McAfee Email Gateway (Formerly Ironmail)

McAfee Email Gateway Overview:

The scale and diversity of email-borne security threats continue to increase. McAfee Email Gateway integrates comprehensive inbound threat protection with outbound data loss prevention, advanced compliance, detailed reporting, and simplified administration. You gain enterprise-class features and performance that scale to meet the most demanding workloads—all with minimal administrative overhead.

Description:

Email is arguably today’s most indispensable communications medium and one of the most business-critical services. It also presents an incredible security challenge to protect the enterprise from external attacks and prevent internal data loss via email.

McAfee Email Gateway integrates comprehensive inbound threat protection with outbound data loss prevention, advanced compliance, detailed reporting, and simplified administration.

McAfee Email Gateway comprises:

TrustedSource™ global reputation intelligence is the service cornerstone of all McAfee gateway security solutions. The world’s most precise and comprehensive Internet host reputation system, TrustedSource continuously monitors and characterizes Internet senders through a global network of more than 10,000 sensors in 82 countries.

McAfee Email Gateway appliances combine inbound threat protection, outbound data loss prevention, advanced compliance, and granular policy creation in a hardened, tightly integrated platform that’s easy to deploy and maintain. A complete range of enterprise (E-class) and medium-capacity (S-class) appliances offer affordable protection and scalability for the most demanding business messaging environments.

Add-on products within the comprehensive McAfee Email Gateway family include:

McAfee Email Gateway Encryption provides policy-based email encryption to automatically encrypt email at the gateway, ensuring that sensitive data stays secure and that even recipients without encryption capabilities are able to receive and reply to secure email.

McAfee Email Edge Gateway appliances are placed at the mail system perimeter to address the issue of rising spam volumes, relieving downstream processing loads and reducing archiving requirements.

McAfee Email Gateway Control Center appliance can be used to centrally manage multiple gateway appliances.

McAfee Email Gateway Quarantine Server appliance provides consolidated quarantine services for multiple gateway appliances.

Benefits and Features:

 

Email Gateway Solutions:

Integrated Security for an Essential Service

Email is arguably today’s most indispensable communication medium and one of the most mission-critical services in any business environment. Its ability to whisk a wide range of information payloads instantly across organizational, geographic, and political boundaries makes it both an essential tool and an extraordinarily security challenge—one that has grown increasingly urgent and complex over time.

Consider the scale and diversity of email security issues:

• More than 80 percent of all email traffic is now spam, and volumes continue to surge. Between March 2006 and 2008, global spam transmissions rose from 15 billion to 176 billion messages daily—more than 1,000 percent growth in just two years.
   
• 20 percent of all spam messages contain attached or embedded malware, or carry links to malicious websites
   
• Inbound email attacks, like all other IT threats, are increasingly the work of organized criminals seeking exploitable information for financial gain. Their attacks employ sophisticated social engineering and morph rapidly to evade conventional signature-based defenses.
   
• External attacks are far from the only threat. Email is a primary vector for confidential and sensitive data loss, whether by well-meaning but careless employees or determined internal malefactors.
   
• Because of its operational importance and widespread vulnerability, email has come under scrutiny by regulators across political and industry boundaries. Existing mandates include payment card (PCI DSS), financial services (GLBA), healthcare (HIPAA), and all U.S. publicly held companies (SOX).

Existing Defenses are Fragmented and Inadequate

Just as the threat environment itself, today’s enterprise email defenses have evolved over time—just not as fast or far. Most comprise a variety of point solutions—anti-virus, anti-spam, anti-spyware—acquired from multiple vendors, separately deployed, and repeatedly rescaled. Many don’t meet current best-practice performance standards. For instance, while leading anti-spam solutions achieve 99 percent or greater spam detection accuracy, many existing defenses only achieve 95 percent or less. While a four percent difference may sound minor, the reality is a 400 percent difference in spam penetration and potential system infections. When spam is measured in the billions of emails, a 4 percent improvement can have marked impact on business. When even a fraction of unwanted email penetrates defenses, users can become sidetracked by sifting through and deleting spam. The burden placed on infrastructure increases, choking bandwidth and overburdened mail infrastructure. The opportunity for malware infections increases, leading to increased costs, lost productivity and potential data loss. More significantly, most existing email security is exclusively inbound focused, and offers no protection whatsoever against outbound data loss.

The inevitable result is that most IT organizations spend too much time and money maintaining piecemeal defenses, demonstrating regulatory compliance, and repairing the aftermath of inadequate email security. There is a compelling business case for a comprehensive email security solution that integrates inbound and outbound defenses, simplifies administration, and streamlines compliance. McAfee® Email Gateway (formerly IronMail®) is that solution.

McAfee Delivers Total Email Protection

McAfee Email Gateway integrates comprehensive inbound threat protection with outbound data loss prevention, advanced compliance, performance reporting, and simplified administration. By combining local network information with global reputation intelligence from McAfee TrustedSource, it provides the most complete protection available against inbound threats, spam and malware. Its sophisticated content scanning technologies, multiple encryption techniques, and granular, policy-based message handling prevent outbound data loss and simplify compliance. Administrators have the flexibility they need to create policies to fit their business, increasing the solutions performance. A single management console with enterprise-class logging and reporting capabilities simplifies administration and compliance workloads to significantly reduce costs.

McAfee Email Gateway provides:

Total inbound protection – It identifies and blocks incoming spam with over 99 percent accuracy while providing integrated protection against viruses, malware, phishing, directory harvest, denial of service, and bounceback attacks. It prevents zero-hour threats and dramatically reduces the impact of spam surges through a potent combination of Dynamic Spam Classifier and Threat Response Updates with TrustedSource global, multi-protocol reputation intelligence.

Total outbound protection – Fingerprinting, lexical analysis, and clustering techniques supplement keyword and pattern matching to provide comprehensive detection of both structured and unstructured data. The gateway accurately identifies regulated content (HIPAA, SOX, GLBA); personally identifiable information such as credit cards, SSNs, and other customer and employee data. Unstructured data and intellectual property such as source code, patents, financial information, and business plans can also be detected and acted upon. Upon detection, it supports a wide range of policy-based actions including forced encryption, alerting, re-routing, quarantining, blocking, and other custom actions.

Total administrative empowerment – McAfee Email Gateway helps administrators deliver the best possible email protection, and document it with enterprise-class reporting, exportable report logs, real-time dashboards, and alerts. It combines performance, scalability, and stability with a flexible delivery model to ensure maximum ROI with minimum administrative overhead.

The McAfee Email Gateway Product Family

TrustedSource® global reputation intelligence is the service cornerstone of all McAfee gateway security solutions. The world’s most precise and comprehensive Internet host reputation system, TrustedSource continuously monitors and characterizes Internet traffic through a global network of more than 7,000 sensors in 82 countries. It profiles all Internet senders, monitors their activity for deviations from expected behavior, and generates a reputation score for every host. Scores are transmitted to McAfee Email Gateway devices worldwide to enable fast, accurate, and adaptive rejection of unwanted traffic.

McAfee Email Gateway appliances combine inbound threat protection, outbound data loss prevention, unified management, and granular compliance capabilities in a hardened, tightly integrated platform that’s easy to deploy and maintain. A complete range of enterprise (E-class) and small/midsize business (S-class) appliances offer affordable protection and scalability for the most demanding business messaging environments.

McAfee Email Gateway Encryption provides policy-based email encryption using a combination of B2B (TLS, S/MIME, and OpenPGP),and B2C technologies (Push/Pull) ensuring that even recipients without encryption capabilities are able to receive and reply to secure email. Applying encryption at the gateway instead of at the desktop eliminates the need for end users to determine encryption requirements, and avoids the common problem of end-users forgetting to encrypt sensitive data.

McAfee Email Edge Gateway appliances are designed specifically to address the issue of rising spam volumes. Positioned at the mail system perimeter, they control traffic based on reputation, dropping up to 80 percent of email traffic at the network edge to relieve downstream processing loads and reduce archiving requirements. Edge Gateway also help to block hackers who employ methods such as denial-of-service attacks, Telnet or ping attacks, and buffer overflow attacks. They have been intentionally designed to work with any email security solution, in any customer environment.

The McAfee Email Gateway Control Center appliance can be used to centrally manage multiple McAfee Email Gateway appliances.

The McAfee Email Gateway Quarantine Server appliance provides consolidated quarantine services for multiple McAfee Email Gateway appliances, relieving storage and processing workloads with capacity for up to 1.5 million messages.

Integrated Security = Optimum Value

McAfee Email Gateway is ideal for simplifying fragmented, multi-vendor security environments and reducing operating costs—while significantly strengthening security. It consolidates inbound threat protection, outbound data loss prevention, Advanced Compliance, and administration in a single easy-to-deploy appliance. You receive industry’s most comprehensive feature set—at no additional cost.

Core capabilities include:

• Anti-spam protection with over 99 percent spam detection accuracy, made possible by the unique combination of local network information with TrustedSource global reputation intelligence. The gateway’s anti-spam capability handles spam surges and can help reduce archiving, malware cleanup and bandwidth costs by as much as $300,000 annually for a 1,000-employee organization.
   
• Anti-virus protection based on the McAfee Email Anti-virus engine. For enterprises wishing to deploy a second anti-virus vendor at the gateway, McAfee Email Gateway can also run Authentium anti-virus.
   
• Data loss prevention (DLP) and Advanced Compliance that integrates keyword and pattern matching with advanced document compliance based on fingerprinting, advanced lexical analysis, and clustering—all included in the base solution price.
   
• Gateway-to-gateway encryption with TLS, S/MIME and OpenPGP engines all included in the basic subscription price.
   
• Webmail protection that extends integrated security to Outlook Web Access, iNotes and other common webmail applications.
   
• Image analysis that provides complete detection and policy enforcement for pornographic images in both inbound and outbound messages.
   
• Backscatter protection that identifies and blocks false non-delivery notices forged by viruses and spammers.
   
• Pre-built dictionaries and document training tools jumpstart your data loss prevention efforts by helping the gateway automatically learn what types of data and documents are confidential, and which aren’t.

Administrative Empowerment

One of the most important impacts of McAfee Email Gateway is the way it secures the messaging environment and delivers ongoing value without constant and costly attention by the IT organization. Installation wizards simplify set-up and configuration, and McAfee’s Threat Response Update service delivers reputation, rule, and dictionary updates automatically. Dynamic Spam Classifier updates spam filtering techniques within 20 minutes of new threat detection, without administrator involvement. Administrators are empowered with the flexibility to create policies to fit their business. A detailed dashboard, customized alerting capabilities, and extensive reporting deliver critical management information swiftly and intuitively.

Total Email Protection for Every Enterprise

McAfee Email Gateway provides the comprehensive protection from inbound threats, prevents the loss of sensitive information via email, and simplifies compliance with internal policies and regulatory mandates. You gain enterprise-class features and performance in an easy-to-deploy appliance that scales to meet the largest and most demanding workloads—all with minimal administrative oversight and expense. Its unique combination of functionality, performance, reliability, and value have made McAfee Email Gateway the email security solution of choice for more than half of Fortune 500 IT organizations.

System Specifications:

McAfee Email Gateway is delivered as a hardened appliance that sits in front of your existing mail server, providing protection from inbound email-borne threats and outbound data leakage.