Managed Email Security Defenses

Managed Email Security Service users have access to a broad range of email defenses, which can be blended to provide exceptional inbox control. Default and custom configurations simplify deployment, while providing the versatility that is needed to address the widest range of user requirements.

 

SMTP Enforcement

 

The Managed Email Security Service uses its LDAP sync capabilities to maintain a database of known users at each customer domain. This database enables the system to deny delivery of mail to unknown users after receiving the "To:" address from the header. This approach provides protection against directory harvest and denial of service attacks (DHA and DoS, respectively), and saves considerable bandwidth.

 

RCPT-Check

In cases in which the Managed Email Security Service has not been provided with a list of known users at a domain, the system automatically queries the delivery MTA to determine if a recipient is legitimate.

 

Allow Lists (Whitelisting)

 

Users often get started by using our automated Outlook Contact Harvester to build a list of their legitimate correspondents. This automated utility collects Outlook contacts and addresses from messages in one's Sent folder. Automated "Allow List on first outbound" and "Allow List on reply" features keep one's Allow List current over time. Allow Lists can include individual addresses or entire domains, and support enterprise-wide entries.

 

Block Lists (Blacklisting)

 

The Block List is used to block email from specific addresses or domains. A Block List entry can be created through either the in-message Control Panel or the Managed Email Security Service Message Center user interface. Enterprise-wide entries may be added to the Block List.

 

Content Filtering

 

The Managed Email Security Service may be deployed transparently by utilizing content filtering to screen messages from senders who are not on a recipient's Allow List, and which have passed prior tests, such as permitted countries and permitted languages. Filtering provides simple, transparent set-and-forget protection, although users may choose to inspect their quarantine or receive a daily summary of messages in the quarantine. The Managed Email Security Service provides a simple means for the user to tailor the sensitivity of the filter for their specific preferences.

 

Granular Security States

 

The Managed Email Sercurity Service's granular inbox access control flows in part from the range of security states that can be applied to a specific sender and address. For example, if a particular address starts to attract spam, users can first identify who is sharing their email address, and then exert varying degrees of control over future use of the address – they can (a) block the specific abusing sender, (b) lock down the address, reserving its future use solely for the existing community of legitimate senders, (c) restrict future use to senders at the domain of the sender to which it was initially disclosed, (d) restrict use even further to just the party to which it was initially disclosed, or (e) disable the address, in which case all future incoming mail on the address will be blocked, flagged or challenged. These options are implemented very simply through the User Control Panel.

 

User Control Panel

 

As an option, the Managed Email Security Service automatically inserts a control panel at the bottom of incoming messages, and removes it on Forward or Reply. This control panel provides a means of communicating with users, for example, to inform them when one correspondent appears to have shared their address with a third party. It also provides a simple means for users to update their access preferences for a specific sender and address, by clicking on the intuitive in-message links that are provided. The Managed Email Security Service control panel is available in English, Spanish, French, German, Brazilian Portuguese, Dutch, Italian and Chinese, with Russian and Hebrew on the way.

 

Alterante Outbound Addresses (AOA)

 

Our experience shows that even the use of just two addresses provides significant improvements in inbox control. The increase in effectiveness is based on the simple, but powerful, insight that legitimate senders will never knowingly share your address with spammers. By using an Alternate Outbound Address, conversations started with new correspondents take place on an address to which no spam is sent, so no filtering is required, thus eliminating all chance of false-positives.

 

Permitted Languages

 

This capability augments traditional content filtering by blocking messages in any language other than those specifically approved for delivery at the enterprise and individual user levels.

 

Permitted Countries

 

This capability further augments content filtering by blocking messages from any country other than those specifically approved for delivery at the enterprise and individual user levels. Delivery decisions are based on the IP address of the sending server. While some organizations may not be able to use this capability, many domestic businesses may not ever want to receive email that can be determined to have originated outside their home country or geographic area of operation.

 

Total Control

 

Total Control provides maximum control over access to one's inbox – we believe there is no more powerful solution on the market today. In this mode, the Managed Email Security Service expedites the creation of the user's Allow List, then utilizes an automatic challenge-response for every new inbound correspondent, asking them to resend their message to a Protective Address with a suffix automatically assigned by the Managed Email Security Service. By establishing correspondent-specific To – From address pairs, each controllable by policy, the Managed Email Security Service deprives spammers of their primary technique – if they spoof the From address, they must associate it with the proper To address in order to reach the user's inbox, and the chances of this are negligible.

 

Anti-Virus

 

The Managed Email Security Service scans both incoming and outgoing email for viruses, worms, and other malware.

 

Blended Defenses

 

The Managed Email Security Service enables users to mix-and-match various defenses to suit their specific preferences. Our experience shows that blending Protective Addresses with traditional methods produces a stronger defense that also avoids the pitfalls of traditional defenses used independently.

 

Outbound Mail Auditing

 

The Managed Email Security Service blocks outbound email that contains spam and viruses, and provides a means of rate-limiting outbound email volumes. We use these features to identify and alert on open relay conditions and potential compromised, "zombie" PCs, in order to prevent our customers from inadvertently spamming their contacts and to avoid IP address blacklisting, with the business disruption that accompanies that unpleasant outcome.