For Exchange/SMTP

Transcription

for Exchange/SMTPfor Exchange/SMTPfor Exchangefor Exchange/SMTPNetwork Security ScannerSecurity Event Log Monitorfor ISA Server

Overview of GFI productsAnti-spam for Exchange, anti-phishing and email managementGFI MailEssentials for Exchange/SMTP offers spam and phishing protection and email management at server level. GFIMailEssentials offers a fast set-up and a high spam detection rate using Bayesian analysis and other methods - noconfiguration required, very low false positives through its automatic whitelist, and the ability to automatically adapt toyour email environment to constantly tune and improve spam detection. GFI MailEssentials also adds emailmanagement tools to your mail server: disclaimers, email archiving and monitoring, Internet mail reporting, list server,server-based auto replies and POP3 downloading.Email anti-virus, content policies, exploit detection and anti-trojanGFI MailSecurity for Exchange/SMTP is an email content policies, exploit detection, threats analysis and anti-virussolution that removes all types of email-borne threats before they can affect your email users. GFI MailSecurity's keyfeatures include multiple virus engines, to guarantee higher detection rate and faster response to new viruses; emailcontent and attachment checking, to quarantine dangerous attachments and content; an exploit shield, to protect againstpresent and future viruses based on exploits (e.g., Nimda, Bugbear); an HTML Sanitizer, to disable HTML scripts; aTrojan & Executable Scanner, to detect malicious executables; and more.Email archiving of internal and external emailGFI MailArchiver for Exchange provides easy-to-use corporate email archiving, enabling you to archive all internal andexternal mail into one or multiple SQL databases, heavily reducing reliance on PST files. This allows you to provideusers with easy, centralized access to past emails via a web-based search interface and the ability to quickly restoreemails through a OneClick Restore process. GFI MailArchiver also aids you to easily fulfill regulatory email storagerequirements (such as the Sarbanes-Oxley Act). GFI MailArchiver for Exchange leverages the journaling feature ofExchange Server 2000/2003 and therefore provides unparalleled scalability and reliability at a competitive cost.Network fax server for Exchange/SMTPGFI FAXmaker for Exchange/SMTP is the leading network fax server. It integrates with Exchange Server, Lotus Notesand popular SMTP servers, allowing users to send and receive faxes and SMS/text messages directly from their emailclient. By leveraging your email infrastructure and Active Directory, GFI FAXmaker achieves unparalleled scalability,reliability and hassle-free administration. GFI FAXmaker has won the Windows IT Pro Magazine (formerly Windows &.NET) Readers' Choice Award for 3 years running.Network security scanner, port scanner and patch managementGFI LANguard Network Security Scanner (N.S.S.) checks your network for possible security vulnerabilities by scanningyour entire network for missing security patches, service packs, open shares, open ports, unused user accounts andmore. With this information (displayed in customizable reports), you can easily lock down your network against hackers.GFI LANguard N.S.S. can also remotely deploy missing patches and service packs in applications and OS. GFILANguard N.S.S. is the leading Windows security scanner and very competitively priced.

Network-wide event log monitoringGFI LANguard Security Event Log Monitor (S.E.L.M.) performs event log based intrusion detection and network-wideevent log management. GFI LANguard S.E.L.M. archives and analyzes the event logs of all network machines and alertsyou in real time to security issues, attacks and other critical events. GFI LANguard S.E.L.M.'s intelligent analysis meansyou do not need to be an 'Event Guru' to be able to: Monitor users attempting to access secured shares and confidentialfiles; Monitor critical servers and create alerts for specific events and conditions occurring on your network; Back up andclear event logs automatically on remote machines; Detect attacks using local user accounts; and much more!Network-wide control of portable storage, media and consumer electronic devicesGFI EndPointSecurity offers you network-wide control of data flow via portable storage devices, allowing you to preventusers from taking confidential data or introducing viruses and Trojans to your network. GFI EndPointSecurity allows youto actively manage user access to media players (including iPod and Creative Zen), USB sticks, CompactFlash, memorycards, PDAs, Blackberries, mobile phones, CDs, floppies and more.Network monitoringGFI Network Server Monitor automatically monitors your network and servers for failures and allows administrators to fixand identify issues before users report them. Alerts can be sent by email, pager or SMS. Actions, such as rebooting amachine, restarting a service or running a script, can be done automatically.Real-time HTTP/FTP monitoring, anti-virus & access controlGFI WebMonitor is a utility for Microsoft ISA Server that allows you to monitor the sites users are browsing and what filesthey are downloading – in REAL TIME. In addition it can block access to adult sites as well as performing anti-virusscanning on all downloads. GFI WebMonitor is the perfect solution to transparently exercise a degree of access controlover users’ browsing habits and ensure legal compliance – in a manner that will not alienate your network users!

for Exchange/SMTPAnti-spam for Exchange, anti-phishing and emailmanagementWith fraudulent, inappropriate and offensive emails being delivered in vast quantities to businessesevery day, anti-spam software is a vital component of your network security strategy. Spam wastesnetwork users’ time and network resources, and can also be dangerous. GFI MailEssentials offers antispam for Exchange server and other email servers and eliminates the need to install and updateanti-spam software on each desktop.GFI MailEssentials offers a fast set-up and a high spam detection rate using Bayesian filtering and othermethods – no configuration required, very low false positives through its automatic whitelist, and theability to automatically adapt to your email environment to constantly tune and improve spam detection.GFI MailEssentials will eliminate over 98% of the spam from your network! GFI MailEssentials alsodetects and blocks phishing emails through a system of Uniform Resource Identifier (URI) and keywordchecks. In addition to anti-spam filtering and anti-phishing protection, GFI MailEssentials also addsemail management tools to your mail server: disclaimers, mail monitoring, Internet mail reporting, listserver, server-based auto replies and POP3 downloading.Server-based anti-spam and anti-phishingGFI MailEssentials is server-based and installs on themail server or at the Gateway, eliminating the deploymentand administration hassle of desktop-based anti-spamand anti-phishing products. Desktop-based softwareinvolves training your users to create anti-spam rule sets,and subsequently users have to spend time updatingthese rules. Besides, this system does not prevent yourserver message stores from filling up with spam.Features & benefitsHighest spam detection rate (98%) because of itsBayesian filtering technologyLowest false positives through its patent pendingauto whitelist featureServer-based install, no client software requiredAllows users to review email marked as spam fromjunk mail folder#1 server anti-spam solution @ unbeatable pricing:USD 450 (25), USD 1195 (100), USD 5000 (1000)mailboxes.Bayesian filtering technologyBayesian filtering is widely acknowledged by leadingexperts and publications as the best way to catch spam.A Bayesian filter uses a mathematical approach based onknown spam and ham (valid email). This gives it atremendous advantage over other spam solutions thatjust check for keywords or rely on downloadingsignatures of known spam. GFI’s Bayesian filter uses anadvanced mathematical formula and a dataset which is‘custom-created’ for your installation: The spam data iscontinuously updated by GFI and is automaticallydownloaded by GFI MailEssentials, whereas the hamdata is automatically collected from your own outboundmail. This means that the Bayesian filter is constantlylearning new spam tricks, and spammers cannotcircumvent the dataset used. This results in a 98 %spam detection rate, after the required two-week learningperiod. In short, Bayesian filtering has the followingadvantages:· Looks at the whole spam message, not just keywordsor known spam signatures· Learns from your outbound email (ham) and thereforegreatly reduces false positives· Adapts itself over time by learning about new spamand new valid email· Dataset is unique to your company, making itimpossible to bypass· Multilingual and international.Downloads updates to spam profile databaseGFI MailEssentials can download updates to theBayesian spam profile database from the GFI site,ensuring that it recognizes the latest spam and spammingtechniques. GFI maintains the spam profile database byworking with a number of spam collection organizationsthat continually supply spam samples.

GFI MailEssentials configurationProtect your users against the menace of phishing emailsGFI MailEssentials provides the ability to detect and block threats posed byphishing emails through its Phishing URI Realtime Blocklist (PURBL). The GFIMailEssentials PURBL detects phishing emails by comparing Uniform ResourceIdentifiers (URIs) present in the email to a database of URIs which are known to beused in phishing attacks, and also by looking for typical phishing keywords in theURIs.Sort spam to users' junk mail foldersGFI MailEssentials gives you the flexibility to choose what to do with spam. Youcan delete it, move it to a folder, forward the spam mail to a public email address orfolder, or send it to individual customizable folders (for example, a “junk mail”folder) in the end-users’ inboxes. This allows users to easily review mail that hasbeen flagged as spam.Users can review spam emailList server for newsletter lists and discussion listsA list server is the best method for distributing company newsletters, since itautomates the process of allowing users to subscribe and unsubscribe (required byanti-spam regulations). However, until now, list servers have been expensive anddifficult to administer and they did not integrate with Exchange Server. GFIMailEssentials integrates with Exchange and can use Microsoft Access or MicrosoftSQL Server as the backend. Both newsletter lists and discussion lists aresupported.Easy tuning of the Bayesian engine via public foldersAdministrators can easily tune the Bayesian engine by dragging and dropping spamor ham to the appropriate public folder. GFI MailEssentials learns from the spamand ham that it picks up from these folders and further improves its spam detectionrate. Administrators can control access to this feature through the use of PublicFolder security.Newsletter list optionsAllow users to whitelist or blacklist via public foldersGFI MailEssentials allows users to whitelist or blacklist senders simply by draggingand dropping the appropriate mail to a public folder. This gives users more controland reduces administration. Administrators can control access to this featurethrough the use of Public Folder security.Email header analysis & keyword checkingGFI MailEssentials intelligently analyzes the email header and identifies spambased on message field information. It detects forged headers, encoded IPs, spammutation, spam sent from invalid domains, and more. It also enables you toconfigure keywords to check for spam using keyword checking.3rd party DNS blacklists (DNSBL) checkingGFI MailEssentials supports DNS blacklists (real time black hole lists), which aredatabases of known spammers. If the sending mail server is on one of those lists, itmarks the email as spam. GFI MailEssentials supports popular third party blacklistssuch as ORDB, SpamHaus, Spamcop and also enables administrators to configurecustom RBL servers.Search email archive from anywhere viathe web-based interfaceCheck email headers for spam practicesSupport for multiple 3rd party SURBL serversGFI MailEssentials checks email content against SURBL servers. Administratorscan configure multiple SURBL servers, add their own and also define the priority ofwhich server should be checked first. More information on SURBL can be found athttp://www.surbl.org.Automatic whitelist management reduces false positivesWhitelists enable you to ensure that email from particular senders or domains arenever flagged as spam, permitting more stringent anti-spam rules. GFIMailEssentials includes a patent-pending automatic whitelist management tool,which automatically adds outgoing mail recipients to your whitelist. This greatlyreduces false positives, without any need for additional administration. Whitelistscan also be built based on domain names, email addresses and keywords.Instant view of emails from new sendersThe New Senders feature provides users with an instant view of emails sent frompeople they never had previous contact with, thereby helping users to betterorganize emails in their email client. If an email is not found to be spam by the GFIMailEssentials anti-spam modules and is also not on the whitelist, then the NewSenders module has the ability to move the email to a user's subfolder, forexample, Inbox\NewSenders.

Eliminates directory harvestingSpammers often try to guess recipient addresses bygenerating multiple random email addresses at a domain;they then send their spam mail to all those addresses.GFI MailEssentials checks the validity of ALL the emailaddresses included in the mail sent, either via a query toActive Directory or through support for LDAP, and if theyare not all valid, marks the mail as spam.Reports on spam filtering and email usageThe database-driven reporting engine allows you tocreate advanced reports on your inbound and outboundemail. You can report on the amount of spam filtered andon rules which caught most spam. You can also generatereports on user, domain and mail server usage.Support for SPF - the Sender Policy FrameworkAs most of today’s spammers spoof email addresses, it isimportant to be able to check whether an email is genuineor if it has been sent from a forged sending address. Thiscan be done via the Sender Policy Framework (SPF),which allows users to test whether a particular emailoriginates from its claimed source. GFI MailEssentials isone of the first commercial anti-spam solutions to supportthis framework. Its SPF module automatically checkswhether the mail from a particular company was actuallysent by its registered mail servers. For more on SPF, visithttp://www.openspf.org.Set priorities for each anti-spam moduleYou can configure which method of capturing spam is tobe given priority, and create your own hierarchical list.For example, the administrator can select that thewhitelisting anti-spam feature must be applied first to allincoming mail, then Bayesian scanning, and so on.Email monitoringThe email monitoring feature enables you to keep acentral store of the email communications of a particularperson or department. By configuring the mail to becopied to an email address, all email can be stored in anExchange or Outlook store, making searching for email orcontent easy.Email archiving to a SQL databaseGFI MailEssentials can archive all inbound and outboundmail to a Microsoft SQL Server database. You can searchfor a particular email or an entire email thread via theincluded web interface. Mail archiving is essential forback-up and search reasons. For a complete emailarchiving solution, please check out GFI MailArchiver forExchange.Seamless integration with Exchange Server2000/2003 & 5.5GFI MailEssentials integrates seamlessly with MicrosoftExchange 2000/2003: It installs on the Exchange SMTPservice and does not require gateway configuration. Viathe SMTP protocol, it also works with Exchange 5.5,Lotus Notes and other popular SMTP/POP3 servers.Content checking, anti-virus & anti-trojanGet anti-virus, email content checking and anti-trojanprotection for your mail server with the GFI MailEssentials& GFI MailSecurity Suite. GFI MailSecurity forExchange/SMTP is an email content checking, exploitdetection, threats analysis and anti-virus solution thatremoves all types of email-borne threats before they canaffect your email users.Company-wide disclaimer/footer/header textGFI MailEssentials enables you to add disclaimers to thetop or bottom of an email. Text and HTML formats aresupported. You can include fields/variables to personalizethe disclaimer. You can also create multiple disclaimersand associate them with a user, group or domain.ReviewsSystem requirementsWindows Server 2003 certification for GFIMailEssentialsGFIMailEssentialsforExchange/SMTP has achieved the Windows Server2003 certification from Microsoft Corp throughVeriTest. This certification is based on an establishedtechnical standard to identify software applicationsthat are secure and manageable, and that run reliablyon the Microsoft Windows family of operatingsystems. GFI MailEssentials met these rigorousrequirements after being tested by VeriTest: ”Thiscertification through VeriTest provides GFI customersadded confidence in their purchase of GFIMailEssentials,” said Katrina Teague, Vice Presidentof Marketing and Solutions at VeriTest.· Windows 2000/2003 - Pro, Server or Advanced Server orWindows XP Professional.· IIS5 SMTP service installed and running as an SMTP relay to yourmail server.· Microsoft Exchange server 2000, 2003, 4, 5 or 5.5, Lotus Notes4.5 and up, or an SMTP/POP3 mail server.· For the list server feature, Microsoft Message Queueing Servicesis required.- VeriTest, July 2005Download your evaluation version from http://www.gfi.com/mes/

for Exchange/SMTPEmail anti-virus, content policies, exploit detection andanti-trojanThe need to monitor email messages for dangerous, offensive or confidential content has never beenmore evident. The most deadly viruses, able to cripple your email server and corporate network inminutes, are being distributed worldwide via email in a matter of hours. Products that perform singlevendor anti-virus scanning do not provide sufficient protection. Worse still, email has become the meansfor installing backdoors (trojans) and other harmful programs to help potential intruders break into yournetwork. Products restricted to a single anti-virus engine will not protect against email exploits andattacks of this kind.Your only defense is to install comprehensive granular user-based email content policy and anti-virussoftware to safeguard your mail server and network. GFI MailSecurity acts as an email firewall andprovides mail security by protecting you from email viruses, exploits and threats, as well as email attackstargeted at your organization.GFI MailSecurity may be deployed in Gateway or VS API mode. The gateway version should bedeployed at the perimeter of the network as an email relay server and scans inbound and outboundmail. The VS API version integrates seamlessly with Exchange Server 2000/2003 and scans theExchange information stores.Virus checking with multiple virus scanning enginesGFI MailSecurity uses multiple virus scanners to scaninbound email. Using multiple scanners drasticallyreduces the average time to obtain virus signatures whichcombat the latest threats, and therefore greatly reducesthe chances of an infection. The reason for this is that asingle anti-virus company can never ALWAYS be thequickest to respond. For each outbreak, virus companieshave varying response times to a virus, depending onwhere the virus was discovered, etc. By using multiplevirus engines, you have a much better chance of havingat least one of your virus engines up-to-date and able toprotect against the latest virus. In add

Network monitoring GFI Network Server Monitor automatically monitors your network and servers for failures and allows administrators to fix and identify issues before users report them. Alerts can be sent by email, pager or SMS. Actions, such as rebooting a machine, restarting