security infrastructure and additional IT staff, or look to cut costs by moving the inboxes to the cloud. According to a SANS Institute study, 95% of all attacks on enterprise networks are the result of successful spear-phishing. 1 The threats they propagate are more sophisticated than even before and more dangerous. Blocking Spam and Malware Is Just Half the Battle Everyone who depends on to do business needs to put into place these security measures: Block inbound noise and threats before they can impact your network, employees, or business operations. Accurately identify and block outbound s that contain proprietary, inappropriate, or actionable content, whether in the message body or in attachments, and act on them appropriately. Ensure always-on access to communications. Maintain and document compliance to company, industry, and government regulations. Manage the complete environment for up-to-the-minute security, continuity, and compliance. Deferred Management Is Not an Option Staying on top of all these challenges can be particularly time consuming and costly. Fortunately, there s a much easier way to manage security, provide reliable storage and retrieval, and ensure continuous access at a lower cost and with minimal IT effort. Low-Cost, Easy-to-Manage Protection A snap to deploy, McAfee Security-as-a-Service (SaaS) security solutions are always on, always up-to-date, and require no additional hardware or software investment nor any extra time and resources to maintain them. Because these services stop spam and -based threats before they infiltrate your network, the load on your servers is greatly reduced, saving you valuable bandwidth and server storage. World-class 24/7 McAfee Customer Support ensures that help is never more than a phone call away.

2 Optimized Protection Bring it all together to simplify management while getting greater visibility with a single pane of glass. Protection is available as part of McAfee Protection, which enables customers to choose their deployment form factor, including an integrated hybrid approach via a single management console. Combine McAfee SaaS , web, and endpoint security into a one-stop console. Simplified web-based administration and reporting With a single, intuitive web-based management console, policy updates are simple to manage across all your domains and locations. Administrators can configure and enforce policies for spam, malware, and contentfiltering policies, including attachment content rules. Microsoft Active Directory integration enables easy, ongoing maintenance. Policies may be applied globally to user groups or individuals for ultimate flexibility. Reports, logs, message audits, and quarantines provide the necessary visibility. McAfee SaaS solutions also free up valuable IT resources and lower your total cost of ownership. is today s engine of productivity. Every day, with thousands of messages passing through a typical company s servers, managing to ensure security and availability has become a huge task. But there s a better way. McAfee SaaS security solutions provide you with total control over security and availability while freeing IT resources to focus on strategic work that advances corporate initiatives. Reliable and robust infrastructure and operations The McAfee SaaS data center strategy includes maintaining multiple data centers across four continents. McAfee SaaS is ISO certified and the service provides full redundancy with active-active redundant hardware at all network layers: firewall, router, and load-balancer switch. Within each data center, we also provide automated network and application monitoring, which provides visibility into alerts and alarms. Security experts oversee the systems 24/7. Fierce Security The power of billions McAfee Global Threat Intelligence (McAfee GTI) The Security Connected framework correlates cross-vector intelligence from , web, network, and endpoint threat data. McAfee GTI applies Big Data analytics on the collective intelligence, so that McAfee security always has the latest, up-to-the-moment information for optimized security. Protecting the click ClickProtect helps you eliminate the threats from embedded URLs within an message. It checks for changes in URL intent occurring between the time the message is scanned (scan time), regardless of how harmless it may have appeared, and when the URL is clicked by a user (click time). This re-inspection may include both a URL reputation check and proactive emulation leveraging the same industry-leading McAfee Gateway Anti-Malware Engine in McAfee Web Protection. Administrators can configure both scan-time and click-time policies, and enable URL emulation to protect users from the click. SafePreview offers a sneak peak, leveraging user intelligence as an additional layer of security. Superior spam protection The patented Stacked Classification Framework spam detection system applies multiple layers of analysis in a proxy-based filtering approach to determine the probability that an is spam, regardless of language. Because each filtering technology has unique strengths designed to identify specific threats, including image-based spam, the combination creates one of the most accurate and comprehensive filtering processes in the industry. Security 2

3 McAfee GTI message reputation inspects each message to detect known and emerging message-based threats such as spam, even if these messages come from a reputable source. Reputation scrutiny enables Protection & Continuity to block or quarantine more efficiently and accurately. SPF and DKIM validation provide yet another layer of security. SPF validates incoming messages to ensure that they are indeed originating from sender-verified registered domains, and DKIM validates that the messages have been electronically signed by the sender and are legitimate. Gray/bulk mail filtering to further reduce unwanted Unwanted mail could be legitimate bulk mail that was once solicited by the user, but is now no longer wanted and may represent a nuisance to recipients. By using graymail filters, administrators can set graymail policies and even delegate to users to enable this capability to keep mailboxes clear of graymail. Blocking of viruses and worms bidirectionally with triple-layer scanning In addition to blocking inbound attacks, outbound s are filtered to protect your clients against malware, scanning both the message body and attachments. Included is our proprietary WormTraq detection technology and our industry-leading, signature-based antivirus engine powered by McAfee GTI. Thirdparty antivirus technology is also included to help customers meet compliance requirements. Complete scalability to protect from massivescale attacks Our complete solution shields your network and critical messaging gateways from attack, instantly blocking denial-of-service and other SMTP-based attacks: Directory harvest attacks, bombs, and channel flooding. Identification of Sensitive Data for Compliance and to Prevent Data Loss Prebuilt rules, advanced content scanning, and document fingerprinting Advanced data loss prevention and compliance capabilities give you instant access to prebuilt content rules for PCI-DSS, healthcare, financial data, regional privacy regulations, and more to enable you to quickly create compliance policies. Scan and secure more than 300 document types to protect against outbound data loss. Advanced document fingerprinting Verified technology enables you to train your security to determine which documents are policy controlled. By creating and storing digital fingerprints of selected documents, the solution learns what kind of content needs to be controlled by policy. Policies can be granularly enforced for whole or partial content matches in and attachments. No more lost When outages occur, business-critical inbound s are not rejected. All incoming s are spooled during an outage and intelligently delivered when your servers come back online. Always-on continuity no matter what Whether the network is inaccessible due to natural disasters, power outages, or regular maintenance, Protection & Continuity keeps employees, customers, partners, and suppliers connected 24/7. The secure, easy-to-use web interface allows users to send and receive messages with continued protection, search for and retrieve stored messages, and manage quarantines and message stores just as they would in a live environment. And the service retains all messages sent or received during the outage, intelligently synchronizing an accurate record of all outage-period message activity when your own servers come back online. Security 3

4 Encryption Protection Built-in transport layer security (TLS) encryption for secure organization-toorganization communication For organizations that need a higher level of security for inbound and outbound , our TLS protocol accepts and filters encrypted inbound and outbound messages and delivers them across a secure tunnel. Easy-to-use push/pull encryption When your business requires secure communications with your customers, McAfee SaaS Encryption empowers you to take ownership of encrypting sensitive information, even if your recipient doesn t have an encryption solution. Our easy-to-use, mobile-enabled push/ pull encryption technology ensures that your data is protected from prying eyes. Branding for a consistent online experience Encryption notification s may be branded to match the look and feel of your organization to provide your customers with a consistent online experience. Better Security for Microsoft Office 365 and Google Apps It s easy to layer stronger security for Microsoft Office 365 and Google Apps for Business-hosted mailbox customers. With a simple checkbox in the management console and redirection of MX records, customers can turn on unparalleled inbound threat protection, including ClickProtect, and the ability to inspect outbound for sensitive content. This eliminates the need to manually input and maintain hundreds of IP addresses into your security service to inspect originating from Google or Microsoft. Intelligent Routing for a Strong Brand As your business grows, it becomes even more vital to maintain a strong corporate brand. McAfee SaaS intelligent routing empowers you to easily add new local domains to your existing public-facing domains, seamlessly routing s to the appropriate mail systems and recipients. It cuts bandwidth costs by eliminating the need to reroute mail from a primary location to users at satellite offices. Archive Unlimited Data, No Hardware Required Today s volumes are soaring. At the same time, government and industry regulations increasingly require you to produce documentation for all kinds of decisions and processes. Facing these pressures, companies need fast, simple, and affordable archiving and retrieval. The McAfee SaaS Archiving service reduces storage and management costs, securing your company s inbound, outbound, internal, and even historic as it s created, while shrinking Microsoft Exchange databases to a manageable size. It also satisfies compliance and e-discovery requirements, protecting your business and employees. Its powerful search features help authorized users find and retrieve messages simply in seconds, without IT assistance. A cloud-based service, Archiving requires no hardware or software to purchase, and no need to manage backup media and offsite storage. Choose a retention period of up to 10 years. Archiving is offered as a stand-alone service or with other McAfee Protection solutions. Security 4

5 Time for a Change Get enterprise-grade protection for less time, money, and stress. The savings don t stop with your purchase find out how you can minimize maintenance with our easy-to-use and award-winning service and free your over-extended IT staff to focus on more strategic projects. Learn more at com/ security, and sign up for a free trial at www. mcafeesaas.com. Features McAfee SaaS Inbound Filtering Protection & Continuity Protection and Continuity with Encryption Infrastructure and Operational Services 24/7 support Capacity and performance management Automatic maintenance and upgrades ISO certified data centers Monthly, annual, multiyear subscription Administration and End-User Support Message audit Support for more than 15 languages Security Connected Compatible with Google Apps and Microsoft Office 365 Security McAfee GTI ClickProtect Inbound spam, phishing protection, and malware protection Gray/bulk mail filtering TLS encryption Enforced SPF and DKIM authentication DKIM signing Outbound policy enforcement and malware protection spooling Continuous access Push/pull encryption Encryption branding Attachment content scanning, more than 300 file types More than 114 pre-built compliance and data loss templates Document fingerprinting Optional archiving Intelligent routing 1. SANS Institute via Network World, March 2013 McAfee. Part of Intel Security Mission College Boulevard Santa Clara, CA Intel and the Intel logo are registered trademarks of the Intel Corporation in the US and/or other countries. McAfee and the McAfee logo are registered trademarks or trademarks of McAfee, Inc. or its subsidiaries in the US and other countries. Other marks and brands may be claimed as the property of others. The product plans, specifications and descriptions herein are provided for information only and subject to change without notice, and are provided without warranty of any kind, express or implied. Copyright 2014 McAfee, Inc ds_saas- -security_0613B_ETMG