Transcript IronPort Product Presentation

Messaging
Security
MULTI-LAYER DEFENSE.
BEST-OF-BREED OPTIONS.
09/16/08
Lisa Farmer, Cedo Vicente, Eric Ahlm
IronPort Gateway Security Products
Internet
Internet
IronPort
SenderBase
BLOCK Incoming Threats
APPLICATION-SPECIFIC
SECURITY GATEWAYS
EMAIL
WEB
Security Appliance
Security Appliance
PROTECT Corporate Assets
Data Loss Prevention
Users
Web Security | Email Security | Security Management | Encryption
IronPort Consolidates the
Network Perimeter
For Security, Reliability and Lower Maintenance
Before IronPort
After IronPort
Internet
Internet
Firewall
Firewall
Encryption Platform
MTA
DLP
Scanner
Anti-Spam
Anti-Virus
DLP Policy
Manager
IronPort Email Security Appliance
Policy Enforcement
Mail Routing
Groupware
Users
Groupware
Users
Spam Trends Summary
• In 2007 attackers tested new techniques
• Spam outbreaks happening faster/ highervelocity
• Have spammers settled on URL spam?
Worldwide Spam Trends
Data Loss Prevention
Multi-Faceted Problem
• Regulatory Compliance
–
–
–
HIPAA, GLBA, PCI, SOX Regulations
Scan for sensitive information and block infractions
Secure business partner communication
• Acceptable Use
–
–
–
Block offensive content
Enforce messaging policy (attachment size, etc)
Add legal disclaimers to outgoing mails
• Intellectual Property Protection
–
–
Block messages containing confidential data
Prevent email communications with competitor
“Email has become the de facto filing system for nearly all
corporate information, making it even more critical to protect
the outbound flow of messages.”
─ Brian Burke, Security Products Research Manager, IDC
IronPort PXE: Receiving a Message
Seamless End-User Experience
1. Open Attachment
2. Enter password
3. View message
IronPort PXE: Sending a Message
Instant Deployment, Zero Management Costs
CISCO REGISTERED
ENVELOPE SERVICE
•
•
•
•
•
Automated user enrollment and account creation
User authentication and key delivery
Message Tracking
Secure Reply
NEVER stores email message → highest security
Gartner Magic Quadrant
for Email Security Boundaries, 2008*
Analysis of IronPort Email Security:
•
Cisco/IronPort is the market share
leader with strong growth rates.
•
Spam detection rates for IronPort are
excellent, with very low false-positive
rates.
•
SenderBase has expanded to include
Web URL reputation. The local
connection management policy is very
granular.
•
Email encryption (via the Cisco/PostX
envelope functionality) is provided in
the email security appliance.
•
Scalability and stability are prime
differentiators. IronPort has a large
percentage of very large enterprise
customers.
*Full report available on request.
Next Generation Secure Web Gateway
Before IronPort
After IronPort
Internet
Firewall
Internet
Firewall
Web Proxy & Caching
Anti-Spyware
Anti-Virus
IronPort S-Series
Anti-Phishing
URL Filtering
Policy Management
Users
Users
Integrated L4 Traffic Monitor
Wire Speed Network Layer Scanning for Malware
• Scans all 65,535 ports
at wire speed
• Detects rogue phone
home activity
• Catches malware that
attempts to bypass Port
80
TCP Headers
& Packets
11011111001110010010010111
00110010101110110010000110
10011001110010000
Users
Network Layer
Analysis
L4 Traffic Monitor
AsyncOS for Web
Internet