KVH MailScan MX


Published on

MailScan MX is a cloud-based email protection solution that can be installed with no impact to your existing mail system. The service provides high filtering accuracy, with false positive (legitimate email misclassified as spam) e-mails at less than 4/1,000,000, and KVH backs this accuracy with SLAs covering the filtering of 99.9% of SPAM.

For more details, visit www.kvh.co.jp

Published in: Technology
  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide
  • - Consider showing the MailScan MX spam calculator at http ://MailScan MXemail.com/products/spamcalculator.html to demonstrate all the costs of spam e.g. storage. It is important to advise that it is generally accepted in the industry that it takes around 5 seconds to identify that an email is spam and then delete it and this quickly adds up to be a lot of wasted productivity. There is no published reliable data on the amount of productivity lost when an employee clicks on a link in a spam email and the amount of time they waste. The risk to the organization also increases significantly as the website may have malware. When selling KVH MailScan MX, a sales person needs to show they understand the security industry and the hidden risks of letting spam in to the network. Traditionally Japanese IT managers have preferred to let more spam in and reduce the risk of a false positive, however this is not current industry leading thinking. KVH MailScan MX will update the spam profile about every 45 seconds so will catch more spam with greater accuracy compared to onsite software or appliances that update daily or maybe at best every hour. Information on DOS attack at http://en.wikipedia.org/wiki/Denial-of-service_attack and spam bomb at http://en.wikipedia.org/wiki/email_bomb
  • Concerns – Privacy – writes email to disk and hence “owned” by MSP for the duration of processing. Delivery Guarantee – MSP has taken ownership, so if there is a network issue the sender believes the email has arrived, the recipient has still not seen the email… Latency – there is no set processing period (despite latency SLAs). Two SMTP connections – removes the safeguards built into the (standards based) SMTP protocol. It is possible for emails to be lost in this scenario.
  • KVH MailScan MX

    1. 2. Virus Threats on the Rise Spam email Malware While sending and receiving emails, a corporate network always confront threats from spam, phishing, or leakage of confidential information by malware or system hacking Phishing <ul><li>Phishing is fraud emails which pretend to be official emails or website from financial institutes etc. in order to steal private or confidential information. </li></ul><ul><li>Symantec: Message Labs Intelligence Report says 75.8% of total emails sent in May 2011 was SPAM. </li></ul><ul><li>SPAM mail is a common method for delivering malware </li></ul><ul><li>Malware is a generic name of malicious code such as virus, worm, Trojan code, etc. </li></ul><ul><li>If executed, it causes destructive activities or information leakage. </li></ul>
    2. 3. How Spam Affects Your Company Assuming that a company of 1,000 employees receives on average 20 spam emails per day per person and spends on average 5 seconds processing each email… <ul><li>36,700,000 yen/year worth of productivity can be saved* </li></ul>lost productivity + <ul><li>Leakage of confidential information </li></ul><ul><li>Virus infections </li></ul><ul><li>System attacks e.g. denial of service (DOS) or spam bombs </li></ul>Outstanding Security Risks Most companies currently use anti-spam software or appliances on-site, but face many hidden operational costs to support them or have problems with low filtering accuracy. *Based on KVH internal estimation
    3. 4. Issues Of Existing email Security System ASP Issues <ul><li>All emails must go off-shore to remote data centers to be analyzed/filtered </li></ul><ul><li>Escalation responses are often delayed, and does not suit local market </li></ul>Software Issues <ul><li>Manpower for management and operation </li></ul><ul><li>Virus/spam definition files do not update as frequently as cloud system </li></ul><ul><li>New versions of software need to be purchased and installed </li></ul><ul><li>On-site hardware to upgrade, patch and support </li></ul>Appliance Issues <ul><li>Expensive hardware must be purchased and upgraded on a regular basis </li></ul><ul><li>Continual maintenance fees </li></ul><ul><li>Hardware must be housed and maintained at customer site </li></ul><ul><li>Hidden costs to support appliances </li></ul>General Issues <ul><li>Productivity decrease by sorting unnecessary emails </li></ul><ul><li>Risks to miss important emails because of filtering (false positives) </li></ul>+
    4. 5. KVH MailScan MX innovates email Security Full Control & Visibility <ul><li>Advanced portal site: </li></ul><ul><li>Multiple administrator levels </li></ul><ul><li>Reporting </li></ul><ul><li>Black Listing/White Listing </li></ul>Manage filtering rules remotely in portal Almost all other services require quarantine due to low accuracy Highly Accurate / Quarantine-free <ul><li>Best-in-class Filtering Accuracy: </li></ul><ul><li>99.9% filtering SLA for all languages </li></ul><ul><li>Actual false positives are less than four in one million in past five years </li></ul><ul><li>100% known virus protection </li></ul>Most of foreign email security services send emails abroad for filtering Domestic Process <ul><li>Filtered in Japan: </li></ul><ul><li>Carrier-grade network facility </li></ul><ul><li>No operational delay </li></ul><ul><li>No legal problems </li></ul><ul><li>Local support </li></ul>
    5. 6. KVH MailScan MX Functions Inbound email filtering Filter emails which may be harmful including malware, spam or phishing fraud etc. to block them before being received, thus protecting corporate systems and improving operational efficiency Outbound email filtering If a large number of spam mails are sent from your email address, your address might be registered to Real-time Blackhole List (RBL) and blocked from operation for several days. KVH MailScan MX avoids such events by filtering emails sent for virus and spam Portal Administration Advanced portal site enables you to read the sent/received email report and filtered email list. Customized tuning is also available by setting policies (whitelist/blacklist) or customized email rules SmartRules filtering Inbound or outbound emails can have customized rules to block file types, redirect emails to other users etc. An infinite range of rules can be created including data loss prevention (DLP) to limit emails with sensitive company data leaving your network
    6. 7. KVH MailScan MX Filtering Model
    7. 8. KVH MailScan MX Filtering Details RBL Realtime Blackhole LIsts (RBLs) are lists of IP addresses used by known spammers, open mail relays and botnet-infected networks. MailScan MX uses RBLs from a commercial provider. IP Rate Limiting IP rate limiting ensures incoming SMTP connections do not send excessive amounts of email to the MailScan MX platform. These rate limits are managed by MailScan MX's operations staff. RFC Enforcement This classifier ensures that incoming SMTP connections conform to Internet standards. SMTP connections that don't conform to RFCs are treated as dirty and we refuse service to these connections. &quot;Received:&quot; Headers Verification This classifier verifies the &quot;Received:&quot; headers inside an email to check whether the email has traversed spammer or low reputation networks. Envelope Rate Limiting Envelope rate limiting refers to limiting the number of times a sending host can change the sending domain in any single SMTP session. Hosts that frequently change their sending domain are likely to be spoofing the domain. SPF Sender Policy Framework is a set of IP addresses or hostnames that can send email from that domain. These records are stored as TXT records in DNS and are a great way to prevent spoofing attacks. User Authentication The user authentication layer verifies incoming emails against lists of known users at the customer's site. This prevents emails destined for non-existent users being sent to the customers mail server. MailScan MX SmartRules MailScan MX's SmartRules product is a powerful email content manipulation engine. It allows site administrators to define complex rules about what type of content is allowed to enter or leave their site. It also allows for lists of common content types such as attachment names, MIME (AKA file) types, groups of users and or email content. MailScan MX Policy Classifier This classifier allows for simple whitelisting and blacklisting to be performed on email entering or leaving a customers site. Email policies can be set on incoming as well as outgoing mail and can apply to email addresses, domain names, IP addresses and certain headers.
    8. 9. KVH MailScan MX Key Benefits <ul><li>emails stays in Japan as the service is operated in Japan </li></ul><ul><li>KVH bilingual staff provides support for 24x7. </li></ul>High Filtering Accuracy Domestic Opetaion <ul><li>The service has a false positive rate of 0.0004% (clean e-mail misclassified as spam), which has been recorded over the past 5 years. </li></ul><ul><li>The filtering accuracy of 99.9% is guaranteed with SLA </li></ul>TCO Reduction <ul><li>No software license cost as well as operational cost is required </li></ul><ul><li>No Hardware cost, its renewal cost and maintenance cost can be saved </li></ul><ul><li>Security specialist’s time will no longer be used on updating pattern files </li></ul>Redundant System <ul><li>Built in multiple carrier grade datacenters operated by KVH in Japan </li></ul><ul><li>The system will continue to filter and deliver emails even if there are any unexpected outage on one location </li></ul>
    9. 10. System Configuration Internet Internet Primary Site MailScan MX One-Stop-Solutions combining KVH Internet Access or KVH’s EtherMAN network services are also available to fit your business needs Secondary Site MailScan MX KVH MailScan MX is built on carrier-grade redundant infrastructure
    10. 11. Portal Site <ul><li><Main Features of the portal site> </li></ul><ul><li>Blacklisting/Whitelisting </li></ul><ul><li>Graphical/Statistical Reporting </li></ul>