RazorGate Mail Security Appliances Product Overview Oct 2012
INTRODUCING RAZORGATE Copyright (C) 2012 2
RAZORGATE Overview Our fastest, most scalable and HIGHEST CAPACITY messaging security appliances ever! Dedicated & Hardened OS Best-In-Class AV/AS Protection Multi-Layered Defense Junk Mail Management Latest Series 8 Hardware Spec Field-proven 98% Catch-rate Easy to Install & Manage Industry s Lowest TCO Copyright (C) 2012 3
MESSAGE OPERATING SYSTEM - Overview MOS V4.4 Hardened & Secure Operating System Based on a Red Hat Linux Platform Isolated from conventional administrative access No complimentary applications resident on the system No extraneous programs Unused ports disabled Encryption available over all protocols Trusted Administration Copyright (C) 2012 4
RAZORGATE FEATURES Copyright (C) 2012 5
RAZORGATE - Overview Our RazorGate solution delivers multi-layer scanning across the entire message lifecycle Connection Controls IP / SMTP / Content Anti-Virus Scanning defense in depth, scanning engines, zero hour protection Anti-Spam Filtering pattern based scanning, spear-phishing, 98% catch-rate Content Control inbound/outbound encryption, real-time detection User Control system wide & user level quarantines CONNECTION CONTROLS ANTI-VIRUS SCANNING ANTI-SPAM FILTERING CONTENT CONTROL USER CONTROL Copyright (C) 2012 6
RAZORGATE - Approach IP TCP Rate Control Reputation Hurdle Black Lists (RBL) Unsolicited IP/Domain (UCE) SMTP Mail Hurdle SPF Sender/Recip Valid (LDAP) SMTP Auth Content Anti-Virus (Sophos, Commtouch) Anti-Spam (Sophos, Commtouch) Dual-Scan Mode Junk Mail Manager Internet SMTP RazorGate (Security) LAN POP/IMAP/HTTP Junk Mail Manager Connection Throttling RazorGate (Proxy) Secure Access POP/IMAP/HTTP Proxy Message Server (Email Server) Copyright (C) 2012 7
CONNECTION CONTROLS - Overview Deep integration with LDAP Routing Policy Authentication CONNECTION CONTROLS Reputation Hurdle Global Collection of Email Sender Data Over 1 billion per day Determine Recurrent Patterns with real-time response MailHurdle Identifies SPAM senders and blocks their email at the SMTP envelope Takes out SPAM before it presents a load on the system and network RBL Controls Recipient Check TCP Rate Limiting White List Reverse DNS Check Recipient Count Limiting Reject Host List SMTP Anomaly Checking Message Size Limiting Copyright (C) 2012 8
REPUTATION HURDLE - Overview Global Collection of Email Sender Data Over 1 billion per day Determine Recurrent Patterns RazorGate to query against Detection Centre Reputation Hurdle Real-Time Response Reputation data on source IP Recommended action to apply Analyzing Internet Traffic! Classification Internet Mail! DNA! Real Time Detection Centers Query Spam Zombies Virus/ Worm Newsletters GlobalView Reputation Database Spammers/Malware Distributors Corporate Senders Structure Patterns Mass-sent Emails Distribution Patterns Analysis Classified Patterns DB Valid Publishers Copyright (C) 2012 9
MAILHURDLE - Overview Industry s most powerful & resource-efficient approach to stopping spam/viruses at network edge Blocks up to 80% of spam/viruses at SMTP-layer Conserves network & processor resources Works with existing SMTP protocol standards Combined with existing Multi-Layer email security technology, achieves overall 98% catch-rates Copyright (C) 2012 10
ANTI-VIRUS - Overview Supports Multiple Virus Engines Defense in depth Sophos virus scanning engine Spyware protections in SMTP messages Commtouch virus scanning ANTI-VIRUS SCANNING Rapid AV Zero hour protection against viruses Defend against attacks before virus is identified Copyright (C) 2012 11
ANTI-SPAM - Overview Premium Edition Anti-Spam Heuristic, pattern based scanning 98% catch-rate <0.02% total false positives Regional optimization ANTI-VIRUS SCANNING Signature Edition Anti-Spam Signature based scanning Demonstrated 99% catch-rate <0.01% total false positives True language independence Copyright (C) 2012 12
CONTENT CONTROL - Overview Regulatory Compliance Compatible with RazorSafe solution Financial regulatory compliance Law enforcement needs Corporate needs CONTENT CONTROL Inbound & Outbound Encryption Signature based scanning Offensive Word Filtering Regular Expression Filtering Header Based Routing Attachment Stripping (.zip /.exe / etc.) Customer Defined Filters/Actions Copyright (C) 2012 13
REAL TIME TECHNOLOGY - Overview Detection is based on the bulk nature of spam not content resemblance Detects the repetitive component of each outbreak Uniquely identifies the DNA of each outbreak Real Time Query - Compares incoming messages with spam DNA - No lag in updates Copyright (C) 2012 14
USER CONTROL - Overview System Wide Quarantines Corporate quarantines Offensive content and attachments Delegated management of quarantines USER CONTROL User Level Quarantines Quarantining and reporting of SPAM Regular Digest Messages of quarantined SPAM sent to user End User Controlled Black lists White Lists Content filters Notification to user defined devices Suspend message scanning Copyright (C) 2012 15
JUNK MAIL MANAGER - Overview Addresses evolving spam landscape & false-positive factor Junk Mail Manager provides individual quarantine mailboxes on edge security appliance - keeps spam out of inbox Reduces load on core mail server & increases performance Helps IT manage bandwidth, storage & administrator resources Integrated per-user controls for white/black lists & content filters Automatic message aging available to autodelete questionable email Integrated on the Mirapoint appliance Copyright (C) 2012 16
RAZORGATE HARDWARE OPTIONS Copyright (C) 2012 17
SERIES 8 RAZORGATE - At A Glance new hardware integration with MOS 4.4 software upgrade security and performance improvements significant DB-Sync improvements RG180 RG280 RG800-B1 RG800-B2 Entry-level single disk Entry-level with dual-disk for redundancy Faster throughput for larger customers High throughput for large enterprises and SPs Small Enterprise Small/Medium Enterprise Medium Enterprise Medium/Large Enterprise Copyright (C) 2012 18
SERIES 8 RAZORGATE Models RG180 RG280 RG800-B1 RG800-B2 processor 4-core 6-core 6-core 6-core memory 6GB 12GB 12GB 12GB storage 350GB 350GB 420GB 1.26TB h/w price $7.5K $15K $20K $30K Copyright (C) 2012 19
SERIES 8 APPLIANCE SUITE Copyright (C) 2012 22
MESSAGE SERVER - Overview Our Message Server solution provides the lowest TCO in the industry, delivering total control over your company s email data with performance and the user experience that you determine Web-based Email Group Calendar & Tasks Shared Folders Multiple Address Books Rich User Interface Drag/Drop & Right-Click Features Comprehensive Search Functions High Performance Processing Support for Multiple Clients Native Smartphone Access via Cloud Sync Copyright (C) 2012 23
CLOUD SYNC Native Mobile Access Our Cloud Sync solution delivers cloud based synchronisation of mail, calendars, addressbook and tasks to leading smart mobile devices, helping to boost employee productivity and loyalty, enhance operational efficiencies and drive competitiveness Sync Email, Calendar, Address Book, Tasks No change to existing Message Server Easy set-up with auto-discovery Policy Tools for Administrators Enhanced Security Features Remote Device Access Support for latest devices & O/S Copyright (C) 2012 24
SMARTPHONE WEBMAIL Mobile Web Access Our Smartphone Webmail solution for email on the go delivers a modern HTML5 touch-enabled interface for smart mobile devices Installable template for touch-screen devices Compatible with MOS 4.3.5+ No changes to existing Message Server Provides key email functionality Simple branding possible Localizable initially Japanese & English Copyright (C) 2012 25
RAZORSAFE - Overview Our RazorSafe mail archiving solution, provides quick access to long-term email, reduced mail server and mailbox costs and lower legal and compliance risks Active de-duplication & single instance storage Advanced searching/notification Large attachment support (2GB) Legal Hold Multiple access methods Email import tools (.eml /.pst) Email migration tools AD/LDAP Intelligent centralized back-up Security (permissions & access controls / audit trails / encryption) Copyright (C) 2012 26
RAZORGATE COMPETITIVE OVERVIEW Copyright (C) 2012 27
COMPETITORS - Overview STRENGTHS Set & Forget Appliance Addresses SP & Enterprise Audiences Leading AV/AS engines Best-in-class capture rates & performance Dual-Scan solution with multiple engines working in series for increased protection Strong Local Support Google Apps platform better supported than Postini Gmail supports MAPI integration DKIM/SPF support Scalability, management interface, granular MTA Improvements in IPV6 Enhanced DLP Policy based push email encryption Open-source & white-hat Anti- Spam technology Suite of appliances archiving, SWG, bandwidth management Web-based management tools Per box pricing Large malware team with access to data from wide base Spam categories for newsletters /marketing Cloud solution Large malware and Spam research group Native pushbased email encryption Integrated DLP module WEAKNESSES Virtual software solution (future) Reporting & multi appliance admin (future) Feature loss moving to Gmail from Postini in memory processing, Spam filtering relies on user feedback, no Spam categories No Spam or Virus SLA s in Gmail DLP is rudimentary Large enterprise focus doesn t scale down well for SMB s Hosted offering only in US & Europe Very expensive (DLP / encryption at premium) Hybrid solution requires separate management interfaces Small engineer team No 3 rd party antimalware support Designed for SMB market No advanced features for enterprise users Basic reporting Encryption weak (TLS only) No support for conditional TKS policy No integration of management across onpremise service DLP poor for policy and content sync Encryption not integrated solution Poor management console reporting Slow growth & mindshare SaaS offering focused on SMB No archiving mailbox hosting or DR Offline sandbox (dynamic threat analysis not proven & costs extra Copyright (C) 2012 28
RAZORGATE SOFTWARE ROADMAP Copyright (C) 2012 29
RAZORGATE 5.5 Feature Overview Single Management Protocol for Cluster Management Cluster-Wide Thresholds & Abuse Control Improved Traffic Management & Flow Control/Throttling (identity theft & skip spam) Integrate External Reputation Services (LDAP / DNS) Outbound Spam Management (local detection) Application of AS Rules (based on sending ip / mailbox history) Console Manger for Real-Time Reporting, Monitoring, Configuration Ability to manage distributed system Ability to Create Custom Counters (for use in AS rules) Ability to Manage Different Mail Flows and apply different rules Ability to Create & Manage Policies (can contain counters, thresholds, rules, associated actions) Copyright (C) 2012 30
CONSOLE MANGER - Overview Copyright (C) 2012 31
RAZORGATE In Summary Our fastest, most scalable and HIGHEST CAPACITY messaging security appliance ever! DELIVERING single security solution in one package multi-layer scanning across message lifecycle five 9 s proven reliability + THE LOWEST TCO OF ANY ENTERPRISE EMAIL SECURITY SOLUTION Copyright (C) 2012 32