Hrvoje Dogan, Consulting Systems Engineer, Security, EM East 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confiden:al 2
Forward- Looking Statements Many of the products and features described herein remain in varying stages of development and will be offered on a when- and- if- available basis. This roadmap is subject to change at the sole discre>on of Cisco, and Cisco will have no liability for delay in the delivery or failure to deliver any of the products or features set forth in this document.
Sales Momentum Spam Landscape Recent Developments New Security Mechanisms Other Improvements Q & A
Turning point in the war against spam 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confiden:al 5
Cisco, ASR
0 50 100 150 200 250 300 350 400 450 Jan 09 Feb0 9 Mar 09 Apr 09 May 09 Jun 09 Jul 09 Aug 09 Sep 09 Oct 09 Nov 09 Dec 09 Jan 10 Feb1 0 Mar 10 Apr 10 May 10 Jun 10 Jul 10 Aug 10 Sep 10 Oct 10 Nov 10
Database leaked to law enforcement, industry Ceased opera:ons on October 1, 2010 Russian police press charges against owner, Gusev
Ceased spamming between September 20 and 23 Shutdown coincided with SpamIt.com shutdown no:ce Cisco SIO observed a spike in IPS events axer shutdown
Operated by Georg Avanesov Arrested in Armenia in October 2010 Alleged SpamIt.com affiliate and botnet reseller
Operated by Oleg Nikolaenko Alleged SpamIt and SanCash affiliate Arrested in Las Vegas on November 4, 2010 Charged with felony CAN- SPAM viola:ons and mail fraud Pled Not Guilty and held without bail
Sales Momentum Spam Landscape Recent Developments New Security Mechanisms Other Improvements Q & A
Mass A\acks Targeted A\acks Inbound Hygiene Outbound Control Premise or Cloud Hybrid Isolated Telemetry Coordinated Intelligence
2010 Cisco and/or its affiliates. All rights reserved. Cisco Confiden:al 14
Incoming Mail Graph Incoming Mail Summary Message Category % Messages Stopped by Reputation Filtering 90.3% 295,826,644 Stopped as Invalid Recipients 0.0% 5,899 Spam Detected 5.8% 18,886,099 Virus Detected 0.0% 0 Stopped by Content Filter 0.0% 9 Total Threat Messages: 96.1% 314,718,651 Clean Messages 3.9% 12,788,852 Total Attempted Messages: 327,507,503 Outgoing Mail Graph Outgoing Mail Summary Message Processing % Messages Spam Detected 86.9% 132,687,877 Virus Detected 0.0% 0 Stopped by Content Filter 0.0% 0 Clean Messages 13.1% 20,005,181 Total Messages Processed: 152,693,058 Message Delivery % Messages Hard Bounces 0.1% 11,885 Delivered 99.9% 21,953,599 Total Messages Delivered: 21,965,484 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confiden:al 15
Flexibility Inbound: Mail Hygiene Outbound: Sensi:ve Data Protec:on Feature Deployment In The Cloud On- Premises An#- Spam An#- Virus DLP Encryp#on
Global Threat Telemetry Cisco Threat Opera:ons Center Global Threat Telemetry Dynamic Updates and Ac:onable Intelligence www Adaptive Security Appliances Intrusion Prevention Solution Email Security Appliances Web Security Appliances System Administrators
Sales Momentum Spam Landscape Recent Developments New Security Mechanisms Other Improvements Q & A
Forward- Looking Statements Many of the products and features described herein remain in varying stages of development and will be offered on a when- and- if- available basis. This roadmap is subject to change at the sole discre>on of Cisco, and Cisco will have no liability for delay in the delivery or failure to deliver any of the products or features set forth in this document.
Our Future Ease of Use
Staying ahead of new threats Threat Evolu#on Targeted A\acks Purpose- built URLs per message Shortened URLs
Large Spam Handling Improvements Advisory Scan Size Maximum Scan Size Message Size Scanned Scanned (Partial) Not Scanned 23
Usage 24
Evolving Protec:on Mul:- layer Targeted Protec:on Delay Suspicious Threat Msgs All Threat Types (spam, phish, targeted) Redirect Suspected URLs via Cisco Web Security Modify Message Content (subject line) Add Warning Statements
URL URL Protec:on from suspect emails Redirection Deep inspec:on X Malicious site Users Protected from Targeted AJacks
Sales Momentum Spam Landscape Recent Developments New Security Mechanisms Other Improvements Q & A
Addi:onal flexibility Global Administrator Operator Read- Only Helpdesk PCI Supervisor PCI Auditor PII Supervisor By DLP Policy Flexible Feature Assignment: Read Only Read / Write Access Repor:ng visibility Quaran:ne access
Per policy By Policy Group for Mul#- Branch Use Cases
Per applica:on and policy Includes Quaran#ne and Message Tracking Control for DLP Admin Uses
Per func:on Provide Granular Access
User security
SMTP call ahead Sender Email System Seamlessly and Securely Use Exis:ng Directory Informa:on Wherever It May Exist 1 Email Security 2 3 Groupware Servers Recp Valida:on Svr
Time- Based Log Rollover
Outbreak Filters Enhanced Large Spam Scanning Delegated Administra:on Strong Password Controls SMTP Call Ahead Scheduled Log Rollover Tracking Search Enhancements More
Sales Momentum Spam Landscape Recent Developments New Security Mechanisms Other Improvements Q & A
Thank you.