IronPort X1000 Security System

Transcription

1 I r o n P o r t A p p l i a n c e s T H E U LT I M AT E E M A I L S E C U R I T Y S Y S T E M F O R T H E W O R L D S M O S T D E M A N D I N G N E T W O R K S. IronPort X1000 Security System O v e r v i e w The IronPort X1000 high-performance appliance is built to protect the most demanding networks in the world. Internet Service Providers (ISPs) and large enterprises continue to be the primary targets of spam and viruses. These organizations require a purpose-built security appliance to combat these threats now, while laying a foundation for security in the future. The IronPort X1000 provides industry leading security on a platform that can meet today s demands for innovation and tomorrow s demands for scalability. ISPs and large enterprises need a secure and robust security solution that protects all facets of their complex infrastructures. IronPort s exclusive preventive filters and signature-based reactive filters, combined with content filtering and best-of-breed partner technology, provide the highest levels of security available today while delivering unprecedented visibility and management tools. f e a t u r e s The IronPort X1000 provides carrier grade solutions for security. PERFORMANCE LEADERSHIP AsyncOS, IronPort s proprietary operating system, was built from the ground up to address the requirements of modern gateways and position customers for the future of SMTP. Leveraging this production- hardened, customer proven operating system, the IronPort X1000 can handle over one million messages per hour. IronPort s AsyncOS also supports up to 10,000 simultaneous connections per system 100x more than traditional systems. A high performance spam defense is achieved through a purpose built solution for ISPs and large enterprises. IronPort Anti- Spam Filters utilize the industry s most innovative and high performance approach to threat detection, based on IronPort s unique Context Adaptive Scanning Engine (CASE). IronPort s CASE examines the complete context of a message providing more accurate spam filtering than traditional techniques. INNOVATION: PREVENTIVE SECURITY IronPort Reputation Filters provide an outer layer of defense using IronPort SenderBase data to perform a real-time traffic threat assessment and identify suspicious senders. IronPort Reputation Filters enable a variable response to spam, which allows for highly effective filtering with virtually no false positives.

2 F e a t u r e s ( c o n t i n u e d ) IronPort Virus Outbreak Filters identify and quarantine viruses hours before traditional virus signatures are available. These filters operate proactively to provide a critical first layer of defense against new outbreaks. DomainKeys technology digitally signs each outgoing message and establishes your identity with receivers on the other side of the Internet. IronPort remains at the forefront of sender authentication technology to protect your identity on the Internet by ensuring your mail is always signed with your private signature. IronPort Bounce Verification tags messages with a digital watermark to provide filtering of bounce attacks at the network edge. Directory Harvest Attack Prevention tracks spammers who send to invalid recipients and blocks attempts to steal directory information. MANAGEMENT AND MONITORING Centralized Management eliminates a single point of failure with superior peer to peer architecture, and makes managing multi-box installations of IronPort security appliances simple. The ability to manage configuration at multiple levels allows organizations to manage globally while complying with local policies. Unique real-time monitoring is enabled by an intuitive Web UI, which allows campaigns to be monitored in real time to resolve any delivery issues, delegate responsibility, and allow different departments to monitor delivery status from their own set of IP addresses. B e n e f i t s Easily Handles ISP-Scale Volumes and Large-Scale Attacks The perimeter continues to be under attack from a variety of message-borne threats; maintaining a high number of concurrent SMTP connections is a fundamental component to preventing DoS attacks from impacting your system availability. IronPort s AsyncOS supports up to 10,000 simultaneous connections per system 100x more than traditional systems. Filter at the Perimeter Reputation filtering at the perimeter allows the IronPort X1000 to apply mail flow policies as specified by the administrator. Mail that is suspicious is throttled, limiting the number of messages received in an hourly period. This variable response to spam allows for highly effective filtering with virtually no false positives. Fight Fraud ISPs and large enterprises play a crucial role in fighting fraud. ISPs are rapidly adopting cryptographicbased means, such as DomainKeys to establish the true identity of senders and protect their user base. The IronPort X1000 contains DomainKeys technology to digitally sign each outgoing message and establish your identity with receivers on the Internet. IronPort remains at the forefront of sender authentication technology to protect your identity. Reduced TCO The IronPort MTA platform enables massive reduction in Total Cost of Ownership (TCO) by consolidating operations into a single platform and providing advanced administration features such as Centralized Management and SNMP monitoring. These features make global management and monitoring of security simple.

3 B e n e f i t s ( c o n t i n u e d ) Unprecedented Insight The IronPort X1000 offers very sophisticated management, monitoring, and reporting tools designed to satisfy the large global enterprises and ISPs that make up IronPort s customer base. Each appliance has a unique reporting system, providing both a real-time and historical look at mail flowing through your infrastructure. IronPort provides system administrators with the necessary information to make critical security decisions. Minimized Downtime As a comprehensive solution, the IronPort X1000 can ensure the availability and security of your infrastructure. IronPort offers a variety of security applications for spam and virus filtering, content scanning, and policy enforcement. Together, these features reduce the risk and potential downtime posed by security threats. f i g u r e 1. The IronPort X1000 enables DomainKeys; a cryptographic-based means to establish the true identity of senders. IronPort X1000 private SIGNED Internet ISPs Yahoo! Gmail VERIFIED DNS public Earthlink Power at the Perimeter: The IronPort X1000 provides multi-layered security on a single appliance by combining IronPort s revolutionary technology with additional market leading anti-spam and anti-virus solutions. SPAM DEFENSE MANAGEMENT TOOLS VIRUS DEFENSE POLICY ENFORCEMENT AUTHENTICATION THE IRONPORT ASYNCOS PLATFORM

4 s p e c s Chasis/Processor Form Factor Dimensions CPU Power Supplies Memory Storage RAID Drives Connectivity Ethernet Serial Mail Operations Mail Protocols DNS LDAP INTERFACES/CONFIGURATION Web Interface Command Line Interface File Transfer Programmatic Monitoring Configuration Files Cryptographic Algorithms TLS (Encrypted SMTP) DomainKeys Signing SSH for System Management HTTPS for System Management 19 rack-mountable, 2U rack height 3.5 (h) x 19 (w) x 29 (d) Two Intel Xeon Processors Hot-plug redundant, 700 watts, 100/240 volts 4GB RAM RAID 1+0 configuration; dual channel hardware with battery-backed cache Four hot-swappable, 146GB Ultra 3 SCSI One Intel 10/100 BaseT and two Broadcom Gigabit BaseT Ethernet ports Two-port fiber-optic NIC One RS-232 (DB-9) serial port SMTP, ESMTP, Secure SMTP over TLS and IronPort Mail Merge Internal resolver/cache; can resolve using local DNS or Internet Root Servers Integrates with Active Directory, Notes, Domino and OpenLDAP servers Accessible by HTTP or HTTPS Accessible via SSH or Telnet; Configuration Wizard or command-based SCP or FTP XML over HTTP(S) XML-based configuration files archived or transferred to cluster 56-bit DES, 168-bit 3DES, 128-bit RC4, 128-bit AES and 256-bit-AES 512, 768, 1024, 1536 and 2048-bit RSA 768 and 1024-bit RSA RC4-SHA and RC4-MD5 P r o d u c t l i n e SIZING UP YOUR SECURITY SOLUTION IronPort Systems provides industry leading security products for organizations ranging from small businesses to the Global IronPort X1000 IronPort C600 IronPort C300 IronPort C300D IronPort C10/C100 Designed to meet the needs of the most demanding networks in the world. Suggested for organizations with more than users. For medium-sized enterprises and organizations with 1000 to users. For any company with unique outbound communication needs. An affordable, and easy to use all-in-one appliance for organizations with up to users.

5 S u m m a r y The Ultimate Security System The IronPort X1000 is purpose built to protect today s most demanding networks. IronPort appliances are in production at eight of the ten largest ISPs and more than 20 percent of the world s largest enterprises. This system has a demonstrated record of unparalleled security and reliability. c o n t a c t u s Try before you buy Through a global salesforce and reseller network, IronPort offers a free Try Before You Buy program for the IronPort X1000. To learn if you qualify call or visit us on the Web at IronPort Systems, Inc. 950 Elm Avenue, San Bruno, CA tel fax info@ironport.com web IRONPORT X /06 DOC RELEASE IronPort Systems is the leading and Web security products provider for organizations ranging from small businesses to the Global IronPort provides high-per formance, easy-to-use and technically innovative products for those faced with the monumental task of managing and protecting their mission-critical networks from Internet threats. Copyright 2006 IronPort Systems, Inc. All rights reserved. IronPort and SenderBase are registered trademarks of IronPort Systems, Inc. All other trademarks are the property of IronPort Systems, Inc. or their respective owners. Specifications are subject to change without notice. P/N /06