 |
| |
|
| |
| Objective: To offer total security and mail management to customers messaging infrastructure uses best of breed solution for Both Inbound / Outbound Mail scanning. |
| |
| How Logix Secure Relay Works? |
| |
| This service can be availed in minutes by just pointing your Mail Domains record to our servers. When you sign up for the Secure Relay service, we email you the changes you need to make to the DNS "MX" records for your domain. Some hosting companies let you change your domain's DNS settings through a control panel. Others require that you submit the requested changes to their technical support department. Changing MX records is a trivial operation for a Hosting company. Within an hour's time of implementing these DNS changes, the Secure Relay service will be in place. |
| |
 |
| |
| Mail destined for outbound delivery can also be submitted to Logix Secure Relay Setup for final delivery, outbound mails are also scanned for Virus and Spam before delivery. |
| |
| Technology Insight |
| |
| Logix Secure Relay can be logically divided into three main Blocks, the first being Connection Management which deals with how a connection is treated when an attempt is made to deliver a mail to domain protected by LSR. |
| |
 |
| |
| Sender Base Reputation Filter |
| |
First Layer of Defense to adjudge if connection made by the sender server is to be Accepted, Rejected or Throttled.
Sender Base® Network is the industry’s first, largest and most accurate global email traffic monitoring network, tracking more than 30% of the world’s email traffic, from 100,000 participating organizations / ISP’s |
| |
| SMTP Intrusion Detection Prevention |
| |
| Accepted and Throttled connections are further checked for SMTP Based Intrusion Attacks and Protocol Anomalies. Connection are dropped if found to contain executable code in Mail Header or any intrusions that directed towards the recipient mail server |
| |
| Anti-Virus Splicing |
| |
The ability to terminate the SMTP traffic containing Virus, Phishing attacks or Banned attachment type - in effect , discarding the email and blocking the infected message.
This is a signature based Anti-virus which detects viruses, worms, Trojans, spy ware, phishing & malware in content of the mail. |
| |
| Recipient Check |
| |
| List of email ID’s of the recipient domain to be published for conducting the recipient verification check or we can write routines to import LDAP Address from client AD / Lotus LDAP etc at routine intervals. |
| |
| Connection Management Features |
| |
| Feature |
Benefit |
| |
|
| Sender Base Reputation Filter |
• False as low as 1 in 1 M mails
• Sender Base gives feature of Throttling : Enforcing Rate Control from Suspicious IP’s |
| |
|
| SMTP Intrusion Detection Prevention |
• These are intrusions that can exploit recipient mail servers Vulnerability are eliminated by LSR |
| |
|
| Anti-Virus Splicing |
• During Major Virus Outbreaks thousands of virus messages bomb the Mail Systems drive CPU and memory resources up on the server thus inducing lot of latency for legitimate message delivery, Splicing Technology prevents it by disconnecting the connection
• Virus spoofing phenomenon is also controlled as Virus infected Messages are not accepted in first place. |
| |
|
Recipient Check
|
• Mails for non-existent Email Id’s are not accepted hence reducing significant amount of invalid mail traffic. |
|
| |
| The Second Block after Connection Management is Content Analysis |
| |
 |
| |
| Virus Outbreak Filter (VOF) |
| |
Virus Outbreak Filters provide a critical first layer of defense against new outbreaks - hours before signatures used by traditional anti-virus solutions are in place.
As Sender Base Monitors 30 % of world Email Traffic, any rise in volumes of any particular type of email with suspicious type of attachments are identified and quarantined with minutes of outbreak happening.
Real world results show an average lead time over reactive anti-virus solutions of 14 hours, along with an extremely high catch rate and near-zero misclassifications |
| |
| Content Adaptive Scanning (CASE): |
| |
CAS Engine examines the complete context of a message , including :
- content
- methods of message construction
- reputation of the sender
When the CASE score is combined with sender reputation, the end result is more accurate than traditional spam filtering techniques. CASE technology also determines the repu¬tation of any URL within a message body, so that a more accurate analysis of the messages can be performed. |
| |
| Image Spam Filtering |
| |
Multidimensional Pattern Recognition (MPR) for Image Spam Filtering
After decoding the binary image files, MPR technique is used to analyze the decompressed image data across over 13 dimensions to determine whether or not the message is spam.
Color is an example of a dimension that provides rich information about the content of a message. The distribution of colors found in each message to establish the likelihood that the message is spam. For example, MPR can scan a .gif file to look for pixel patterns indicating that the image file is displaying “all text” to the user, a pattern that is common in spam but rare in legitimate email (most legitimate .gif files contain pictures not text). MPR can also detect anomalous “dots” in images that don’t fit the “smoother” gradients of light typically found in legitimate email |
| |
| Commercial Anti-Virus |
| |
| Sophos is an industry leader in anti-virus filtering, offering consolidated protection against multiple malware threats such as viruses, worms and Trojans. With the highest performance virus scanning technology in the industry and unique denial of service prevention, Sophos anti-virus technology provides a fully integrated layer of virus protection |
| |
| Open Source Anti-Spam |
| |
| Spamassasin, most popular open-source anti-spam acts as second layer of spam filtering, which is regularly updated with customized rule set for enhanced spam detection. |
| |
| Open Source Anti-Virus |
| |
| Clam AV, most popular open-source anti-virus scans mails for any traces of viruses if left undetected by Anti-Virus Splicing technology & Commercial Anti-Virus |
| |
| Feature |
Benefit |
| |
|
| Virus Outbreak Filter |
By detecting new outbreaks in real time, and dynamically responding to stop infected messages, this is a necessity of any Email Security System |
| |
|
| Content Adaptive Scanning |
Unmatched Accuracy compared to any other product or solution |
| |
|
Multidimensional Pattern
Recognition for Image Spam Filtering |
It’s the USP , most of the competing products and services are unable to cope up wit Image Spam |
| |
|
| Commercial Anti-Virus |
Provides Critical Third Layer of Virus Scanning |
| |
|
| Open Source Anti-Spam |
Critical Third layer of Spam Scanning with open source , providing additional protection |
| |
|
Open Source Anti-Virus
|
Make sure no malicious code passes through |
|
| |
| System Level Features |
| |
| Mail Spooling: |
| |
In case of recipient server is not responding due non availability of Internet Connection or Mail Server upgradation, LSR spools the mails for 36 Hours.
During these 36 Hours mails are retried at following intervals to be delivered. |
| |
| Delivery Attempt |
Seconds |
D-HH:MM:SS |
| |
|
|
| 1 |
0 |
0-00:00:00 |
| |
|
|
| 2 |
400 |
0-00:06:40 |
| |
|
|
| 3 |
1600 |
0-00:26:40 |
| |
|
|
| 4 |
3600 |
0-01:00:00 |
|
| |
| and similar 20 such retry intervals, This period of 36 hours and retry intervals can increased at time of emergency. |
| |
| Action on Virus and Unsafe attachments |
| |
Virus infected mails are detained , sender gets a bounce back response for the same. Unsafe attachments like .pif , .scr etc are also treated in the same manner
The mails which are trapped as Virus Outbreak are quarantined. |
| |
| Outbound Mail Scanning & Delivery |
| |
| Outbound Mail Delivery can also be availed through Logix Secure Relay, Mails are thoroughly scanned for Viruses and spam before delivery. The Spam policy for outbound is not as strict as Inbound Mail Scanning. |
| |
| Following are the features for Outbound |
| |
 |
The max time that mail can remain in Queue if undelivered is for 3 Days |
| |
|
 |
Mail in queue notification, sender will be notified every 3 hours if the mail is undelivered and that it is still in queue. |
| |
|
 |
The system will try 100 times to deliver soft bounced message before treating it as a Hard Bounced message. |
| |
|
 |
The amount of time the system should wait before the first attempt to redeliver the soft bounced message. The default is 1 min. maximum it can be kept for 1 Day. |
|
| |
| Disclaimer: |
| |
| A unique disclaimer per message can be appended per domain basis for all out bound messages. This will ensure only outbound mails get appended with Disclaimer and not for local mails |
| |
| Management & Control |
| |
 |
| |
| Administrator Controls |
| |
| Control Panel is made available to the Administrator to manage LSR for his domain. Through the control panel the Administrator can achieve the following: |
| |
Upload User list, for the purpose of recipient check.
Enabling Mail Notify feature for User & Mailing List owner
Black / White Listing Domains & Email ID’s
Viewing Various Reports : Spam , Virus & General
Search : Header of Every mail that is transacted through the server is stored in MySql, can be searched on demand
View & Release Entire SPAM Digest for the domain |
| |
| Spam Quarantine Management |
| |
All spam received by the domain are stored on spam quarantine server for a period of 6 days, administrator can view the spam quarantine and release any False positive mail that he feels during this period.
Spam quarantine displays only the mail headers to the administrator, cannot view the mail content. |
| |
| User Level Spam Management |
| |
Spam notify feature when enabled for user, User first receives his/hers username /password for spam quarantine server.
on daily basis user start’s getting a spam digest on mail. This spam digest has list of mail quarantined by LSR. User can release any mail accidentally trapped by LSR using the username / password of the spam quarantine server without involving the administrator. |
| |
| Benefits |
| |
 |
Signed SLA of 98.3 % Accuracy for Spam |
| |
|
 |
Spam Quarantine management & End user Spam Quarantine control |
| |
|
 |
Comprehensive Protection against viruses & virus Outbreaks |
| |
|
 |
Huge saving on bandwidth, Frees up bandwidth usurped by SPAM |
| |
|
 |
Builds in Automatic Redundancy, spooling mail in case of Mail Server outage. |
| |
|
 |
Delivered through parallel IDC setups ensuring 99.99 % Uptime |
| |
|
 |
Extremely Intuitive Control Panel to manage your own domain |
| |
|
 |
No Hardware or Software required |
| |
|
 |
Extremely Cost Effective, Scalable, Reliable Solution |
|
| |