wpe13.jpg (12021 bytes)

Content Security

Up ]

Information Sources
Updating
Testing
Physical Protection
Child Protection
Virus Protection
Firewalls
Privacy
Suites
Content Security

This section provides information on some of the content security products available for businesses. They restrict access to viruses and malicious code, inappropriate web sites or content,  unauthorised file types and help prevent data loss and time wasting.

 

Brightmail Solution Suite

The Brightmail solution is intended to provide protection for large organisations or to be deployed by ISP's who wish to provide content security solutions for their customers.

Brightmail Content Filtering

This is solution is designed to help ISP's and large manage email content and help reduce legal liability. Administrators configure mail rules to block, bounce, forward etc. based on   file types/names/size, text in the Subject Line or Body of the message (to check for profanity or racist terms for instance), sender or recipient. It also checks the message against the Brightmail Anti Spam and Anti Virus systems.  You can let staff/customers configure personal rules to further manage their own mail.


Brightmail Anti Spam

This is solution is designed to help ISP's and large organisations combat spam. A dedicated server filters messages before they reach your email server. Brightmail have a network that collects Spam from around the world. Their experts analyse it, writes rule sets to allow it to be blocked and then send the information as updates to the Brightmail server at your site (they state that this can be as often as every 5 minutes). The risk of false positives is reduced as the rules are defined for individual Spam messages and not generic types of message. For more information go to http://www.brightmail.com/products_antispam.html.

Brightmail Anti Virus

This is solution is designed to help ISP's and large organisations combat viruses and malicious code in email. A dedicated server filters messages before they reach your email server. It uses Symantec anti-virus technology and expertise along with the Brightmail  infrastructure to block / clean infected email. Updates occur automatically on a regular basis ensuring protection against the newest viruses. A lot of the latest viruses and worms contain stock phrases and file names in the email hosting the infection. The Brightmail network that identifies Spam also identifies this textual content, adding a further level of protection. For more information go to http://www.brightmail.com/products_antivirus.html.

 

Clearswift ES Enterprise Suite

This is a suite of tools to support your corporate email policies. Email can be monitored for compliance and delivered depending on the results. You can filter email based on textual content, attachment file type and whether there is a virus within the message or attachment (this uses third party scanners for compliance with your anti-virus policies). Options include blocking, removing and administrative notification when email breaching policy is detected. Attachment files size can be limited, reducing bandwidth issues, anti-spoof, anti-spam and anti-relay functions are also available.   Legal disclaimers can be added to outgoing messages to help reduce your legal liability. Rules can be set for everyone or based on senders / recipients. Reporting allows you to check how your email system is being used. Email based virtual private networks can be created to ensure secure communications between business partners. Information classification and protective marking schemes can be enforced ensuring that sensitive information as treated appropriately. Archive management is also available as is joint system management and delegated responsibility for various aspects of the system. For more information go to http://www.clearswift.com

 

Clearswift MailGuard

This is suitable for small to medium sized enterprises where ES Enterprise Suite is too extensive.   Email can be monitored for compliance and delivered depending on the results. You can filter email based on textual content, attachment file type and whether there is a virus within the message or attachment (this uses third party scanners for compliance with your anti-virus policies). Options include blocking, removing and administrative notification when email breaching policy is detected. Attachment files size can be limited, reducing bandwidth issues, anti-spoof, anti-Spam and anti-relay functions are also available. Potentially malicious active content can also be managed. Rules can be set for everyone or based on senders / recipients / departments / domains. For more information go to http://www.clearswift.com

 

 

Clearswift MIMEsweeper

MIMEsweeper is a family of Content Security products designed to protect your email and web based communications. Each product in the family is available separately.

MAILsweeper

This product allows you to technically enforces your email usage policies and is available for Exchange, Domino and SMTP. It allows you to specify who is allowed to send and receive certain file types (executables, videos, pictures, mp3s compressed files etc.), encrypted material or confidential documents. The system breaks down  attachments into components and can see inside multi-layer files with embedded objects (including zip files). Text lists are used to block profanity, SPAM (real-time black list servers can also be used) and virus hoaxes. It can scan text, putting it in context during analysis to reduce false positives. Viruses are stopped through the use of 3rd party scanners (for compliance with you anti-virus policy). Anti-spoof and anti-relay functionality is also available.Attachment files size can be limited. Delivery of large emails can be deferred to quite times, ensuring bandwidth is available for all users during office hours. Email disclaimers can be added to outgoing mail to help reduce legal liability.  Rules can be set for everyone or based on senders / recipients / departments / domains. Potentially malicious active code can also be blocked. Email can be blocked or annotated according to your policy and notifications can be sent to administrators. Reporting tools are available to let you know how your systems are being used. For more information go to http://www.clearswift.com.

PORNsweeper

This is a plug-in for MAILsweeper for SMTP that analyses pictures within email and  attachments (and embedded objects within these attachments for content. It can detect pornographic / inappropriate images by analysing the fleshtone, the amount of bare flesh and elements of facial expression. For more information go to http://www.clearswift.com.

SECRETsweeper

This is an encryption and digital signature solution for MAILsweeper. It ensures that, although information is encrypted/decrypted at your gateway, only content acceptable to your organisation is allowed in or out. For more information go to http://www.clearswift.com.  

WEBsweeper

This is the web "sister" to MAILsweeper. It is a technical solution enforcing your corporate Internet usage policy. URL filtering (optional) can ensure staff only browse appropriate web sites, keeping them away from inappropriate content and reducing time wasting. Sites are categorised by type (in multiple languages) and Groups/users can be blocked from viewing sites (all or some) within the categories. One use of this type of facility would be to block access to web based email, supporting your email policy and ensure that sensitive information is not leaked "through the back door". Can also allow access based on PICS ratings and time of day (allow access to non-business related sites at lunch time for instance). Updates to the URL database can be downloaded automatically. Text can be scanned for inappropriate phrases, reducing access to inappropriate sites/downloads. It can scan text, putting it in context during analysis to reduce false positives. Allowable download file types can be configured to stop staff access executables. videos, pictures, mp3s etc. The system breaks downloads into components and can see inside multi-layer files with embedded objects (including zip files). Data is virus checked using third party scanners, supporting your anti-virus policies. Potentially malicious active code can be blocked as can cookies. Messages can be displayed on the screen when content is stopped and notifications can be sent to administrators.Reporting tools are available to let you know how your systems are being used. For more information go to http://www.clearswift.com.  

 

Elron IM Message Inspector

This email filter that helps you reduce corporate liability and enforce your email usage policies. Unlike other solutions that only block content coming into or out of your organisation, Message Inspect can filter interoffice email. It can scan text, putting it in context during analysis to reduce false positives. You can also specify attachment types to block and message / attachment size limits. Disclaimers can be added to email to further reduce your legal liability. The Spam filter reduces the issues caused by unsolicited email. A number of options are available for email breaching corporate policy. These include blocking, redirecting to an administrator or tagging as Spam. Notifications can be sent to relevant individuals when the policy is breached and comprehensive reports let you understand how your system is being used. Integrates with IM Antivirus and other Elron products. For more information, a free trial or to purchase the software go to http://www.elronsw.com/.

Elron IM Web Inspector

This internet filtering software helps you reduce corporate liability and enforce your Internet usage policies. It uses a database containing the most widely used web sites, categorised by type which can be added to by you (sites and categories). Sites and individual pages can be added. The system also scans pages for inappropriate content and blocks depending on its findings. Rules can be set up for times of day so you could allow staff to access non-business related sites at lunch time for instance (if that was compatible with your corporate usage policy). Notifications can be sent to administrators when pages are blocked and custom messages can be displayed to users. Comprehensive reporting lets you identify how your systems are being used. For more information, a free trial or to purchase the software http://www.elronsw.com/.

 

GFI Mail Essentials

This systems protects email against viruses exploited vulnerabilities and other threats on Microsoft Exchange (using VSAPI) or SMTP. Comes complete with the Norman Virus scanning engine and incoming and outgoing email is scanned. Potentially malicious email attachments (such as executables of visual basic script) can also be quarantined based on the files format and not just the attachment name. The content security functionality is further enhanced with the ability to remove unauthorised attachment types (such as mp3's), offensive text or confidential information (using keyword checking). Rules can be set up for individuals and groups to ensure that those who needs access to file types etc can get it whilst unauthorised access is blocked. Anti-SPAM technology protects your organisation from unsolicited email.The system can also put disclaimers in all outgoing email to held reduce your legal liability. For more information go to http://gfisoftware.com

 

GFI Mail Security

This systems protects email against viruses exploited vulnerabilities and other threats on Microsoft Exchange (using VSAPI) or SMTP. You can use multiple Scanning engines ( Norman Virus Control and Bitdefender come with the application and McAfee can also be used) to increase protection. Potentially malicious email attachments (such as executables of visual basic script) can also be quarantined. The content security functionality is further enhanced with the ability to remove unauthorised attachment types (such as mp3's), offensive text or confidential information (using keyword checking). Rules can be set up for individuals and groups to ensure that those who needs access to file types etc can get it whilst unauthorised access is blocked. Anti-SPAM technology protects your organisation from unsolicited email.  Statistics of events can be analysed and reported. The system can also put disclaimers in all outgoing email to held reduce your legal liability. For more information go to http://gfisoftware.com

 

Norton AntiVirus for Gateways

The product detects and removes viruses and filters inappropriate email content in Microsoft Exchange servers. It includes automated scanning and repair capabilities and  checks both incoming and outgoing email (and attachments) before they can be accessed by the operating system. It can also use content security mechanisms to block emails with inappropriate attachment names, content, or extensions. This can help enforce both your email and anti-virus policies.

Management is via and HTML interface with options for automated signature updates from the Internet. For further information, including evaluation copies of the software, go to http://ww.symantec.com.

 

McAfee Webshield

These are hardware and software integrated products sized depending on your enterprise. In addition to anti-virus they include features such as content filtering, URL blocking and anti-spam. They can be remotely managed and can be updated over the Internet.

In addition to the appliances, WebShield is also available for Solaris (HTTP, FTP and SMTP) and NT (SMTP only). WebShield e500 ASaP includes VirusScreen technology for email protection.

Further information can be found at http://www.mcafeeb2b.com.

 

MessageLabs SkyScan AP

All incoming and outgoing email is routed through the MessageLabs service which checks email  for pornographic images. It uses artificial intelligence technology to check the content of any pictures. It analysis aspects of the pictures such as poses, clothes and facial expressions.   You can remotely configure the sensitivity of the service (and even turn it off). There are options for the treatment of suspect images. They can be labelled, deleted, redirected or copied to an administrator. Online statistics can be viewed online. For more information go to http://www.messagelabs.com.   

 

MessageLabs SkyScan AS

All incoming and outgoing email is routed through the MessageLabs service which checks for unsolicited email (Spam). It uses publicly available SPAM black lists and your own configuration (IP addresses, domains names, email addresses). Configuration can be done remotely from your site. You can mark the email as Spam and deliver it, redirect it or delete it. For more information go to http://www.messagelabs.com.

   

Microworld eScan

This is an enterprise wide anti-virus solution available for Workstations, file and email  servers. It scans disks, memory, email (including Exchange/Outlook, MS Internet Mail and SMTP), FTP and HTTP,  archived  files and scripts. Scans inside password protected Office documents. Uses heuristic technology to detect unknown viruses and can be set to automatically disinfect viruses if found. data travelling via the Internet is scanned before it can be accessed by the operating system or controlling application. Centralised management, reporting and updating (via the Internet) is available. Content Security functions are available to stop access to email containing inappropriate text / attachment type or compressed files over a specified size. Web content security functions ( web site blocking via either URL or site content is being developed). For more information, an evaluation of the product or to purchase it go to http://www.mwti.net/escan.asp.   

 

Microworld MailScan

This product is positioned between the Internet and your email server to scan email both inbound and outbound. It scans attachments and HTML email messages and heuristics technology checks for unknown viruses.  It uses the workstation version of  eScan as the antivirus component and can be set to automatically disinfect attachments and deliver to the intended recipient. If the virus cannot be disinfected, or is a known malicious file (as opposed to an infected file)the attachment can be either automatically quarantined or deleted.  Automated notifications are sent to the sender, recipient and administrator in the event of a virus being discovered. All email  can be checked for inappropriate words or phrases and oversize files can automatically be compressed (incoming files can be automatically uncompressed). Policies can be set up to content check only certain recipients or even block emails from/to certain domains. Policy rules are broken into two parts, a product rule set that is defined by Microworld and a company rule set that is defined by the administrators. Anti-Virus, wordlist and policy updates can automatically be downloaded from the Internet.  Events (incidents, updates etc) are logged for analysis. Is available for many email servers including Exchange and SMTP.   For more information, an evaluation of the product or to purchase it go to http://www.mwti.net/mailscan.asp.    

 

SurfControl SuperScout Email Filter

This product helps you enforce your email usage policies. Attachments can be restricted to approved file types only. Text is analysed by 15 dictionaries checking for different categorised of inappropriate words/phrases and you can add your own words or phrases. Disclaimers can be added to further reduce your legal liability. Delivery of large emails can be deferred to quite times, ensuring bandwidth is available for all users during office hours. 3rd party anti-virus tools can be used (in compliance with your anti-virus policy). Notification can be sent to administrators when the email policy has been breached. Email can be blocked, deleted or allowed through depending on your requirements. Reports let you see exactly how you email system is being used.  Options exist for Spam and pornographic image filtering. Another tool allows you to ensure that company confidential information is not leaked out of your organisation by email.  This is available for Microsoft Exchange and SMTP. For more information go to http://www.surfcontrol.com.  

 

SurfControl SuperScout Web Filter

This product helps you enforce your Internet usage policies. Filtering rules can vary depending on department or user and access can be granted to category of site, web site or individual pages. Web sites (in multiple languages) are categorised into types so you can decide what type of information your staff should have access to. The web site list is updated regularly and there is a tool to allow the automatic review of unknown sites accessed by your staff.  You can define time periods for access to different types of site. Downloads can be restricted to approved file types  and size only and you can manage streaming video.  Email notifications can be sent to administrators when the Internet policies are breached. For more information go to http://www.surfcontrol.com.

 

Sybari Antigen

This is an interface product allows you to use you own choice (or choices as multiple scanners can be used) of virus protection. Many advanced configuration and management features are available allowing for effective protection of Exchange (using Microsoft's VSAPI), Sharepoint and Notes. It includes file and content filtering for protection against, as yet, unknown viruses and compliance with your corporate email policies. For more information go to http://www.sybari.com.

 

Symantec Web Security

This product scans HTTP and FTP traffic for viruses, malicious code and inappropriate content. It supports your anti-virus and Internet usage policies. For further information, including evaluation copies of the software, go to http://ww.symantec.com.

 

Symantec AntiVirus / Filtering for Microsoft Exchange

The product detects and removes viruses and filters inappropriate email content in Microsoft Exchange servers. It includes automated scanning and repair capabilities and  checks both incoming and outgoing email (and attachments) before they can be accessed by the operating system. It can also use content security mechanisms to block emails with inappropriate attachment names, content, or extensions. This can help enforce bot your email and anti-virus policies.

Management is via and HTML interface with options for automated signature updates from the Internet. For further information, including evaluation copies of the software, go to http://ww.symantec.com. Also available for Lotus Notes/Domino.

 

WebSense Enterprise

This is an Internet management product. It is integrated with your firewall or proxy / caching server and allows/denies access to requested web sites. Web pages are categorised in a database and access can be granted/denied based on is categorisation. You can block, allow (either all the time of at specific times of the day) access to the various types of information on the Internet. Sites are added to the database daily reducing the chances of new sites bypassing the system. Sites that are visited but not in the database can be automatically sent to the vendor for analysis and inclusion. Comprehensive reporting and notification is available. For more information go to http://www.websense.com.