This section provides information on some of
the content security products available for businesses. They restrict access to viruses
and malicious code, inappropriate web sites or content, unauthorised file types and
help prevent data loss and time wasting.
Brightmail Solution Suite
The Brightmail solution is intended to
provide protection for large organisations or to be deployed by ISP's who wish to provide
content security solutions for their customers.
Brightmail Content Filtering
This is solution is designed to help ISP's
and large manage email content and help reduce legal liability. Administrators configure
mail rules to block, bounce, forward etc. based on file types/names/size, text
in the Subject Line or Body of the message (to check for profanity or racist terms for
instance), sender or recipient. It also checks the message against the Brightmail Anti Spam and Anti Virus systems.
You can let staff/customers configure personal rules to further manage their own mail.
This is solution is designed to help ISP's
and large organisations combat spam. A dedicated server filters messages before they reach
your email server. Brightmail have a network that collects Spam from around the world.
Their experts analyse it, writes rule sets to allow it to be blocked and then send the
information as updates to the Brightmail server at your site (they state that this can be
as often as every 5 minutes). The risk of false positives is reduced as the rules are
defined for individual Spam messages and not generic types of message. For more
information go to http://www.brightmail.com/products_antispam.html.
This is solution is designed to help ISP's
and large organisations combat viruses and malicious code in email. A dedicated server
filters messages before they reach your email server. It uses Symantec anti-virus
technology and expertise along with the Brightmail infrastructure to block / clean
infected email. Updates occur automatically on a regular basis ensuring protection against
the newest viruses. A lot of the latest viruses and worms contain stock phrases and file
names in the email hosting the infection. The Brightmail network that identifies Spam also
identifies this textual content, adding a further level of protection. For more
information go to http://www.brightmail.com/products_antivirus.html.
This is a suite of tools to support your
corporate email policies. Email can be monitored for compliance and delivered depending on
the results. You can filter email based on textual content, attachment file type and
whether there is a virus within the message or attachment (this uses third party scanners
for compliance with your anti-virus policies). Options include blocking, removing and
administrative notification when email breaching policy is detected. Attachment files size
can be limited, reducing bandwidth issues, anti-spoof, anti-spam and anti-relay functions
are also available. Legal disclaimers can be added to outgoing messages to help
reduce your legal liability. Rules can be set for everyone or based on senders /
recipients. Reporting allows you to check how your email system is being used. Email based
virtual private networks can be created to ensure secure communications between business
partners. Information classification and protective marking schemes can be enforced
ensuring that sensitive information as treated appropriately. Archive management is also
available as is joint system management and delegated responsibility for various aspects
of the system. For more information go to http://www.clearswift.com
Clearswift MailGuard
This is suitable for small to medium sized
enterprises where ES Enterprise Suite is too
extensive. Email can be monitored for compliance and delivered depending on the
results. You can filter email based on textual content, attachment file type and whether
there is a virus within the message or attachment (this uses third party scanners for
compliance with your anti-virus policies). Options include blocking, removing and
administrative notification when email breaching policy is detected. Attachment files size
can be limited, reducing bandwidth issues, anti-spoof, anti-Spam and anti-relay functions
are also available. Potentially malicious active content can also be managed. Rules can be
set for everyone or based on senders / recipients / departments / domains. For more
information go to http://www.clearswift.com
Clearswift MIMEsweeper
MIMEsweeper is a family of Content Security
products designed to protect your email and web based communications. Each product in the
family is available separately.
This product allows you to technically
enforces your email usage policies and is available for Exchange, Domino and SMTP. It
allows you to specify who is allowed to send and receive certain file types (executables,
videos, pictures, mp3s compressed files etc.), encrypted material or confidential
documents. The system breaks down attachments into components and can see inside
multi-layer files with embedded objects (including zip files). Text lists are used to
block profanity, SPAM (real-time black list servers can also be used) and virus hoaxes. It
can scan text, putting it in context during analysis to reduce false positives. Viruses
are stopped through the use of 3rd party scanners (for compliance with you anti-virus
policy). Anti-spoof and anti-relay functionality is also available.Attachment files size
can be limited. Delivery of large emails can be deferred to quite times, ensuring
bandwidth is available for all users during office hours. Email disclaimers can be added
to outgoing mail to help reduce legal liability. Rules can be set for everyone or
based on senders / recipients / departments / domains. Potentially malicious active code
can also be blocked. Email can be blocked or annotated according to your policy and
notifications can be sent to administrators. Reporting tools are available to let you know
how your systems are being used. For more information go to http://www.clearswift.com.
PORNsweeper
This is a plug-in for MAILsweeper
for SMTP that analyses pictures within email and attachments (and embedded objects
within these attachments for content. It can detect pornographic / inappropriate images by
analysing the fleshtone, the amount of bare flesh and elements of facial expression. For
more information go to http://www.clearswift.com.
SECRETsweeper
This is an encryption and digital signature
solution for MAILsweeper. It ensures that, although information
is encrypted/decrypted at your gateway, only content acceptable to your organisation is
allowed in or out. For more information go to http://www.clearswift.com.
WEBsweeper
This is the web "sister" to MAILsweeper. It is a technical solution enforcing your corporate
Internet usage policy. URL filtering (optional) can ensure staff only browse appropriate
web sites, keeping them away from inappropriate content and reducing time wasting. Sites
are categorised by type (in multiple languages) and Groups/users can be blocked from
viewing sites (all or some) within the categories. One use of this type of facility would
be to block access to web based email, supporting your email policy and ensure that
sensitive information is not leaked "through the back door". Can also allow
access based on PICS ratings and time of day (allow access to non-business related sites
at lunch time for instance). Updates to the URL database can be downloaded automatically.
Text can be scanned for inappropriate phrases, reducing access to inappropriate
sites/downloads. It can scan text, putting it in context during analysis to reduce false
positives. Allowable download file types can be configured to stop staff access
executables. videos, pictures, mp3s etc. The system breaks downloads into components and
can see inside multi-layer files with embedded objects (including zip files). Data is
virus checked using third party scanners, supporting your anti-virus policies. Potentially
malicious active code can be blocked as can cookies. Messages can be displayed on the
screen when content is stopped and notifications can be sent to administrators.Reporting
tools are available to let you know how your systems are being used. For more information
go to http://www.clearswift.com.
This email filter that helps you reduce
corporate liability and enforce your email usage policies. Unlike other solutions that
only block content coming into or out of your organisation, Message Inspect can filter
interoffice email. It can scan text, putting it in context during analysis to reduce false
positives. You can also specify attachment types to block and message / attachment size
limits. Disclaimers can be added to email to further reduce your legal liability. The Spam
filter reduces the issues caused by unsolicited email. A number of options are available
for email breaching corporate policy. These include blocking, redirecting to an
administrator or tagging as Spam. Notifications can be sent to relevant individuals when
the policy is breached and comprehensive reports let you understand how your system is
being used. Integrates with IM Antivirus and
other Elron products. For more information, a free trial or to purchase the software go to
http://www.elronsw.com/.
Elron IM Web Inspector
This internet filtering software helps you
reduce corporate liability and enforce your Internet usage policies. It uses a database
containing the most widely used web sites, categorised by type which can be added to by
you (sites and categories). Sites and individual pages can be added. The system also scans
pages for inappropriate content and blocks depending on its findings. Rules can be set up
for times of day so you could allow staff to access non-business related sites at lunch
time for instance (if that was compatible with your corporate usage policy). Notifications
can be sent to administrators when pages are blocked and custom messages can be displayed
to users. Comprehensive reporting lets you identify how your systems are being used. For
more information, a free trial or to purchase the software http://www.elronsw.com/.
GFI Mail Essentials
This systems protects email against viruses
exploited vulnerabilities and other threats on Microsoft Exchange (using VSAPI) or SMTP.
Comes complete with the Norman Virus scanning engine and incoming and outgoing email is
scanned. Potentially malicious email attachments (such as executables of visual basic
script) can also be quarantined based on the files format and not just the attachment
name. The content security functionality is further enhanced with the ability to remove
unauthorised attachment types (such as mp3's), offensive text or confidential information
(using keyword checking). Rules can be set up for individuals and groups to ensure that
those who needs access to file types etc can get it whilst unauthorised access is blocked.
Anti-SPAM technology protects your organisation from unsolicited email.The system can also
put disclaimers in all outgoing email to held reduce your legal liability. For more
information go to http://gfisoftware.com.
GFI Mail Security
This systems protects email against viruses
exploited vulnerabilities and other threats on Microsoft Exchange (using VSAPI) or SMTP.
You can use multiple Scanning engines ( Norman Virus Control and Bitdefender come with the
application and McAfee can also be used) to increase protection. Potentially malicious
email attachments (such as executables of visual basic script) can also be quarantined.
The content security functionality is further enhanced with the ability to remove
unauthorised attachment types (such as mp3's), offensive text or confidential information
(using keyword checking). Rules can be set up for individuals and groups to ensure that
those who needs access to file types etc can get it whilst unauthorised access is blocked.
Anti-SPAM technology protects your organisation from unsolicited email. Statistics
of events can be analysed and reported. The system can also put disclaimers in all
outgoing email to held reduce your legal liability. For more information go to http://gfisoftware.com.
Norton AntiVirus for Gateways
The product detects and removes viruses and
filters inappropriate email content in Microsoft Exchange servers. It includes automated
scanning and repair capabilities and checks both incoming and outgoing email (and
attachments) before they can be accessed by the operating system. It can also use content
security mechanisms to block emails with inappropriate attachment names, content, or
extensions. This can help enforce both your email and anti-virus policies.
Management is via and HTML interface with
options for automated signature updates from the Internet. For further information,
including evaluation copies of the software, go to http://ww.symantec.com.
McAfee Webshield
These are hardware and software integrated
products sized depending on your enterprise. In addition to anti-virus they include
features such as content filtering, URL blocking and anti-spam. They can be remotely
managed and can be updated over the Internet.
In addition to the appliances, WebShield is
also available for Solaris (HTTP, FTP and SMTP) and NT (SMTP only). WebShield e500 ASaP
includes VirusScreen technology for email protection.
Further information can be found at http://www.mcafeeb2b.com.
MessageLabs SkyScan AP
All incoming and outgoing email is routed
through the MessageLabs service which checks email for pornographic images. It uses
artificial intelligence technology to check the content of any pictures. It analysis
aspects of the pictures such as poses, clothes and facial expressions. You can
remotely configure the sensitivity of the service (and even turn it off). There are
options for the treatment of suspect images. They can be labelled, deleted, redirected or
copied to an administrator. Online statistics can be viewed online. For more information
go to http://www.messagelabs.com.
MessageLabs SkyScan AS
All incoming and outgoing email is routed
through the MessageLabs service which checks for unsolicited email (Spam). It uses
publicly available SPAM black lists and your own configuration (IP addresses, domains
names, email addresses). Configuration can be done remotely from your site. You can mark
the email as Spam and deliver it, redirect it or delete it. For more information go to http://www.messagelabs.com.
This is an enterprise wide anti-virus
solution available for Workstations, file and email servers. It scans disks, memory,
email (including Exchange/Outlook, MS Internet Mail and SMTP), FTP and HTTP,
archived files and scripts. Scans inside password protected Office documents. Uses
heuristic technology to detect unknown viruses and can be set to automatically disinfect
viruses if found. data travelling via the Internet is scanned before it can be accessed by
the operating system or controlling application. Centralised management, reporting and
updating (via the Internet) is available. Content Security functions are available to stop
access to email containing inappropriate text / attachment type or compressed files over a
specified size. Web content security functions ( web site blocking via either URL or site
content is being developed). For more information, an evaluation of the product or to
purchase it go to http://www.mwti.net/escan.asp.
Microworld MailScan
This product is positioned between the
Internet and your email server to scan email both inbound and outbound. It scans
attachments and HTML email messages and heuristics technology checks for unknown
viruses. It uses the workstation version of eScan
as the antivirus component and can be set to automatically disinfect attachments and
deliver to the intended recipient. If the virus cannot be disinfected, or is a known
malicious file (as opposed to an infected file)the attachment can be either automatically
quarantined or deleted. Automated notifications are sent to the sender, recipient
and administrator in the event of a virus being discovered. All email can be checked
for inappropriate words or phrases and oversize files can automatically be compressed
(incoming files can be automatically uncompressed). Policies can be set up to content
check only certain recipients or even block emails from/to certain domains. Policy rules
are broken into two parts, a product rule set that is defined by Microworld and a company
rule set that is defined by the administrators. Anti-Virus, wordlist and policy updates
can automatically be downloaded from the Internet. Events (incidents, updates etc)
are logged for analysis. Is available for many email servers including Exchange and
SMTP. For more information, an evaluation of the product or to purchase it go
to http://www.mwti.net/mailscan.asp.
SurfControl SuperScout Email Filter
This product helps you enforce your email
usage policies. Attachments can be restricted to approved file types only. Text is
analysed by 15 dictionaries checking for different categorised of inappropriate
words/phrases and you can add your own words or phrases. Disclaimers can be added to
further reduce your legal liability. Delivery of large emails can be deferred to quite
times, ensuring bandwidth is available for all users during office hours. 3rd party
anti-virus tools can be used (in compliance with your anti-virus policy). Notification can
be sent to administrators when the email policy has been breached. Email can be blocked,
deleted or allowed through depending on your requirements. Reports let you see exactly how
you email system is being used. Options exist for Spam and pornographic image
filtering. Another tool allows you to ensure that company confidential information is not
leaked out of your organisation by email. This is available for Microsoft Exchange
and SMTP. For more information go to http://www.surfcontrol.com.
SurfControl SuperScout Web Filter
This product helps you enforce your Internet
usage policies. Filtering rules can vary depending on department or user and access can be
granted to category of site, web site or individual pages. Web sites (in multiple
languages) are categorised into types so you can decide what type of information your
staff should have access to. The web site list is updated regularly and there is a tool to
allow the automatic review of unknown sites accessed by your staff. You can define
time periods for access to different types of site. Downloads can be restricted to
approved file types and size only and you can manage streaming video. Email
notifications can be sent to administrators when the Internet policies are breached. For
more information go to http://www.surfcontrol.com.
Sybari Antigen
This is an interface product allows you to
use you own choice (or choices as multiple scanners can be used) of virus protection. Many
advanced configuration and management features are available allowing for effective
protection of Exchange (using Microsoft's VSAPI), Sharepoint and Notes. It includes
file and content filtering for protection against, as yet, unknown viruses and compliance
with your corporate email policies. For more information go to http://www.sybari.com.
Symantec Web Security
This product scans HTTP and FTP traffic for
viruses, malicious code and inappropriate content. It supports your anti-virus and
Internet usage policies. For further information, including evaluation copies of the
software, go to http://ww.symantec.com.
Symantec AntiVirus / Filtering for
Microsoft Exchange
The product detects and removes viruses and
filters inappropriate email content in Microsoft Exchange servers. It includes automated
scanning and repair capabilities and checks both incoming and outgoing email (and
attachments) before they can be accessed by the operating system. It can also use content
security mechanisms to block emails with inappropriate attachment names, content, or
extensions. This can help enforce bot your email and anti-virus policies.
Management is via and HTML interface with
options for automated signature updates from the Internet. For further information,
including evaluation copies of the software, go to http://ww.symantec.com.
Also available for Lotus Notes/Domino.
WebSense Enterprise
This is an Internet management product. It
is integrated with your firewall or proxy / caching server and allows/denies access to
requested web sites. Web pages are categorised in a database and access can be
granted/denied based on is categorisation. You can block, allow (either all the time of at
specific times of the day) access to the various types of information on the Internet.
Sites are added to the database daily reducing the chances of new sites bypassing the
system. Sites that are visited but not in the database can be automatically sent to the
vendor for analysis and inclusion. Comprehensive reporting and notification is available.
For more information go to http://www.websense.com.
