Symantec Brightmail Gateway and VMware
Solution Brief: Enterprise Security Symantec Brightmail Gateway and VMware Contents Corporate overview...................................................................................... 1 Global presence.......................................................................................... 1 Software and services portfolio............................................................................. 1 Corporate responsibility................................................................................... 1 VMware Ready Mail Security Program..................................................................... 2 Symantec Brightmail Gateway and Zimbra............................................................... 2 Flexible appliance deployment options...................................................................... 2 Deployment diagrams..................................................................................... 3 Additional information................................................................................... 5 Key contacts: sales, alliance, marketing...................................................................... 5 Events.................................................................................................. 5
Symantec Brightmail Gateway and VMware Corporate overview Information is the lifeblood of today s connected world. It plays a critical role in our personal lives and drives our businesses. Each year, the amount of information we create increases exponentially and securing and managing our information-driven world becomes even more important and challenging. Customers are increasingly concerned about how to protect their increasing amounts of information from digital photos to business critical data. Symantec is a global leader in providing security, storage and systems management solutions to help our customers from consumers and small businesses to the largest global organizations secure and manage their information against more risks at more points, more completely and efficiently than any other company. Symantec s unique focus is to eliminate risks to information, technology, and processes independent of the device, platform, interaction, or location. Global presence Symantec is committed to delivering global solutions that meet local needs. To do that, Symantec has operations in more than 40 countries, including research and development facilities and 24 hours a day, seven days a week Security Operations Centers and Security Response Labs located around the world. Symantec has established some of the most comprehensive sources of Internet threat data in the world through the Symantec Global Intelligence Network. This network captures worldwide security intelligence data that gives Symantec analysts unparalleled sources of data to identify and analyze, to deliver protection, and provide informed commentary on emerging trends in attacks, malicious code activity, phishing, and spam. Software and services portfolio Symantec s portfolio of software and services protects completely, in ways that can be managed easily and with controls that can be enforced automatically enabling confidence wherever information is used or stored. Our market-leading solutions help customers ensure that their information is secure and well-managed. Corporate responsibility Symantec is committed to fulfilling our core purpose of securing and managing your information-driven world with full attention to and respect for ethical operation, the environment, and positive societal impact. Symantec is vigilant in maintaining strong governance and ethics policies and procedures. We encourage energy conservation and waste reduction throughout our operations and also provide software and services to help customers manage their own energy and emissions impacts. 1
Symantec Brightmail Gateway and VMware VMware Ready Mail Security Program The VMware Ready Mail Security Program is an ecosystem initiative to integrate and simplify mail security of the Zimbra Collaboration Suite Appliance. The goal of this program is to help customers identify complementary mail security solutions for the Zimbra Collaboration Suite Appliance, provide better functionality, and reduce integration costs for partner mail security products. Customers can discover and download complementary virtual appliance solutions for mail security, to quickly and easily extend the overall Zimbra solution. The mail security solutions in the VMware Ready Mail Security category are validated to be compatible, robust, and interoperable with the Zimbra Collaboration Suite Appliance. Customers can take advantage of the large ecosystem of known-to-work integrated solutions, reducing the risk and complexity of implementing sophisticated mail and security solutions and ultimately becoming a cloud-capable enterprise faster, easier, and less disruptive. Symantec Brightmail Gateway and Zimbra Symantec Brightmail Gateway delivers inbound and outbound messaging security, with effective and accurate real-time antispam and antivirus protection, advanced content filtering, data loss prevention, and email encryption. It catches more than 99 percent of spam with less than one in a million false positives, leveraging real-time automatic updates, global and local IP reputation analysis, and comprehensive reporting to deliver cost-effective protection against new messaging threats on virtual infrastructures. Flexible appliance deployment options Application specific appliances are becoming the platform of choice to secure the gateway. For maximum deployment flexibility, Brightmail Gateway is available as a hardware or virtual appliance. Virtual appliance For organizations that have adopted or are moving to a virtual environment, Brightmail Gateway Virtual Edition delivers all the benefits of the hardware appliance in addition to the benefits of virtualization. Such benefits include the cost savings due to better hardware utilization and lower power consumption, rapid deployment and provisioning, flexible storage options, and more robust backup and disaster recovery capabilities. Deploying the Virtual Edition on supported VMware virtualization platforms allows you to create a self-contained operating environment (a virtual machine) that behaves as if it were a separate appliance running Brightmail Gateway. This allows you to deploy the latest Brightmail Gateway software onto the hardware platform of your choice. Hardware appliance As an all-in-one hardware appliance, Brightmail Gateway integrates the core hardware and software pieces necessary for a comprehensive, secure, and easy-to-deploy messaging security solution. The Brightmail Gateway can be deployed on Symantec Brightmail Appliance 8300 series family of high performance server appliances that scale across different deployment options ranging from small businesses to large enterprise customers. The appliances are rack mountable and include features such as redundant storage using redundant arrays of independent disks (RAID) and dual power supplies and fans. 2
Symantec Brightmail Gateway and VMware Mixed environments Brightmail Gateway supports a combination of hardware and virtual environments. This allows customers to set up an infrastructure with physical appliances that perform mail scanning managed by a virtual control center appliance, which performs the centralized administration and hosts the spam quarantine, for example. Another popular application of this mode is to deploy a disaster recovery site running in VMware, while the production site leverages hardware appliances. Finally, in instances where you might require additional scanners during peak traffic times hardware based scanners can be supplemented with virtual based scanners for increased capacity. Deployment diagrams This basic gateway deployment model is most suitable for smaller customers. Brightmail Gateway is performing both the scanner and control center functions. It resides at the outermost gateway layer, processing inbound and outbound mail, providing secure email services, and relaying mail to other relay layers or to the user-facing message store layer. With the appliance deployed at the immediate gateway, the appliance can minimize mail processing and storage requirements as well as network bandwidth via reputation filtering and connection management technologies. Although similar to the basic gateway deployment, the multiple appliance gateway deployment model pictured below includes a dedicated Control Center used to administer multiple physical or virtual scanner appliances that are responsible for email and Instant Messaging (IM) scanning. The main benefit of this model is the ability to load balance traffic across multiple scanners. Resiliency is also achieved as other scanners can take over in the event of scanner failure. This deployment is suitable for larger customers with larger volumes of mail and where redundancy is a requirement. 3
Symantec Brightmail Gateway and VMware 4
Symantec Brightmail Gateway and VMware The below architecture shows Brightmail Gateway in a multi-tier gateway deployment, with multiple scanners in the demilitarized zone (DMZ) and a control center behind a second firewall. This configuration has the same benefits as the multiple appliance gateway deployment and, in addition, meets a common security audit requirement: all data stores are in the second tier, including the control center, as it may store sensitive data. This approach may require more administrative overhead and complex networking than the other deployments. Additional information Key contacts: sales, alliance, marketing Product Management: Angelos Kottas Product Marketing: Deaddin Edris Alliance: Lynne Saunders Links to installation guide, FAQ, and download location Download a trial version of Symantec Brightmail Gateway: www.symantec.com/trybrightmail Installation Guide: ftp://ftp.entsupport.symantec.com/pub/support/documentation/ sbg_installation_guide_9.0.1.pdf Events Symantec Vision 5
About Symantec Symantec is a global leader in providing security, storage and systems management solutions to help consumers and organizations secure and manage their information-driven world. Our software and services protect against more risks at more points, more completely and efficiently, enabling confidence wherever information is used or stored. For specific country offices and contact numbers, please visit our website. Symantec World Headquarters 350 Ellis St. Mountain View, CA 94043 USA +1 (650) 527 8000 1 (800) 721 3934 www.symantec.com Copyright 2010 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. 12/2010 21158264