PROTECTION. ENCRYPTION. LARGE FILES.

Transcription

1 NoSpamProy PROTECTION. ENCRYPTION. LARGE FILES. All features at a glance With its three modules PROTECTION, ENCRYPTION, and LARGE FILES, NoSpamProy offers reliable protection from spam and malware, secure encryption, and the simple and secure sending of large files. In addition to the security modules, the options DISCLAIMER (for signature and disclaimer management) and ADDITIONAL SERVER (for the implementation of high-availability solutions) are also available. NoSpamProy SUITE contains, as a bundle, the modules PROTECTION, ENCRYPTION, and LARGE FILES, as well as the DISCLAIMER option.

2 Content Anti-spam features... 3 Signature and encryption features... 5 Secure transmission of large files... 7 Advanced routing... 8 General features... 8 Reporting Disclaimer Functions available for all NoSpamProy modules as additional option

3 NoSpamProy feature Protection Encryption Large Files Suite Anti-spam features Level of trust (learning outgoing s, address pair formation, also taking into account the entire AD user) Realtime blocklists (RBLs) Filtering for attachments - Filtering based on file name, type, and size; whitelisting possible 4 X - Blocking of the X - Removal of attachments X Uploading of attachments to the Web portal, with optional admin approval 4 4 Apply content filter to files in ZIP archives Different content filters for files transferred via WebPortal 4 Convert Word- and Ecel files to PDF (CDR) Blocking of suspicious IP addresses Filtering of s based on specific characters CYREN AntiSpam services CYREN AntiVirus CYREN Zero-Hour Virus Outbreak Protection Cyren IP Reputation X Checking of s for viruses using on-access virus scanner DLP filtering of s for keywords DLP notification if contains keywords Certified newsletter senders supported through ECO s Certified Sender Alliance Greylisting Filtering of s containing suspicious links (SURBL, Spamhaus Domain Blocklist, URIBL, Phishtank) SpamAssassin supported (through SpamD) Etended check of header for individual domains in the sender field ( spoofing) (BEC, CEO fraud protection) Verification of whether the delivering IP address has a reverse DNS entry (RDNS check) Verification of whether the RDNS entry can be resolved to the delivering IP address. X 3

4 Verification of whether an A record is available for the Envelope-Sender-Domain. Verification of whether there is a mismatch between the sender domain in the envelope and the header of the mail. Verification of SPF, DKIM, and DMARC records 1) Requires a locally-installed on-access virus scanner, 2) Also requires the digiseal server from secrypt, 3) High availability with several servers requires an additional server license, 4) Requires appropriate large files license X X 4

5 NoSpamProy feature Protection Encryption Large Files Suite Signature and encryption features SSL/TLS encryption of SMTP connections - Opportunistic encryption - Forced encryption for certain domains Automatic Best Practices configuration for TLS 1.2 and perfect forward secrecy and deactivation of weak ciphers. Signing of s using S/MIME or PGP Encryption of s using S/MIME or PGP Verification of signatures for incoming, signed s (S/MIME and PGP) Decryption of incoming, encrypted messages (S/MIME and PGP) Automatic collection of certificates from incoming s (S/MIME only) Automatic search for cryptographic keys on key servers on the Internet (S/MIME and PGP) PDF Mail ( is converted into a PDF, along with all attachments, and encrypted with a password) With PDF Mail, attachments can be optionally sent via the Web portal. Request key material (S/MIME or password for PDF Mail) before delivering encrypted messages Encryption of attached PDF documents with password Send PDF passwords by tet message Web portal - Reply function for PDF Mail - Storage of a password for PDF Mail - Notification if password not yet set Management of the PDF encryption via tags in the subject field Custom designs for all s generated by NoSpamProy Custom designs for PDF mails on basis of the sender s address Management of the encryption options via Microsoft Outlook Add-In (requires Microsoft Outlook Version 2007 or later) Permanent decryption of PFD attachments via Microsoft Outlook Add-In Application of certified signatures to attached documents 2 5

6 NoSpamProy feature Protection Encryption Large Files Suite Checking of certified signatures for attachments to incoming s 2 Verification report on incoming s provides information on encryption and signature status Creation and management of certificates with SwissSign, D- Trust, and GlobalSign Creation and management of certificates from a Microsoft CA Creation and management of PGP key pairs via the management interface Central management of all public and private certificates Import/eport of S/MIME certificates Import/eport of PGP keys Automatic encryption of s using S/MIME/PGP, incl. fallback on PDF encryption Quarantine for unknown certificates and PGP keys Gateway certificates and PGP keys supported Detection of Chiasmus-encrypted files 4 Query public keys from public keys servers via LDAP Query public keys from Open Keys X Automatic Upload of public keys to Open Keys X 1) Requires a locally-installed on-access virus scanner, 2) Also requires the digiseal server from secrypt, 3) High availability with several servers requires an additional server license, 4) Requires appropriate large files license 6

7 NoSpamProy feature Protection Encryption Large Files Suite Secure transmission of large files Sending of large files by via Microsoft Outlook Add- In Encrypted connection to file on Web portal (SSL) Definition of the limits for the file sizes Reply option for eternal recipients Reply option for eternal recipients even without invitation link. Malware check of uploaded files using CYREN Overview of all stored files via interface Files are stored encrypted on the Web portal Data between two Web portal installations is synchronized and tunneled. Configuration of internal and eternal download links Recipients are informed when one of their attachments was uploaded X 1) Requires a locally-installed on-access virus scanner, 2) Also requires the digiseal server from secrypt, 3) High availability with several servers requires an additional server license, 4) Requires appropriate large files license 7

8 NoSpamProy feature Protection Encryption Large Files Suite Advanced routing Sender domain-based routing of s Recipient domain-based routing of s X X X Any number of send and receive connectors (SMTP) Connectors for - D via T-Systems X - D via Telekom Deutschland X X - D via Mentana-Claimsoft X X - POP3 connector X - AS/2 Business to Business X X - Deutschland-Online Infrastruktur X X - E-Postbrief X D rights management at user level Office 365 General features Easy setup, thanks to the configuration wizard Refined configuration of the filtering and signature/encryption options based on rules similar to firewall rules (filtering for gateway, sender, recipient) Central management of local users Import of users via the Active Directory via encrypted connections (LDAPS/SGC) Restriction of the objects to be imported from the Active Directory based on organizational units (OUs) Restriction of the objects to be imported from the Active Directory with the help of LDAP filters Import of users from generic LDAP directories (e.g. Lotus Domino) Archive interface - d.velop D3 connector X - File system storage X - Archive mailbo (SMTP) Rewriting of internal addresses (also group based) Central message tracking Access message tracking by using the ODATA API. X X X 8

9 Configuration of the D sending options via Microsoft Outlook Add-In Spoofing of the internal mail server topology Rights management for the management console (configuration, people and identities, reporting) Size limit for incoming s High availability: Synchronization of the entire configuration between all roles 3 Management using PowerShell cmdlets BATV support for incoming messages. X X X 9

10 NoSpamProy feature Protection Encryption Large Files Suite Reporting Overview of individual D s sent Report on volumes and volume of spam Entire/Domain/User Report on the addresses with the highest mail volumes/percentage of spam 1) Requires a locally-installed on-access virus scanner, 2) Also requires the digiseal server from secrypt, 3) High availability with several servers requires an additional server license, 4) Requires appropriate large files license NoSpamProy feature Protection Encryption Large Files Suite Disclaimer Functions available as additional option for all NoSpamProy modules Central management of any number of templates Templates possible for HTML and tet mails Simple integration of images Dynamic content from Active Directory fields Free selection and configuration of the Active Directory fields Etensive HTML editor Allocation of admin rights specifically for disclaimer Etensive set of rules Disclaimer rules based on: - AD group memberships - Words in the body tet - Words in the subject field - Words in recipient address - Words in sender address - Words in the header - Date range Any number of conditions and eceptions possible in rules ) Requires an optional license for disclaimer function 10