The Next-Generation In Antispam & Antivirus Solutions. Exceptional Protection, Effortless Control & Peace of Mind

Transcription

1 Messaging Assurance: The Next-Generation In Antispam & Antivirus Solutions Exceptional Protection, Effortless Control & Peace of Mind Table of Contents Introduction 2 Growth in Spam Unchecked 2 Red Condor Messaging Assurance 3 Red Condor Message Assurance Gateway 4 Learn Globally, Protect Locally 6 Service Administration 8 Red Condor Compared 9 Lost Productivity 10 Conclusion: Red Condor s Messaging Assurance Gateway is Superior 11

2 Red Condor: The Next-Generation In Antispam & Antivirus Solutions Introduction Red Condor is a Managed Service Provider of comprehensive security systems that eliminate spam, viruses, spyware, phishing schemes, and other offensive content -- dynamic, living threats to security and productivity. Red Condor s next generation, behavior-based filtering technology eliminates fraudulent and predatory based on absolute criteria that results in decisive action. The solution is precise and effective, establishing Red Condor as an industry leader with enthusiastic customers throughout the enterprise, government, and service provider markets. Growth in Spam Unchecked According to Ferris Research, spam and viruses now account for 90% of all . In addition spam continues to increase at over 70% per year. The problem continues to grow at an alarming rate. Why does it continue to grow? A report by Jupiter Research indicates that spammers can make up to $50k/month preying on the public. One of the top goals of spammers is to steal your identity, not just sell you Viagra or other products. Viruses, spam, and phishing result daily in lost productivity, lost business, security violations, and increased capital drains Despite the use of 1 st and 2 nd generation products by most businesses, the problem continues to grow. This is because the spammers have figured out how to outwit the 1 st generation filters, e.g., Bayesian, heuristics and various black-list and black hole types of registries. According to a Nucleus Research report, 1 st and 2 nd generation products implemented companywide will only result in a 26% reduction of the productivity lost due to spam. Annual Spam per Employee 30,000 20,000 10, Ferris Research estimates the cost of spam now exceeds $50 billion in the U.S. alone. In 2004, businesses in the U.S. spent $1500-$2000 per employee to fight spam and viruses. That is up significantly from the $600-$800 spent in Based upon this growth, by the end of 2006 the cost per employee could exceed $4,000 per year. Spam and other message-based e-threats are growing in epidemic proportions and have far reaching global effects and business implications. The spam & viruses problem is: A big and growing problem Not just a security issue, but a productivity issue that applies to all people in the organization The spam problem carries real dollar costs for all enterprises RED CONDOR CONFIDENTIAL PAGE 2

3 Red Condor Messaging Assurance Red Condor eliminates spam, phishing schemes, spyware, viruses, and other offensive content -- and does it without throwing away your legitimate so you can focus on your business and trust your again. Blocks Spam, Phishing, Spyware and Viruses Ensures Legitimate is Delivered Restores Trust in What s the record of success? Red Condor s unique approach has achieved a near-zero false-positive rate with consistent spam block rates greater than 98%. Exceptional Protection - Effortless Control Red Condor is a Managed Service Provider of security systems, taking full responsibility for implementing your security solution. Our Security Operations Center (SOC) continuously tracks and analyzes evolving threats, and ensures that the security filters for your domain are always up to date. What makes Red Condor different? Redefining SPAM: While other AntiSpam/AntiVirus systems filter based on content and keywords, Red Condor makes decisions based on the s behavior. Simply put, if has the intent to deceive, defraud, or otherwise misrepresent itself, it is eliminated. With a single set of behavior-based filter rules, it meets the needs of a diverse set of customers from pre-schools to fertility clinics without making mistakes. Zero Tolerance: Red Condor has a strict policy that guides all its filtering processes: a filter rule will not be implemented if it results in even one good being discarded. There is no probabilistic guessing or statistical heuristics in the Red Condor system, only absolute criteria that leads to a definitive action. Red Condor s proven technology tracks evolving spam campaigns in real-time with near-zero false-positive rates while achieving block rates over 98%. Comprehensive Deep Message Inspection : In addition to spam filtering, Red Condor also filters viruses and other malicious code. Today, most viruses and spyware hide deep inside as a series of html links a place where attachment-based anti-virus solutions can not detect it. The Red Condor antivirus definitions are automatically updated every fifteen minutes, so the customers entire organization is always protected. Designed for easy setup and zero administration: There are no changes required on any of its customer s client machines they continue to send and receive through their existing mail server. Mailbox owners do not need to report spam or develop rules to block it. Once setup, spam and viruses are automatically filtered from incoming mail while the legitimate is forwarded to the domain s original mail server. RED CONDOR CONFIDENTIAL PAGE 3

4 Red Condor Message Assurance Gateway Red Condor s Message Assurance Gateway (MAG) security system eliminates spam, viruses, spyware, phishing schemes, and other offensive content. An anti-spam / anti-virus security system is measured by what it blocks, as well as by what it does NOT block, so the MAG system has built in zero tolerance for discarding legitimate . After all, what good is a solution that throws out the good with the bad? Red Condor results are less than 0.01% false-positive rate with spam block rates greater than 98%. Red Condor provides three Message Assurance Gateway solutions: MAG-1 Hosted Service MAG-2 Dedicated Hosted Service MAG-3 Dedicated On-Site Service You would never consider writing your own virus definitions, so why do you want to write your own spam rules? As a Managed Service Provider of security systems, Red Condor takes full responsibility for implementing and updating your anti-spam / anti-virus filtering system. The Red Condor Security Operations Center continuously monitors and updates your anti-spam and anti-virus filtering to respond real-time to evolving security threats, so the security filters protecting your domain are always up to date. You can focus on your business, knowing that Red Condor is 100% focused on protecting your networks restoring trust in . MAG - 1 Hosted Service Red Condor s MAG-1 Hosted Service blocks spam and viruses before they reach your network. The MAG-1 system provides filtering, local spam quarantine, and backup spooling. MAG-1 Hosted Service is the perfect solution for small organizations without an IT staff, but also an ideal product for larger enterprises and public agencies looking for managed, real-time anti-spam / antivirus protection. RED CONDOR CONFIDENTIAL PAGE 4

5 Here s what the MAG-1 Hosted Service includes: Filtering for ALL malicious spam, viruses, spyware, and phishing Free alias addresses Effortless control and comprehensive performance reporting A fully redundant system so you don t need to pay twice for your protection Backup spooling in the event that your server goes off-line Effortless Control All aspects of the MAG service can be managed when you login to your web-based Red Condor Dashboard. Normally, there is no need to administer the MAG service, but when you first signup, you may wish to visit your web dashboard to set your policy to match your internal policy or personal preferences. Server Redundancy Not only are its servers redundant, but it provides redundancy for your server. If your mail server goes down, Red Condor will store inbound for up to four days. When your server comes back online, is released in an orderly fashion to prevent overloading your server. This service can be used to perform scheduled maintenance as well as protect your business from outages. MAG - 2 Dedicated Hosted Service Red Condor s MAG-2 Dedicated Hosted Service provides the same exceptional gateway filter service as the MAG-1 Hosted Service, but comes with dedicated MAG servers for additional flexibility and security. The SMTP gateway filter continues to stop spam and viruses before they reach your network, but with MAG-2 service, it provides you with dedicated servers and equipment for stream filtering, local spam quarantine, and backup spooling. Red Condor s MAG-2 Dedicated Hosted Service is the ideal solution for larger enterprises and government agencies looking to outsource their managed, real-time anti-spam / anti-virus protection. MAG-2 Dedicated Hosted Service provides its customers with the additional levels of security and flexibility you require, without being forced bring it all in house. The MAG-2 Dedicated Hosted Service also includes: Filtering for ALL malicious spam, viruses, spyware, and phishing Free alias addresses Effortless control and comprehensive performance reporting A fully redundant system so you don t need to pay twice for your protection Backup spooling in the event that your server goes off-line The MAG-2 Dedicated Hosted Service is just like MAG-1 Hosted Service, with the service provided using dedicated MAG servers that reside in Red Condor s secure data center. RED CONDOR CONFIDENTIAL PAGE 5

6 MAG - 3 On-Site Dedicated Service With Red Condor s MAG-3 On-Site Dedicated Service, it provides you with an on-site, dedicated server for stream filtering, local spam quarantine, and backup spooling. MAG-3 servers filter spam and virus the same way as the MAG11 hosted service. MAG-3 servers are connected to the Red Condor Security Operations Center (SOC) and receive Instant Updates to insure the security filters are always up to date. Red Condor s MAG-3 Dedicated On-Site Service is preferred by organizations that require on-site deployment for all systems in order to meet corporate security and privacy guidelines or comply with regulatory restrictions. You can be assured that wherever Red Condor provides security, the Security Operations Center only reviews messages that are sent to sensor and spam detection mailboxes. Your organization s private is never reviewed or stored outside of your facility. The MAG-3 Dedicated On-Site Service also includes: Filtering for ALL malicious spam, viruses, spyware, and phishing Free alias addresses Effortless control and comprehensive performance reporting A fully redundant system so you don t need to pay twice for your protection Backup spooling in the event that your server goes off-line Learn Globally, Protect Locally Red Condor s next generation, behavior-based filtering technology eliminates fraudulent and predatory based on absolute criteria that results in decisive action. It uses knowledge gathered from across the network, coupled with deep message inspection, to block spam and viruses before they reach your network. RED CONDOR CONFIDENTIAL PAGE 6

7 Behavior-Based Analysis A behavior-aware protection system observes inbound and outbound network traffic globally and analyzes that traffic for unusual behavior. The behavior is reported to an escalation center, which can act to make various rules to throttle, monitor, or intercept the behavior across all locally protected systems. Zero Tolerance for Mistakes Red Condor has a strict policy that guides all its filter technology processes: a behavior filter rule will not be implemented if it results in even one good being discarded. No exceptions, no errors. Human in the Loop The addition of human intelligence is the only effective way to beat spammers at their own game. When spammers adopt a new technique, Red Condor is able to accurately and rapidly adapt. Nothing works better. Unique Spam Filtering Technology Red Condor does not use unreliable heuristics, DNS blacklists, or Bayesian filters to identify spam. Instead, it investigates messages, applying uniform standards before crafting the precise rules that block just the spam, not your important correspondence. Here s how it all works together 1. Red Condor s sensor network observes and analyzes global behaviors. This sensor network co-exists with the domains to be protected, so it stays in lock-step with its customers security threats. 2. The sensor network consolidates new, unusual, or suspect behaviors and escalates these threats to the Security Operations Center (SOC). 3. The Red Condor SOC investigates and acts on the consolidated reports, issuing rules back to the filter network, co-located with the sensors. RED CONDOR CONFIDENTIAL PAGE 7

8 4. Before a rule is sent to the filter network, it is regression tested against an ever evolving set of good to make sure that it does not create even a single false-positive. A new rule is not released until it is perfect. 5. The filter network incorporates these rules to protected domains from both inbound and outbound threats. Service Administration Red Condor is easy-to-use and self-configuring. There is absolutely nothing to install, upgrade, or maintain. And your existing mail user agents, such as Microsoft Outlook or Netscape Messenger, continue to send and receive mail without any changes. After creating an account at Red Condor, you will receive an with instructions for configuring your mail exchanger (MX) records. Your IT administrator or ISP should be able to make these changes in a few minutes. If you have any questions, you can contact a Red Condor Technical Support Engineer. Policy Management Normally there is no need to administer the MAG service, but when you first signup, you may wish to visit your web dashboard to set your policy to match your internal policy or personal preferences. Spam Digest A Spam Digest is an ed version of the Quarantine page that allows each mailbox owner to review and release spam. The digest delivery frequency can be set to Daily, Weekly, Monthly, or Never. By default, the frequency is set to Never. Users do not need to report spam or develop rules to block it. Your spam problem simply disappears. Web Dashboard The Red Condor Dashboard provides administrators and mailbox owners with an easy to use console for managing the Red Condor service. Administrators set filtering policy and reporting frequency for the domain and mailbox level. Everything else is taken care of as part of the Red Condor Managed Service. RED CONDOR CONFIDENTIAL PAGE 8

9 Red Condor Compared The important difference in Red Condor s approach to fighting spam and viruses is NOT so much in what it DOES, but what it DOES NOT do. All the other market leaders rely on the common 1 st and 2 nd generation of spam filtering and blocking techniques that spammers have already bypassed with a variety of their own next-generation processes. Fixed Keyword & Phrase Filtering: Ineffective and relies on endless user configuration & training The ease of scripting tools available to spammers makes unique message-by-message randomization prevalent for most spam. 0ne we11 kn0wn te6hnlque RElies 0n m1xing certain Ch@RAct3rs 0n a rand0m basis. Keyword blocking does little to keep up with these, now simple techniques, letting the messages through unblocked. Heuristic Scoring & Bayesian Filtering: The One Knob Solution Directly Proportional (high block rate = high false-positives; lower block rate = lower false-positives) Increasingly, message-by-message unique randomization techniques make both Bayesian and heuristic-based filtering techniques almost entirely ineffective. Attempts to merely leverage such Bayesian and heuristic-based filtering techniques as for purposes of scoring and not summarily blocking push the administration of such solutions on to the end users. This not only wastes valuable time, but results in poor block rates OR high false identification of good and valid messages (false-positives). DNS Real-Time Blacklists (RBLs): One of the most significant causes of false-positives, but most widely used solutions By one estimate, each day globally there are 200,000 new Zombie and Bot ( robot ) networks, e.g., spammer corrupted and now controlled PCs that are sending out the latest spam campaigns and millions of such corrupted networked PCs exist at any given time. This scale of moving points of origination make any black-listing not just ineffectively, but a leading cause of false-positives in systems that use such techniques and/or incorporate such third-party resources, e.g., Razor, DCC, SpamCop, SpamHaus, etc., in their filtering. RED CONDOR CONFIDENTIAL PAGE 9

10 The Junk Mail Bin : Looking for the needle in the hay stack There is a new default folder inside enterprises clients, the Junk Mail folder or in some systems the Quarantined or Gray Mail folder. Most all of the above mentioned solutions create a stream of unresolved messages. These are messages that the solutions couldn t make an absolute determination of the quality of the message. These messages instead of being blocked are forward on to the end users Quarantine, Gray or Junk Mail Bin. Such indiscriminate guessing results in valid messages being forwarded on an hourly basis to the same folder. This forces the end users to continually check their Junk Mail Bin resulting in twice the work. Some solutions even hide these guesses in a place only accessible from a web log-in. So it requires even more effort for the end users to keep checking their Junk or Quarantine mail folder. Conservative estimates of the cost of such false-positives (mistaken categorizations of valid messages) are in the $5 to $10 range (depending on the cost of labor). Additionally, even one critical false-positive could literally cost a business thousands of dollars in lost revenue. Lost Productivity According to a 2005 study by the University of Maryland, the loss in productivity caused by deleting junk mail costs American businesses nearly $22 billion a year. Red Condor can help you estimate your lost productivity, and the gains you achieve by subscribing to Red Condor s MAG service. The figures below are an example based upon a company with 50 employee mailboxes. The model uses Red Condor s long term running average performance metrics a spam block rate of 98% and a false-positive rate of 0.01%. Savings Calculator: Mailboxes: 50 Daily Traffic Per Mailbox Good Mail: 30.0 Junk Mail: 9.5 Cost Parameters each if caught $ each if not caught $ Costs Before After False-negatives $42, $1, False-positives N/A $ Service cost N/A $1, $42, $3, Annual Savings $38, Payback Time 16 days ROI 1,177% RED CONDOR CONFIDENTIAL PAGE 10

11 Conclusion: Red Condor s Messaging Assurance Gateway is Superior Red Condor s Next-Generation Antispam & Antivirus Messaging Assurance Gateway provides a superior solution enhancing the value of electronic messaging for its corporate clients by filtering spam, phishing schemes, spyware, viruses, and other undesirable content without interfering with legitimate correspondence; by improving security and reliability; and by addressing evolving regulatory and compliance requirements. It is easy-to-use and self-configuring. There is absolutely nothing to install, continually configure, upgrade, or maintain. And your existing mail user agents continue to send and receive mail without any changes. Exceptional Performance Effortless Control Simple to Setup & Easy to Use Private and Secure Performance Proven & Network Compatible Peace of Mind, Restoring trust in your Red Condor protects your network, restores productivity, and lowers costs for just pennies per day per mailbox. Try a 30-day risk-free trial. Red Condor welcomes the opportunity to demonstrate how effective the solution is RED CONDOR CONFIDENTIAL PAGE 11

12 340 Tesconi Circle, Suite B Santa Rosa, CA Tel: (888) 9NO-SPAM Fax: (707) RED CONDOR CONFIDENTIAL PAGE 12