GFI Product Comparison. GFI MailEssentials vs. Trend Micro ScanMail Suite for Microsoft Exchange

Transcription

1 GFI Product Comparison GFI MailEssentials vs. Trend Micro ScanMail Suite for Microsoft Exchange

2 GFI MailEssentials Trend Micro ScanMail Suite Microsoft Exchange Server 2003/2007/2010/2013 Integration Option to run as a separate gateway Superior protection through multiple antivirus engines r Antivirus engines used VIPRE, BitDefender, Kaspersky*, Norman*, McAfee* Trend Micro Detects malware, spyware and greyware Self-learning Bayesian anti-spam technology r Protection against Directory Harvesting attacks r*** Sender Policy Framework (SPF) anti-spam technology r*** Cleanses HTML s from harmful scripts Protection against phishing attacks Uses multiple Spam URI Real-time Blocklist (SURBL) servers as an additional anti-spam technology r*** Uses multiple Spam DNS Real-time Blocklist (DNSBL) servers as an additional anti-spam technology r*** Technology to protect the mail server against Denial of Service (DoS) attacks r** Active Directory integrated content policies Outbound auto whitelisting Detects attachments by file type User can classify s as spam/good s r Personal Blocklist/Whitelist r Virtualization * Available at an extra cost ** Available at an extra cost in TrendMicro Control Manager *** Available at an extra cost in TrendMicro InterScan Messaging Suite Multiple antivirus scanning engines GFI MailEssentials uses multiple virus scanners to scan inbound . Using multiple scanners drastically reduces the average time to obtain virus signatures which combat the latest threats, and therefore greatly reduces the chances of an infection. The reason for this is that a single antivirus company can never ALWAYS be the quickest to respond. For each outbreak, virus companies have varying response times to a virus, depending on where the virus was discovered and so on. By using multiple virus engines, you have a much better chance of at least one of your virus engines being quickly up-to-date and able to protect against the latest virus. In addition, since each engine has its own heuristics and methods, one virus engine is likely to be better at detecting a particular virus and its variants, while another virus engine would be stronger at detecting a different virus. Overall, more virus engines means better protection. Read more about why one anti virus engine is not enough here: 2

3 Anti false positives technology GFI MailEssentials includes various technologies focused at eliminating false positives. When GFI MailEssentials was developed particular attention was given to the false positive issue as opposed to focusing only on spam detection. The automatic white list management tool automatically adds outgoing mail recipients to your white list. This greatly reduces false positives, without any need for additional administration. White lists can also be built based on domain names, addresses and keywords. GFI MailEssentials SpamRazer technology determines if an is spam by utilizing reputation, bulk detection, spamming technique detection and extensive content analysis; while Bayesian filtering uses a mathematical approach based on known spam and ham (legitimate ). Combining these technologies yields a spam detection rate of more than 99% and lowers the false positive rate. Eliminate hard to catch image, PDF, Excel and ZIP spam With spammers controlling tens of thousands of zombie machines, these large botnet armies have become one of the leading sources of spam. The Botnet/Zombie anti-spam check in GFI MailEssentials eliminates hard to catch attachment spam such as image spam, PDF spam, Excel and ZIP spam. The attachment spam check filters this attachment spam quickly, efficiently and with a very low rate of false-positives. SURBL and PURBL GFI MailEssentials checks content against Spam URI Real-time Blocklist (SURBL) servers. Administrators can configure multiple SURBL servers, add their own and also define the priority of which server should be checked first. More information on SURBL can be found at The Phishing URI Realtime Blocklist (PURBL) feature of GFI MailEssentials detects phishing s by comparing URIs present in the to a database of URIs that are known to be used in phishing attacks, and also by looking for typical phishing keywords in the URIs. Powerful reporting The GFI MailEssentials ReportPack is a full-fledged reporting companion to GFI MailEssentials. From trend reports for management (ROI) to daily drill-down reports for technical staff; the GFI MailEssentials ReportPack provides you with the easy-to-view information you need to fully understand your security patterns. Full automation and custom scheduling allow you true install-and-forget functionality! The GFI MailEssentials ReportPack offers several default and customizable reports that can be prepared on an hourly, daily, weekly or monthly basis including: Viruses blocked Inbound traffic Outbound traffic Total inbound and outbound traffic Processed s Blocked s GFI MailEssentials makes use of multiple antivirus engines Is multiple antivirus engine scanning better than single antivirus engine scanning? GFI MailEssentials can use up to five antivirus engines namely: VIPRE, Norman, BitDefender, Kaspersky, McAfee. Using multiple antivirus engines ensures that at least one of the engines is updated and can detect the latest viruses. Each engine has its own unique technology and methods. Thus, multiple antivirus engine scanning ensures better protection. Trend Micro, on the other hand, uses just a single antivirus scanning engine which means its virus protection feature may not be as effective as GFI in responding to latest threats at all times. 3

4 GFI MailEssentials comes bundled with VIPRE and BitDefender antivirus engines Do I need to buy the antivirus engines separately? VIPRE and BitDefender antivirus engines are included in the base GFI MailEssentials product and the user is not required to buy these separately. Both these engines are ICSA certified and have won the 100% Virus Bulletin award. Also, GFI MailEssentials updates VIPRE and BitDefender definition files automatically as and when they become available. GFI MailEssentials prevents Directory Harvesting attacks How is Directory Harvesting attacks prevention useful to me? Directory Harvesting is another technique used by spammers. Spammers often try to guess recipient addresses by generating multiple random addresses at a domain; they then send their spam mail to all those addresses. GFI MailEssentials checks the validity of ALL the addresses included in the mail sent, either via a query to Active Directory or through support for LDAP, and if addresses are not valid, the is marked as spam. GFI MailEssentials provides RSS feeds for quarantined s How simple it is to track quarantine s? It is much easier to track all the quarantine s by using GFI MailEssentials. It allows the administrator to subscribe to RSS (Really Simple Syndication) feeds of quarantined s. For instance, if an addressed to the CEO is quarantined, the administrator gets notified about it by a pop-up. Trend Micro notifies the administrator only through an or pager. GFI is focused on the SMB segment A focused approach is better than one-size-fits-all GFI has designed its products keeping in view the requirements of small and medium-sized businesses (SMBs). GFI MailEssentials is focused and offer a comprehensive package for the SMB market. This focus has helped SMBs by providing them specific features and tools at a highly competitive price in order to better manage their ing infrastructure. On the other hand, Trend Micro tries to cater to all the market segments and as a result it does not cater to all the needs of any particular segment. 4

5 USA, CANADA AND CENTRAL AND SOUTH AMERICA Weston Parkway, Suite 104, Cary, NC 27513, USA Telephone: +1 (888) Fax: +1 (919) GFI 2424 June13 UK AND REPUBLIC OF IRELAND Magna House, London Road, Staines, Middlesex, TW18 4BP, UK Telephone: +44 (0) Fax: +44 (0) EUROPE, MIDDLE EAST AND AFRICA GFI House, San Andrea Street, San Gwann, SGN 1612, Malta Telephone: Fax: AUSTRALIA AND NEW ZEALAND 83 King William Road, Unley 5061, South Australia Telephone: Fax: [email protected] For a full list of GFI offices/contact details worldwide, please visit Disclaimer GFI Software. All rights reserved. All product and company names herein may be trademarks of their respective owners. The information and content in this document is provided for informational purposes only and is provided as is with no warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, and non-infringement. GFI Software is not liable for any damages, including any consequential damages, of any kind that may result from the use of this document. The information is obtained from publicly available sources. Though reasonable effort has been made to ensure the accuracy of the data provided, GFI makes no claim, promise or guarantee about the completeness, accuracy, recency or adequacy of information and is not responsible for misprints, outof-date information, or errors. GFI makes no warranty, express or implied, and assumes no legal liability or responsibility for the accuracy or completeness of any information contained in this document. If you believe there are any factual errors in this document, please contact us and we will review your concerns as soon as practical. IMPORTANT! This document contains CONFIDENTIAL information that is only intended for internal use by GFI-authorized distributors and resellers and by GFI employees.