I r o n P o r t A p p l i a n c e s T H E U LT I M AT E E M A I L S E C U R I T Y S Y S T E M F O R T H E W O R L D S M O S T D E M A N D I N G N E T W O R K S. IronPort X1000 Email Security System O v e r v i e w The IronPort X1000 high-performance appliance is built to protect the most demanding networks in the world. Internet Service Providers (ISPs) and large enterprises continue to be the primary targets of spam and viruses. These organizations require a purpose-built email security appliance to combat these threats now, while laying a foundation for email security in the future. The IronPort X1000 provides industry leading email security on a platform that can meet today s demands for innovation and tomorrow s demands for scalability. ISPs and large enterprises need a secure and robust email security solution that protects all facets of their complex email infrastructures. IronPort s exclusive preventive filters and signature-based reactive filters, combined with content filtering and best-of-breed partner technology, provide the highest levels of email security available today while delivering unprecedented visibility and management tools. f e a t u r e s The IronPort X1000 provides carrier grade solutions for email security. PERFORMANCE LEADERSHIP AsyncOS, IronPort s proprietary operating system, was built from the ground up to address the requirements of modern email gateways and position customers for the future of SMTP. Leveraging this production- hardened, customer proven operating system, the IronPort X1000 can handle over one million messages per hour. IronPort s AsyncOS also supports up to 10,000 simultaneous connections per system 100x more than traditional systems. A high performance spam defense is achieved through a purpose built solution for ISPs and large enterprises. IronPort Anti- Spam Filters utilize the industry s most innovative and high performance approach to threat detection, based on IronPort s unique Context Adaptive Scanning Engine (CASE). IronPort s CASE examines the complete context of a message providing more accurate spam filtering than traditional techniques. INNOVATION: PREVENTIVE SECURITY IronPort Reputation Filters provide an outer layer of defense using IronPort SenderBase data to perform a real-time email traffic threat assessment and identify suspicious email senders. IronPort Reputation Filters enable a variable response to spam, which allows for highly effective filtering with virtually no false positives.
F e a t u r e s ( c o n t i n u e d ) IronPort Virus Outbreak Filters identify and quarantine viruses hours before traditional virus signatures are available. These filters operate proactively to provide a critical first layer of defense against new outbreaks. DomainKeys technology digitally signs each outgoing message and establishes your identity with receivers on the other side of the Internet. IronPort remains at the forefront of sender authentication technology to protect your identity on the Internet by ensuring your mail is always signed with your private signature. IronPort Bounce Verification tags messages with a digital watermark to provide filtering of bounce attacks at the network edge. Directory Harvest Attack Prevention tracks spammers who send to invalid recipients and blocks attempts to steal email directory information. MANAGEMENT AND MONITORING Centralized Management eliminates a single point of failure with superior peer to peer architecture, and makes managing multi-box installations of IronPort email security appliances simple. The ability to manage configuration at multiple levels allows organizations to manage globally while complying with local policies. Unique real-time monitoring is enabled by an intuitive Web UI, which allows campaigns to be monitored in real time to resolve any delivery issues, delegate responsibility, and allow different departments to monitor delivery status from their own set of IP addresses. B e n e f i t s Easily Handles ISP-Scale Email Volumes and Large-Scale Attacks The email perimeter continues to be under attack from a variety of message-borne threats; maintaining a high number of concurrent SMTP connections is a fundamental component to preventing DoS attacks from impacting your system availability. IronPort s AsyncOS supports up to 10,000 simultaneous connections per system 100x more than traditional systems. Filter at the Perimeter Reputation filtering at the perimeter allows the IronPort X1000 to apply mail flow policies as specified by the administrator. Mail that is suspicious is throttled, limiting the number of messages received in an hourly period. This variable response to spam allows for highly effective filtering with virtually no false positives. Fight Email Fraud ISPs and large enterprises play a crucial role in fighting email fraud. ISPs are rapidly adopting cryptographicbased means, such as DomainKeys to establish the true identity of email senders and protect their user base. The IronPort X1000 contains DomainKeys technology to digitally sign each outgoing message and establish your identity with receivers on the Internet. IronPort remains at the forefront of sender authentication technology to protect your identity. Reduced TCO The IronPort MTA platform enables massive reduction in Total Cost of Ownership (TCO) by consolidating email operations into a single platform and providing advanced administration features such as Centralized Management and SNMP monitoring. These features make global management and monitoring of email security simple.
B e n e f i t s ( c o n t i n u e d ) Unprecedented Insight The IronPort X1000 offers very sophisticated management, monitoring, and reporting tools designed to satisfy the large global enterprises and ISPs that make up IronPort s customer base. Each appliance has a unique reporting system, providing both a real-time and historical look at mail flowing through your email infrastructure. IronPort provides system administrators with the necessary information to make critical security decisions. Minimized Downtime As a comprehensive solution, the IronPort X1000 can ensure the availability and security of your email infrastructure. IronPort offers a variety of security applications for spam and virus filtering, content scanning, and policy enforcement. Together, these features reduce the risk and potential downtime posed by security threats. f i g u r e 1. The IronPort X1000 enables DomainKeys; a cryptographic-based means to establish the true identity of email senders. IronPort X1000 private SIGNED Internet ISPs Yahoo! Gmail VERIFIED DNS public Earthlink Power at the Perimeter: The IronPort X1000 provides multi-layered security on a single appliance by combining IronPort s revolutionary technology with additional market leading anti-spam and anti-virus solutions. SPAM DEFENSE MANAGEMENT TOOLS VIRUS DEFENSE POLICY ENFORCEMENT EMAIL AUTHENTICATION THE IRONPORT ASYNCOS EMAIL PLATFORM
s p e c s Chasis/Processor Form Factor Dimensions CPU Power Supplies Memory Storage RAID Drives Connectivity Ethernet Serial Mail Operations Mail Protocols DNS LDAP INTERFACES/CONFIGURATION Web Interface Command Line Interface File Transfer Programmatic Monitoring Configuration Files Cryptographic Algorithms TLS (Encrypted SMTP) DomainKeys Signing SSH for System Management HTTPS for System Management 19 rack-mountable, 2U rack height 3.5 (h) x 19 (w) x 29 (d) Two Intel Xeon Processors Hot-plug redundant, 700 watts, 100/240 volts 4GB RAM RAID 1+0 configuration; dual channel hardware with battery-backed cache Four hot-swappable, 146GB Ultra 3 SCSI One Intel 10/100 BaseT and two Broadcom Gigabit BaseT Ethernet ports Two-port fiber-optic NIC One RS-232 (DB-9) serial port SMTP, ESMTP, Secure SMTP over TLS and IronPort Mail Merge Internal resolver/cache; can resolve using local DNS or Internet Root Servers Integrates with Active Directory, Notes, Domino and OpenLDAP servers Accessible by HTTP or HTTPS Accessible via SSH or Telnet; Configuration Wizard or command-based SCP or FTP XML over HTTP(S) XML-based configuration files archived or transferred to cluster 56-bit DES, 168-bit 3DES, 128-bit RC4, 128-bit AES and 256-bit-AES 512, 768, 1024, 1536 and 2048-bit RSA 768 and 1024-bit RSA RC4-SHA and RC4-MD5 P r o d u c t l i n e SIZING UP YOUR EMAIL SECURITY SOLUTION IronPort Systems provides industry leading email security products for organizations ranging from small businesses to the Global 2000. IronPort X1000 IronPort C600 IronPort C300 IronPort C300D IronPort C10/C100 Designed to meet the needs of the most demanding networks in the world. Suggested for organizations with more than 5000 email users. For medium-sized enterprises and organizations with 1000 to 5000 email users. For any company with unique outbound email communication needs. An affordable, and easy to use all-in-one appliance for organizations with up to 1000 email users.
S u m m a r y The Ultimate Email Security System The IronPort X1000 is purpose built to protect today s most demanding networks. IronPort appliances are in production at eight of the ten largest ISPs and more than 20 percent of the world s largest enterprises. This system has a demonstrated record of unparalleled security and reliability. c o n t a c t u s Try before you buy Through a global salesforce and reseller network, IronPort offers a free Try Before You Buy program for the IronPort X1000. To learn if you qualify call 650-989-6530 or visit us on the Web at www.ironport.com/try IronPort Systems, Inc. 950 Elm Avenue, San Bruno, CA 94066 tel 650.989.6500 fax 650.989.6543 email info@ironport.com web www.ironport.com IRONPORT X1000 09/06 DOC RELEASE IronPort Systems is the leading email and Web security products provider for organizations ranging from small businesses to the Global 2000. IronPort provides high-per formance, easy-to-use and technically innovative products for those faced with the monumental task of managing and protecting their mission-critical networks from Internet threats. Copyright 2006 IronPort Systems, Inc. All rights reserved. IronPort and SenderBase are registered trademarks of IronPort Systems, Inc. All other trademarks are the property of IronPort Systems, Inc. or their respective owners. Specifications are subject to change without notice. P/N 435-0110-2 9/06