Cisco IronPort Hybrid Email Security
Flexible Service Offerings to Meet Unique Email Security Needs
Cisco IronPort Hybrid Hosted Email Security is a unique service offering that provides maximum flexibility by dividing control between the customer site and Cisco® cloud-based, software as a service (SaaS) infrastructure. Based on the same industry-leading technology that protects 40 percent of Fortune 1000 companies from inbound and outbound email threats, this hybrid service reduces the on-site data footprint, while still allowing customers to maintain control of confidential information within their physical boundaries. Like the Cisco IronPort Hosted Email Security service (which provides a dedicated email security infrastructure in multiple, resilient Cisco data centers), this hybrid service enables customers to retain access to - and visibility of - both the on-premises and hosted infrastructure. With comprehensive reporting and message tracking, maximum administrative flexibility is assured. On-premises appliances add the ability to deliver advanced outbound control with encryption, data loss prevention (DLP), and on-site LDAP integration. This service is all-inclusive - with software, hardware and support bundled together for simplicity.
Download the Cisco IronPort Hybrid Email Security datasheet
The Cisco IronPort Difference
IronPort-powered email security is the foundation of Cisco IronPort Hybrid Hosted Email Security. This service combines best-of-breed technologies to provide the most scalable and sophisticated email protection available today. Exclusive preventive and reactive technologies including spam protection, data loss prevention (DLP), virus defense, email authentication, tracking and powerful reporting tools work together to enable a co-managed security service.
Features
Today's email security threats consist of various viruses, spam, false positives, distributed denial of service (DDoS) attacks, spyware and phishing (fraud). IronPort® technology blocks all types of threats and ensures that companies only receive legitimate messages.
Cisco utilizes multiple methods to provide the utmost in comprehensive email security, incorporating preventive and reactive measures to maximize defense.
Proven Spam Protection
IronPort technology blocks all types of undesirable email messages using a multi-layered scanning architecture. This enables Cisco IronPort Hybrid Hosted Email Security to deliver the industry's highest spam catch rate, greater than 99 percent, with a less than one in one million false-positive rate.
Cisco IronPort Reputation Filters provide an outer layer of defense using data from the Cisco SenderBase® Network to perform a real-time email traffic threat assessment and identify suspicious email senders.
Cisco IronPort Anti-Spam utilizes the industry's most innovative approach to threat detection, based on Cisco's unique IronPort Context Adaptive Scanning Engine (CASE). This engine examines the complete context of a message, including: "What" content the message contains, "How" the message is constructed, "Who" is sending the message, and "Where" the call to action of the message takes you. By combining these elements, IronPort Anti-Spam stops the broadest range of threats with industry-leading accuracy.
Powerful Virus Defense
By offering a high-performance virus scanning solution, integrated at the gateway Cisco IronPort Hybrid Hosted Email Security provides a multi-layered, multi-vendor approach to virus filtering.
Cisco IronPort Virus Outbreak Filters are a critical first layer of preventive defense against new outbreaks - detecting and stopping viruses, hours before traditional virus signatures are available.
Integrated McAfee and Sophos anti-virus technology is fully integrated to enable multiple traditional virus detection methods and ensure maximum protection against even the most complex virus attacks.
Advanced Controls
Users can leverage the innovation of IronPort technology to deliver the highest levels of security and control. A range of email authentication solutions are supported by the Cisco IronPort security gateway - including a sophisticated feature set for signing outbound email with SPF and Cisco IronPort Bounce Verification technology. These enable the intelligent mail system to make more accurate decisions.
Sender Policy Framework (SPF) verification and signing digitally process messages to establish and protect identities with email senders and receivers on the Internet.
Cisco IronPort Bounce Verification tags messages with a digital watermark to provide filtering of bounce attacks at the network edge.
Directory Harvest Attack Prevention (DHAP) tracks spammers who send to invalid recipients and blocks attempts to steal email directory information.
Sophisticated Outbound Filtering Protects Sensitive Information
Outbound filtering is just as important as inbound security. By applying additional message safeguards and policies, outbound filtering helps protect and secure sensitive information.
Content filtering can be used to add headers or footers to email, or to keep email with confidential or inappropriate information from entering or leaving your network.
Transport Layer Security (TLS) uses digital certificates to authenticate the user as well as the network.
Encryption Ensures Secure Communication
Business-class email provides security and enhances visibility and control. Cisco IronPort PXE encryption technology, available on the customer premise appliance, secures authenticated confidential data to comply with partner, customer or regulatory requirements. This enables simple, secure communication from the gateway to any recipient inbox - while TLS, PGP and S/MIME technology ensure security between partner email gateways. Encryption is baked into content filtering for seamless deployment - eliminating the need for legacy PKI complexity. Encryption is available through the Cisco IronPort Hosted Key Service or on the Cisco IronPort Encryption Appliance.
Guaranteed read-receipts allow the sender to know precisely when a message sent using IronPort PXE technology was delivered and viewed by each recipient.
Message expiration and locking enables messages to be locked (preventing the recipient from viewing them) up until they are actually viewed, even after delivery to the recipient's inbox.
Comprehensive Administration and Easy Access for Co-Management
A comprehensive support portal ensures that customers always have access to an extensive knowledge base of subject matter expertise to assist with their needs. Using the Cisco Security Portal, they can create a customized homepage to quickly access their unique security interests, including the ability to view all current and historical events/tickets, geographical data, security graphics, trends, network status and performance.
Consolidated and robust reporting options analyze traffic data from geographically diverse infrastructure deployments to provide fully-integrated security reporting. IronPort's third-generation reporting technology enables unprecedented insight into even the highest volume networks in the world. Detailed and accurate information is coalesced into clear and informative reports, suitable for all levels of an organization.
Message tracking gives customers real-time visibility into messages for tracking down message disposition. This feature can help resolve help desk calls quickly by determining the exact location of a message. Instead of having to search through log files, the administrator can use the flexible tracking interface to locate messages. Tracking spans both in-the-cloud and on-premises deployments.
Service Level Agreements (SLAs) Cisco IronPort Hosted Email Security provides high-performance email security backed with an industry-leading guarantee. Customers will receive money back if any of the below mentioned SLAs are violated by Cisco.
- 99.999 percent uptime
- 99 percent spam catch rate
- No more than 1 in 1 million false-positive rate
- 100 percent known virus catch guarantee
Benefits
Industry-Leading Technology A key benefit of Cisco IronPort Hybrid Hosted Email Security is the opportunity for customers to have their email protected and managed by best-of-breed products and email security specialists. In addition to maintaining the industry's highest spam catch rate, and lowest false-positive rate, IronPort technology has been honored with numerous awards. One such accolade is the SC Magazine (U.S.) Award for "Best Email Security Solution." Forrester also stated that IronPort email security technology provides "best-in-class" performance for anti-spam.
Dedicated Infrastructure Each customer has a dedicated email security infrastructure which is racked and stacked in multiple Cisco data centers. The benefit of this is to ensure that your data is protected out of the box, prohibiting data contamination. In addition, the data center is equipped with redundancy - ensuring that your email infrastructure is highly available.
Simplified Pricing Based on the number of users per year, this model includes all hardware, software, service and support for the number of users in the contract. If the customer decides to change the type of service, or spam volumes increase drastically, there is no extra charge for additional equipment and protection.
Capacity Assurance Cisco IronPort Hybrid Hosted Email Security provides a service with the capacity to protect users and maintain peak performance. When spam volumes increase, organizations typically have to purchase new hardware to maintain protection. Cisco IronPort Hybrid Hosted Email Security alleviates worry from increasing spam volumes, and last minute budgeting for the cost of new hardware. Additional capacity is always included with the simple per-user, per-year pricing model.
Guaranteed Compliance Ensure that sensitive messages are handled in compliance with regulatory legislation, such as HIPAA, SOX, GLB and other industry regulations.
Availability Cisco IronPort Hybrid Hosted Email Security guarantees 99.999 percent uptime, ensuring that security is always available and working for you through multiple data centers.
Co-Managed Support Share management responsibility between the customer and Cisco. This benefit offers customers access to the Cisco knowledge base and assistance in resolving problems. Real-time health information of appliances and access to tracking data is "always on" and available through a single interface. This alleviates additional resource training while creating higher efficiency for the customer.
World-Class Support Team Cisco IronPort Hybrid Hosted Email Security utilizes industry-leading operational management practices. The team's diverse background is based on knowledge gained from the implementation and operation of advanced security solutions, including the analysis and remediation of millions of security events.
Summary
Cisco IronPort Hybrid Hosted Email Security is a "best of both worlds" service, providing leading email security in a unique form factor. It enables superior flexibility and choice while keeping costs predictable, thereby simplifying budgetary planning. Customers appreciate the co-managed support model, with the highest level of protection from email security experts, and the peace of mind that confidential information is safe and secure on premises.
Try Before You Buy
The best way to understand the benefits of Cisco IronPort Hybrid Hosted Email Security is to participate in the "Try Before You Buy" evaluation program. For additional information, please visit: www.ironport.com/try.
