IronPort X1000 Security System

Size: px

Start display at page:

Download "IronPort X1000 Security System"

Madlyn Chandler
6 years ago
Views:

1 I r o n P o r t E M A I L S E C U R I T Y A P P L I A N C E S T H E U LT I M AT E E M A I L S E C U R I T Y S Y S T E M F O R T H E W O R L D S M O S T D E M A N D I N G N E T W O R K S. IronPort X1000 Security System O v e r v i e w The IronPort X1000 high-performance appliance is built to protect the most demanding networks in the world. Internet Service Providers (ISPs) and large enterprises continue to be the primary targets of spam and viruses. These organizations require a purpose-built security appliance to combat these threats now, while laying a foundation for security in the future. The IronPort X1000 provides industry leading security on a platform that can meet today s demands for innovation and tomorrow s demands for scalability. ISPs and large enterprises need a secure and robust security solution that protects all facets of their complex infrastructures. IronPort s exclusive preventive filters and signature-based reactive filters, combined with content filtering and best-of-breed partner technology, provide the highest levels of security available today while delivering unprecedented visibility and management tools. f e a t u r e s The IronPort X1000 provides carrier grade solutions for security. PERFORMANCE LEADERSHIP AsyncOS, IronPort s proprietary operating system, was built from the ground up to address the requirements of modern gateways and position customers for the future of SMTP. Leveraging this hardened, customer-proven operating system, the IronPort X1000 can handle over one million messages per hour. IronPort s AsyncOS also supports thousands of simultaneous connections per system far more than traditional systems. A high performance spam defense is achieved through a purpose built solution for ISPs and large enterprises. IronPort Anti- Spam Filters utilize the industry s most innovative and high performance approach to threat detection, based on IronPort s unique Context Adaptive Scanning Engine (CASE). IronPort s CASE examines the complete context of a message providing more accurate spam filtering than traditional techniques. INNOVATION: PREVENTIVE SECURITY IronPort Reputation Filters provide an outer layer of defense using IronPort SenderBase data to perform a real-time traffic threat assessment and identify suspicious senders. IronPort Reputation Filters enable a variable response to spam, which allows for highly effective filtering with virtually no false positives.

2 F e a t u r e s ( c o n t i n u e d ) IronPort Virus Outbreak Filters identify and quarantine viruses hours before traditional virus signatures are available. These filters operate proactively to provide a critical first layer of defense against new outbreaks. DomainKeys technology digitally signs each outgoing message and establishes your identity with receivers on the other side of the Internet. IronPort remains at the forefront of sender authentication technology to protect your identity on the Internet by ensuring your mail is always signed with your private signature. IronPort Encryption with IronPort PXE technology provides secure two-way communication to any inbox, without requiring users to install client software or deal with complex public key infrastructure. IronPort Bounce Verification tags messages with a digital watermark to provide filtering of bounce attacks at the network edge. Directory Harvest Attack Prevention tracks spammers who send to invalid recipients and blocks attempts to steal directory information. MANAGEMENT AND MONITORING Centralized Management eliminates a single point of failure with superior peer to peer architecture, and makes managing multi-box installations of IronPort security appliances simple. The ability to manage configuration at multiple levels allows organizations to manage globally while complying with local policies. Security Monitor delivers real-time threat monitoring and reporting. This technology tracks every system connecting to your IronPort appliance to identify Internet threats (such as spam, viruses and denial-ofservice attacks), monitor internal user trends and highlight compliance violations. B e n e f i t s Easily Handles ISP-Scale Volumes and Large-Scale Attacks The perimeter continues to be under attack from a variety of message-borne threats; maintaining a high number of concurrent SMTP connections is a fundamental component to preventing DoS attacks from impacting your system availability. The IronPort X1000 supports thousands of simultaneous connections ensuring that your infrastructure is never overwhelmed, even during the largest outbreaks or attacks. Filter at the Perimeter Reputation filtering at the perimeter allows the IronPort X1000 to apply mail flow policies as specified by the administrator. Mail that is suspicious is throttled, limiting the number of messages received in an hourly period. This variable response to spam allows for highly effective filtering with virtually no false positives. Fight Fraud ISPs and large enterprises play a crucial role in fighting fraud. ISPs are rapidly adopting cryptographicbased means, such as DomainKeys to establish the true identity of senders and protect their user base. The IronPort X1000 contains DomainKeys technology to digitally sign each outgoing message and establish your identity with receivers on the Internet. IronPort remains at the forefront of sender authentication technology to protect your identity. Reduced TCO The IronPort MTA platform enables massive reduction in Total Cost of Ownership (TCO) by consolidating operations into a single platform and providing advanced administration features such as Centralized Management and SNMP monitoring. These features make global management and monitoring of security simple.

3 B e n e f i t s ( c o n t i n u e d ) Unprecedented Insight The IronPort X1000 offers very sophisticated management, monitoring, and reporting tools designed to satisfy the large global enterprises and ISPs that make up IronPort s customer base. Each appliance has a unique reporting system, providing both a real-time and historical look at mail flowing through your infrastructure. IronPort provides system administrators with the necessary information to make critical security decisions. Minimized Downtime As a comprehensive solution, the IronPort X1000 can ensure the availability and security of your infrastructure. IronPort offers a variety of security applications for spam and virus filtering, content scanning, and policy enforcement. Together, these features reduce the risk and potential downtime posed by security threats. f i g u r e 1. The IronPort X1000 enables DomainKeys; a cryptographic-based means to establish the true identity of senders. IronPort X1000 private SIGNED Internet ISPs Yahoo! Gmail VERIFIED DNS public Earthlink Power at the Perimeter: The IronPort X1000 provides multi-layered security on a single appliance by combining IronPort s revolutionary technology with additional market leading anti-spam and anti-virus solutions. SPAM DEFENSE MANAGEMENT TOOLS VIRUS DEFENSE POLICY ENFORCEMENT AUTHENTICATION THE IRONPORT ASYNCOS PLATFORM

4 s p e c s Chasis/Processor Form Factor Dimensions CPU Power Supplies Memory Storage RAID Drives Connectivity Ethernet Serial Mail Operations Mail Protocols DNS LDAP INTERFACES/CONFIGURATION Web Interface Command Line Interface File Transfer Programmatic Monitoring Configuration Files Cryptographic Algorithms TLS (Encrypted SMTP) DomainKeys Signing SSH for System Management HTTPS for System Management 19 rack-mountable, 2U rack height 3.5 (h) x 19 (w) x 29 (d) Two Intel Xeon Processors Hot-plug redundant, 700 watts, 100/240 volts 4GB RAM RAID 1+0 configuration; dual channel hardware with battery-backed cache Four hot-swappable, 146GB Ultra 3 SCSI One Intel 10/100 BaseT and two Broadcom Gigabit BaseT Ethernet ports Two-port fiber-optic NIC One RS-232 (DB-9) serial port SMTP, ESMTP, Secure SMTP over TLS and IronPort Mail Merge Internal resolver/cache; can resolve using local DNS or Internet Root Servers Integrates with Active Directory, Notes, Domino and OpenLDAP servers Accessible by HTTP or HTTPS Accessible via SSH or Telnet; Configuration Wizard or command-based SCP or FTP XML over HTTP(S) XML-based configuration files archived or transferred to cluster 56-bit DES, 168-bit 3DES, 128-bit RC4, 128-bit AES and 256-bit-AES 512, 768, 1024, 1536 and 2048-bit RSA 768 and 1024-bit RSA RC4-SHA and RC4-MD5 P r o d u c t l i n e SIZING UP YOUR SECURITY SOLUTION IronPort Systems provides industry leading security products for organizations ranging from small businesses to the Global IronPort X1000 IronPort C650 IronPort C350 IronPort C350D IronPort C100 Built to meet the needs of the most demanding networks in the world. Designed for large enterprises and service providers. Suggested for medium to large enterprises. Recommended for any company with unique outbound communication needs. An affordable, and easy to use, all-in-one appliance for small to medium enterprises.

S u m m a r y The Ultimate Email Security System The IronPort X1000 is purpose built to protect today s most demanding networks.

5 S u m m a r y The Ultimate Security System The IronPort X1000 is purpose built to protect today s most demanding networks. IronPort appliances are in production at eight of the ten largest ISPs and more than 20 percent of the world s largest enterprises. This system has a demonstrated record of unparalleled security and reliability. c o n t a c t u s Try before you buy Through a global salesforce and reseller network, IronPort offers a free Try Before You Buy program for the IronPort X1000. To learn if you qualify call or visit us on the Web at IronPort Systems, Inc. 950 Elm Avenue, San Bruno, CA tel fax info@ironport.com web IRONPORT X /07 DOC RELEASE ronport Systems is a leading provider of anti-spam, anti-virus and anti-spyware appliances for organizations ranging from small businesses to the Global IronPort appliances utilize SenderBase, the world s largest and Web threat detection network and database. IronPort products are innovative and easy-to-use providing breakthrough per formance and playing a mission-critical role in a company s network infrastructure. Copyright 2007 IronPort Systems, Inc. All rights reserved. IronPort, the IronPort logo and SenderBase are registered trademarks of IronPort Systems, Inc. All other trademarks are the property of IronPort Systems, Inc. or their respective owners. While every effort is made to ensure the information given is accurate, IronPort does not accept liability for any errors or mistakes which may arise. Specifications and other information in this document may be subject to change without notice. P/N /07

IronPort C100 for Small and Medium Businesses

IronPort C100 for Small and Medium Businesses I R O N P O R T E M A I L S E C U R I T Y A P P L I A N C E S S I M P L E I N S TA L L AT I O N, E A S Y M A N A G E M E N T, A N D P O W E R F U L P R O T E C T I O N F O R Y O U R E M A I L I N F R A