Transcript Virus

Next generation
virusprotection
mailFence presentation
Slide no. 1
Virus – What is it?
• The first viruses to appear were small programs made to do
nothing with Your computer, but to have fun with it, no
harm intended.
• Today a virus is a sofisticated piece of software with a builtin SMTP server designed to spread itself, it can shut down
Your anti-virus software and send Your personal passwords
to a fixed location on the Internet.
• Today computerviruses are a serious securityproblem, it’s
not for fun anymore, only harmful and destructive behavior
is considered a succes with a virusdesigner.
mailFence presentation
Slide no. 2
Do we have virusproblem?
• Have You ever recieved a virus?
• Do You know anyone who has recieved a virus?
• Is the number of viruses climbing or dropping?
• Do You think virusdesigners are getting smarter
or dumber?
mailFence presentation
Slide no. 3
How big is the problem?
•
•
•
•
•
70-100 new viruses every week *1
43% of all danish companies have had a virus outbreak *2
Aprox. 1 out of 100 e-mails are infected with virus *3
The virus risk has doubled 10 times since 1996 *4
It takes 23 days to cure an average virusinfected computer
*5
*1:
*2:
*3:
*4:
*5:
According
According
According
According
According
to
to
to
to
to
Symantec Antivirus Research Center (SARC) research director Steve Trilling
report from Danmarks Statistik, feb. 2003.
comendo real-time statistics
ICSA Labs rapport
ICSA Labs rapport
mailFence presentation
Slide no. 4
When a virus breaks out?
• You loose critical data, employee hours and the good
reputation of Your company.
• The company’s efficiency is also affected, ie. The production
could be slowed down or in some cases shut down.
• Loss of incoming orders can also be a disaster for the
company. What would happen if Your company didn’t have
e-mail for 5 days?
• Furthermore You will also have expenses and use resources
cleaning and restoring the infected computers.
mailFence presentation
Slide no. 5
Whats being done today?
According to a security report from the government operated
bureau ”Statistics of Denmark” made Feb. 2003, danish
companies do this:
• 81% use anti-virus software.
• 11% have security education for their employees.
• 55% bought a monthly security service.
mailFence presentation
Slide no. 6
Misunderstandings
• ”Our Firewall stops virus!”
• ”Our anti-virus software updates and takes care of itself!”
• ”We update our anti-virus software once a week, that’s
more than enough!”
• ”Our Exchange server updates and takes care of itself!”
mailFence presentation
Slide no. 7
E-mail flow without mailFence
RECIPIENT
SENDER
INTERNET
E-mail with
virus is sent
E-mail with
virus is recieved
Protection the way it used to be:
You are responsible
It is up to You to have the best possible protection for Your computer.
You have to maintain it
You are responsible for maintaining it, 24 hours a day!
Don’t let the enemy inside
If Your anti-virus software isn’t up to date, the virus could already be inside Your network
Loss of image
If You’ve had a virus outbreak, the probability of the virus spreading itself through Your contactlist is
very high. .
mailFence presentation
Slide no. 8
Imagine You could:
Never recieve another virus infected e-mail?
And at the same time do NOTHING!
No updates (releases, patches,etc)!
No maintenance!
For less than 14 cents a day!
mailFence presentation
Slide no. 9
The trouble with e-mail security
98% of all virus is spread through e-mail.
Traditionel anti-virus software has only 1 scanner.
Traditional anti-virus software is first active after the
virus has entered Your company network.
Your company is responsible for updating,
maintaining and licensing the anti-virus software.
mailFence presentation
Slide no. 10
Why not settle for 1 scanner?
• Anti-virus software must constantly be updated and
improved to keep up with the virusdesigners.
• The software has to prepare for virus in compressed files,
virus being launched from code (ex. HTML) and other new
ways to launch a virus.
• Independent tests done every month have shown, that a
single anti-virus software product doesn’t get a top rating
several months in a row. *1
• No antivirus software promises 100% virussecurity!
*1: According to independent tests fra ICSA Labs, West Coast Labs, Virus Bulletin, AV-Test.org, Virus TestCenter
mailFence presentation
Slide no. 11
Scanning outside my network?
mailFence
mailFence puts a ring of safety
around Your company so no virus
can enter through e-mail.
Your companys internal network
Your companys internal network will
never get in contact with virus sent
through e-mail.
You protect Your company the same
way, set up a fence or a wall to
prevent unwanted visitors.
mailFence presentation
Slide no. 12
4 PROBLEMS
98% of all virus is spread through e-mail.
Traditional anti-virus software only has 1 scanner.
Traditional anti-virus software only protects when the virus
has entered Your company network.
Your company is responsible for updating,
maintaining and licensing the anti-virus software.
mailFence presentation
4 SOLUTIONS
mailFence scans all e-mail for virus.
mailFence has 5 virus-scanners and Pre Virus Recognition.
mailFence scans all e-mail before it is sent
to Your company. No virus can enter the network that way.
mailFence is updated every 10. minutes, 24 hours a day.
Comendo takes care of all maintenance and licensing.
Slide no. 13
RECIPIENT
SENDER
INTERNETTET
E-mail without
virus recieved
E-mail with
virus is sent
mailFence presentation
PVR
Scanner 5
PVR
Scanner 4
Scanner 3
Scanner 2
Scanner 1
5-layer virusscanner
NB! If we can’t clean the e-mail, we send an e-mail to the recipient stating
that a virus has been found and deleted.
Slide no. 14
Flowdiagram for mailFence
Average scanningtime from receiving till sending: 400 ms.
2.
Every e-mail is split
up in MIME sections.
5.
E-mail is sent
to customers mailserver. If this is
down, we’ll retry
in up to 14 days.
PVR
Scanner 5
PVR
Scanner 4
5-layer virusscanner
Compressed e-mails
are unpacked down
20 levels.
Scanner 3
4.
Every MIME section
is checked for
patternrecognition
by our heuristic
PVR scanner.
Scanner 2
3.
Every MIME section
is scanned for virus
by our 5 scanners.
Scanner 1
1.
Incoming
e-mail allowcheck.
We block at IP
Level.
When a virus is found mailFence removes it and the
scanning starts all over, all MIME sections are
scanned once more for virus.
An e-mail can never be passed onto step 4, before
ALL virusscanners have labled it virusfree!
mailFence presentation
Slide no. 15
Can I use it?
• Yes! You can use mailFence regardless of what
mailsoftware or mailserver You’re using: Outlook,
Lotus Notes or Exchange.
• Yes! You can use mailFence regardless of what
operating system You’re using : Unix, Linux,
Apple or Windows.
• mailFence requires no setup and no changes
within the customer for scanning incoming mail.
mailFence presentation
Slide no. 16
Double mirrors!
• Our mailFence setup features mirrored systems, in that way
a secondary system will take over, should the primary fail.
• We’ve even mirrored a second data center on a alternative
geografic location to make sure that we always have a
system up and running.
• Both data centers include power backup (UPS),
Airconditioning, firealarms and have been secured behind
multiple securitydoors with alarmsystems.
mailFence presentation
Slide no. 17
It is written! (in the DB)
Our online customer reportcenter includes
detailed statistics for the customers complete
e-mail traffic:
•
View in- and outgoing e-mails stats
including number of viruses blocked
•
Virus graphs
•
Virus top 10
•
Send report to e-mail
•
View custom periods: days – weeks –
months
•
Virusactivity
•
7 days overview
•
Inspect all in- and outgoing e-mails with
the possibility to search and filter
messages
mailFence presentation
Slide no. 18
Total Cost of Ownership
TCO can be reduced significantly because You save resources and
expenses on:
•
Installing and maintaining software
•
Updating and maintaining serversoftware
•
An IT Administrator to overlook and maintain the e-mail securitysoftware
•
An employee to maintain all licensing for the software
•
Employees to clean up after a virus attack.
•
Employees not being able to work because their computers are down due to a
virusattack.
All employees save time as they no longer recieve infected emails.
mailFence presentation
Slide no. 19
mailFence offers:
Virus free e-mail!
6 x virusprotection
No setup and no maintenance!
Detailed management reports!
The best virusprotection!
mailFence presentation
Slide no. 20
Questions?
mailFence presentation
Slide no. 21
mailFence advantages:
mailFence stops virus
in all incoming and
outgoing e-mail.
mailFence scans e-mail
before it is sent to
Your company.
mailFence has 5 virusscanners + 1 scanner
with patternrecognition.
mailFence is updated
every 10 minutes
24/7/365.
Comendo takes care of
maintaining, licensing
and updating.
mailFence presentation
Online customer reportcenter, with detailed stats
of Your e-mail traffic.
Slide no. 22