RazorGate Mail Security Appliances

Transcription

1 RazorGate Mail Security Appliances Product Overview Oct 2012

2 INTRODUCING RAZORGATE Copyright (C)

3 RAZORGATE Overview Our fastest, most scalable and HIGHEST CAPACITY messaging security appliances ever! Dedicated & Hardened OS Best-In-Class AV/AS Protection Multi-Layered Defense Junk Mail Management Latest Series 8 Hardware Spec Field-proven 98% Catch-rate Easy to Install & Manage Industry s Lowest TCO Copyright (C)

4 MESSAGE OPERATING SYSTEM - Overview MOS V4.4 Hardened & Secure Operating System Based on a Red Hat Linux Platform Isolated from conventional administrative access No complimentary applications resident on the system No extraneous programs Unused ports disabled Encryption available over all protocols Trusted Administration Copyright (C)

5 RAZORGATE FEATURES Copyright (C)

6 RAZORGATE - Overview Our RazorGate solution delivers multi-layer scanning across the entire message lifecycle Connection Controls IP / SMTP / Content Anti-Virus Scanning defense in depth, scanning engines, zero hour protection Anti-Spam Filtering pattern based scanning, spear-phishing, 98% catch-rate Content Control inbound/outbound encryption, real-time detection User Control system wide & user level quarantines CONNECTION CONTROLS ANTI-VIRUS SCANNING ANTI-SPAM FILTERING CONTENT CONTROL USER CONTROL Copyright (C)

7 RAZORGATE - Approach IP TCP Rate Control Reputation Hurdle Black Lists (RBL) Unsolicited IP/Domain (UCE) SMTP Mail Hurdle SPF Sender/Recip Valid (LDAP) SMTP Auth Content Anti-Virus (Sophos, Commtouch) Anti-Spam (Sophos, Commtouch) Dual-Scan Mode Junk Mail Manager Internet SMTP RazorGate (Security) LAN POP/IMAP/HTTP Junk Mail Manager Connection Throttling RazorGate (Proxy) Secure Access POP/IMAP/HTTP Proxy Message Server ( Server) Copyright (C)

8 CONNECTION CONTROLS - Overview Deep integration with LDAP Routing Policy Authentication CONNECTION CONTROLS Reputation Hurdle Global Collection of Sender Data Over 1 billion per day Determine Recurrent Patterns with real-time response MailHurdle Identifies SPAM senders and blocks their at the SMTP envelope Takes out SPAM before it presents a load on the system and network RBL Controls Recipient Check TCP Rate Limiting White List Reverse DNS Check Recipient Count Limiting Reject Host List SMTP Anomaly Checking Message Size Limiting Copyright (C)

9 REPUTATION HURDLE - Overview Global Collection of Sender Data Over 1 billion per day Determine Recurrent Patterns RazorGate to query against Detection Centre Reputation Hurdle Real-Time Response Reputation data on source IP Recommended action to apply Analyzing Internet Traffic! Classification Internet Mail! DNA! Real Time Detection Centers Query Spam Zombies Virus/ Worm Newsletters GlobalView Reputation Database Spammers/Malware Distributors Corporate Senders Structure Patterns Mass-sent s Distribution Patterns Analysis Classified Patterns DB Valid Publishers Copyright (C)

10 MAILHURDLE - Overview Industry s most powerful & resource-efficient approach to stopping spam/viruses at network edge Blocks up to 80% of spam/viruses at SMTP-layer Conserves network & processor resources Works with existing SMTP protocol standards Combined with existing Multi-Layer security technology, achieves overall 98% catch-rates Copyright (C)

11 ANTI-VIRUS - Overview Supports Multiple Virus Engines Defense in depth Sophos virus scanning engine Spyware protections in SMTP messages Commtouch virus scanning ANTI-VIRUS SCANNING Rapid AV Zero hour protection against viruses Defend against attacks before virus is identified Copyright (C)

12 ANTI-SPAM - Overview Premium Edition Anti-Spam Heuristic, pattern based scanning 98% catch-rate <0.02% total false positives Regional optimization ANTI-VIRUS SCANNING Signature Edition Anti-Spam Signature based scanning Demonstrated 99% catch-rate <0.01% total false positives True language independence Copyright (C)

13 CONTENT CONTROL - Overview Regulatory Compliance Compatible with RazorSafe solution Financial regulatory compliance Law enforcement needs Corporate needs CONTENT CONTROL Inbound & Outbound Encryption Signature based scanning Offensive Word Filtering Regular Expression Filtering Header Based Routing Attachment Stripping (.zip /.exe / etc.) Customer Defined Filters/Actions Copyright (C)

14 REAL TIME TECHNOLOGY - Overview Detection is based on the bulk nature of spam not content resemblance Detects the repetitive component of each outbreak Uniquely identifies the DNA of each outbreak Real Time Query - Compares incoming messages with spam DNA - No lag in updates Copyright (C)

15 USER CONTROL - Overview System Wide Quarantines Corporate quarantines Offensive content and attachments Delegated management of quarantines USER CONTROL User Level Quarantines Quarantining and reporting of SPAM Regular Digest Messages of quarantined SPAM sent to user End User Controlled Black lists White Lists Content filters Notification to user defined devices Suspend message scanning Copyright (C)

16 JUNK MAIL MANAGER - Overview Addresses evolving spam landscape & false-positive factor Junk Mail Manager provides individual quarantine mailboxes on edge security appliance - keeps spam out of inbox Reduces load on core mail server & increases performance Helps IT manage bandwidth, storage & administrator resources Integrated per-user controls for white/black lists & content filters Automatic message aging available to autodelete questionable Integrated on the Mirapoint appliance Copyright (C)

17 RAZORGATE HARDWARE OPTIONS Copyright (C)

18 SERIES 8 RAZORGATE - At A Glance new hardware integration with MOS 4.4 software upgrade security and performance improvements significant DB-Sync improvements RG180 RG280 RG800-B1 RG800-B2 Entry-level single disk Entry-level with dual-disk for redundancy Faster throughput for larger customers High throughput for large enterprises and SPs Small Enterprise Small/Medium Enterprise Medium Enterprise Medium/Large Enterprise Copyright (C)

19 SERIES 8 RAZORGATE Models RG180 RG280 RG800-B1 RG800-B2 processor 4-core 6-core 6-core 6-core memory 6GB 12GB 12GB 12GB storage 350GB 350GB 420GB 1.26TB h/w price $7.5K $15K $20K $30K Copyright (C)

20 SERIES 8 APPLIANCE SUITE Copyright (C)

21 MESSAGE SERVER - Overview Our Message Server solution provides the lowest TCO in the industry, delivering total control over your company s data with performance and the user experience that you determine Web-based Group Calendar & Tasks Shared Folders Multiple Address Books Rich User Interface Drag/Drop & Right-Click Features Comprehensive Search Functions High Performance Processing Support for Multiple Clients Native Smartphone Access via Cloud Sync Copyright (C)

22 CLOUD SYNC Native Mobile Access Our Cloud Sync solution delivers cloud based synchronisation of mail, calendars, addressbook and tasks to leading smart mobile devices, helping to boost employee productivity and loyalty, enhance operational efficiencies and drive competitiveness Sync , Calendar, Address Book, Tasks No change to existing Message Server Easy set-up with auto-discovery Policy Tools for Administrators Enhanced Security Features Remote Device Access Support for latest devices & O/S Copyright (C)

23 SMARTPHONE WEBMAIL Mobile Web Access Our Smartphone Webmail solution for on the go delivers a modern HTML5 touch-enabled interface for smart mobile devices Installable template for touch-screen devices Compatible with MOS No changes to existing Message Server Provides key functionality Simple branding possible Localizable initially Japanese & English Copyright (C)

24 RAZORSAFE - Overview Our RazorSafe mail archiving solution, provides quick access to long-term , reduced mail server and mailbox costs and lower legal and compliance risks Active de-duplication & single instance storage Advanced searching/notification Large attachment support (2GB) Legal Hold Multiple access methods import tools (.eml /.pst) migration tools AD/LDAP Intelligent centralized back-up Security (permissions & access controls / audit trails / encryption) Copyright (C)

25 RAZORGATE COMPETITIVE OVERVIEW Copyright (C)

26 COMPETITORS - Overview STRENGTHS Set & Forget Appliance Addresses SP & Enterprise Audiences Leading AV/AS engines Best-in-class capture rates & performance Dual-Scan solution with multiple engines working in series for increased protection Strong Local Support Google Apps platform better supported than Postini Gmail supports MAPI integration DKIM/SPF support Scalability, management interface, granular MTA Improvements in IPV6 Enhanced DLP Policy based push encryption Open-source & white-hat Anti- Spam technology Suite of appliances archiving, SWG, bandwidth management Web-based management tools Per box pricing Large malware team with access to data from wide base Spam categories for newsletters /marketing Cloud solution Large malware and Spam research group Native pushbased encryption Integrated DLP module WEAKNESSES Virtual software solution (future) Reporting & multi appliance admin (future) Feature loss moving to Gmail from Postini in memory processing, Spam filtering relies on user feedback, no Spam categories No Spam or Virus SLA s in Gmail DLP is rudimentary Large enterprise focus doesn t scale down well for SMB s Hosted offering only in US & Europe Very expensive (DLP / encryption at premium) Hybrid solution requires separate management interfaces Small engineer team No 3 rd party antimalware support Designed for SMB market No advanced features for enterprise users Basic reporting Encryption weak (TLS only) No support for conditional TKS policy No integration of management across onpremise service DLP poor for policy and content sync Encryption not integrated solution Poor management console reporting Slow growth & mindshare SaaS offering focused on SMB No archiving mailbox hosting or DR Offline sandbox (dynamic threat analysis not proven & costs extra Copyright (C)

27 RAZORGATE SOFTWARE ROADMAP Copyright (C)

28 RAZORGATE 5.5 Feature Overview Single Management Protocol for Cluster Management Cluster-Wide Thresholds & Abuse Control Improved Traffic Management & Flow Control/Throttling (identity theft & skip spam) Integrate External Reputation Services (LDAP / DNS) Outbound Spam Management (local detection) Application of AS Rules (based on sending ip / mailbox history) Console Manger for Real-Time Reporting, Monitoring, Configuration Ability to manage distributed system Ability to Create Custom Counters (for use in AS rules) Ability to Manage Different Mail Flows and apply different rules Ability to Create & Manage Policies (can contain counters, thresholds, rules, associated actions) Copyright (C)

29 CONSOLE MANGER - Overview Copyright (C)

30 RAZORGATE In Summary Our fastest, most scalable and HIGHEST CAPACITY messaging security appliance ever! DELIVERING single security solution in one package multi-layer scanning across message lifecycle five 9 s proven reliability + THE LOWEST TCO OF ANY ENTERPRISE SECURITY SOLUTION Copyright (C)

31