Sunteți pe pagina 1din 38

Cisco Email Security

Protect Your Network and Your Business

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Email Is Important for Business


The Threat Landscape

Agenda

Cisco Email Security Benefits


Inbound Protection
Outbound Control
Customizable Offerings

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Businesses Consider Email One of Their


Most Important Systems
Business Emails per Day
(Billions)

160

143.8

140

128.6
114.3

120
100

101.0

89.0

80
60
40
20
0

2012

2013

2014

2015

2016

Source: The Radicati Group, Inc., Email Statistics Report, 2012-2016

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

As the Way You Use Email Changes

Mobile

Coffee shop

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Corporate

Home

Airport

Cisco Confidential

The Threats Change Too

Targeted Attacks
APTs

Blended Threats

Botnets

IPv6 Spam
Worms
Trojan Horse
Rootkits

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Tackle the Most Advanced Threats with Cisco Email


Security Solutions

Solutions
Threat Defense

Data Security

Strengths
Best performance
C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Lowest TCO

Future focus
Cisco Confidential

Cisco Email Security Benefits

Capability to quickly block new email-sent


viruses

Best performance

Best-in-class capability to stop or encrypt


sensitive outbound email

Exceptional threat identification infrastructure


using Ciscos global presence
Proactive protection of email with Cisco
SensorBase filtering
Very few false-positive email classifications

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Cisco Email Security Benefits

No ongoing administration

Lowest TCO

Low impact on network performance


Built-in compliance capabilities
Easy installation and management
Worlds leading email security support

With Cisco, a substantial


reduction in total cost of
ownership and the new
features to battle viruses
and spam [are] a reality.
Kenichi Tabata
Komatsu. Ltd., Japan

Few appliances required


Reduced CapEx with virtual appliances

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Cisco Email Security Benefits

Demonstrated commitment to email security


investment and innovation
Extremely flexible email security: on-premises, in
the cloud, hybrid, and virtual
Smarter and better anticipation of threats

Outstanding capability to scale threat analysis as


the amount global data continues to grow

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Future focused
Cisco innovation and insight
has led email security for ten
years. We have been using
their solution campus wide with
great success for a long time. It
gives us confidence for the
future.
Dr. Damian Bucher
Zentrum fr Informationsverarbeitung
Westflische Wilhelms-Universitt
Mnster, Germany

Cisco Confidential

Cisco Security Intelligence Operations


Outstanding Cloud-based Global Threat Intelligence
24x7x365

More than US$100 million

600+

operations

spent on dynamic research and development

engineers, technicians, and researchers

40+

80+

languages

PH.D., CCIE, CISSP, AND MSCE users

Cisco SIO
WWW

Devices

IPS

Networks

Web

Endpoints

Cisco
ScanSafe

Cisco
IPS

Cisco
AnyConnect
WWW

Cisco ESA Cisco ASA Cisco WSA

Actions

Visibility

Information

Email

Control

1.6 million

35%

3- to 5-

200+

global sensors

worldwide email traffic

minute updates

parameters tracked

100 TB

13 billion

5,500+

70+

of data received per day

web requests

IPS signatures produced

publications produced

150 million+

8 million+

deployed endpoints

rules per day

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

10

Cisco SIO Is Intelligence Defense Delivered at Scale

Cisco Security Intelligence Operations:

Broad visibility
Global footprint
Defense in depth
100 TB

93 billion

13 billion

security
intelligence

daily email
messages

web
requests

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

4.5
billion
daily email
blocks

35%

150,000

5500

enterprise
email

microapplications

IPS
signatures

150
million
deployed
endpoints

3- to 5minute
updates

5 billion
daily email
connections

1.6
million

1000
applications

deployed
devices

Cisco Confidential

11

Cisco SensorBase: Email Reputation Database

Breadth and quality


of data make the
difference

Spam Traps

Complaint
Reports

IP Blacklists
and Whitelists

Message
Composition
Data

Compromised
Host Lists

Website
Composition
Data

Global Volume
Data

Domain
Blacklist and
Safelists

Other Data

IP Reputation Score
C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

-10

+10

Cisco Confidential

12

Cisco Email Security Architecture


Management

Threat Defense

Data Security

Antispam

Data Loss Prevention

Antivirus and Virus Outbreak Filter

Encryption

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

13

Cisco Email Security: Threat Defense


Management

Threat Defense

Data Security

Antispam

Data Loss Prevention

Antivirus and Virus Outbreak Filter

Encryption

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

14

Antispam Defense in Depth

What

Known good mail is delivered

When

Who

Cisco
Anti-Spam

Cisco SIO

Incoming mail
good, bad, and
unknown email

Suspicious mail is rate


limited and spam filtered

Known bad mail is blocked


before it enters the network

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Where

How

> 99% catch rate


< 1 in 1 million
false positives

Cisco Confidential

15

Cisco Anti-Spam
Defense-in-Depth Spam Protection
What
Email Reputation
Spam botnets
Spammer networks

Message Content

Who

Cisco
Anti-Spam

Web Reputation
Malware and phishes
Short-texted spam with URLs

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

When

Where

SMS Spam
Attachment-based spam

Message Construction

How

Image spam
Spam created using
automation tools

Cisco Confidential

16

Cisco Email Security: Threat Defense


Management

Threat Defense

Data Security

Antispam

Data Loss Prevention

Antivirus and Virus Outbreak Filter

Encryption

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

17

Antivirus Defense in Depth

Virus Outbreak Filters

Antivirus Engines

Zero-Hour Virus
and Malware Detection

Choice of
Antivirus Engines

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

18

Cisco Data Security Virus Outbreak Filters


Zero-Hour Malware Prevention

Cisco SIO

Dynamic
Quarantine

Virus
Filter

Virus Outbreak Filters in Action

Zero-Hour Virus
and Malware Detection

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Virus Outbreak Filters Advantage


Average lead time*: Over 13 hours
Outbreaks blocked*: 291 outbreaks
Total incremental protection*: Over 157 days

Antivirus Engines

Choice of
Antivirus Engines

Cisco Confidential

19

Outbreak filters defend against blended attacks


Integrated email and web security

Website is
clean

Link is clicked

Website is
blocked
Cisco SIO

Cisco Security

The requested web page


has been blocked
http://www.threatlink.com

Dynamic, real-time
inspection via HTTP
C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Email and Web Security protects your


organizations network from malicious software.
Malware is designed to look like a legitimate email
or website which accesses your computer, hides
itself in your system, and damages files.

Cisco Confidential

20

Cisco Email Security: Data Security


Management

Threat Defense

Data Security

Antispam

Data Loss Prevention

Antivirus and Virus Outbreak Filter

Encryption

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

21

DLP and Compliance


Built-in Comprehensive DLP Solution with RSA: Accurate, Easy, and Extensible

Fast setup
Data Loss Prevention

Low administrative overhead


Comprehensive policy creation
and modification
Exceptional accuracy
Direct integration for
enterprisewide DLP deployments

Incidents

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Policies

Cisco Confidential

22

DLP Is Easy to Set Up


Stop Sensitive Content in Minutes
One click activation of
pre-loaded policies

Integrated into
policy manager

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

23

Providing Comprehensive Policy Coverage


100+ Predefined Policies for Comprehensive Coverage

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

24

Accuracy with In-Depth Analysis

SSN detection

Proper name detection


Matches are found
in close proximity

Rule is matched multiple


times to increase score

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Unique rule matches are met

Cisco Confidential

25

And Easy Reporting and Monitoring

Drill-down reporting

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Detailed message tracking

Cisco Confidential

26

Cisco Email Security: Data Security


Management

Threat Defense

Data Security

Antispam

Data Loss Prevention

Antivirus and Virus Outbreak Filter

Encryption

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

27

Traditional Email Has


Limitations

Cisco Encrypted Email Is


Integrated into the
Network

Anyone

Confidential

can read message

Email

No guaranteed

TO

TO

CC

CC

SUBJECT

SUBJECT

Read

message recall

Receipt

No control

Guaranteed

over forwarding

Recall

Secure
Reply and forward

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

28

Simplified Messaging Security Through a Cloud-Based


Encryption Service
Cisco Registered Envelope Service Turnkey Email Encryption
Flexible cloud-based
encryption key server

Encryption key is stored in the cloud

Hosted key service


Federated identity gateway
Push technology with
intuitive policy
management
Support for SAML for
federated identity
Technology independence:
use your inbox or mail
server of choice

Email sender
prepares an
encrypted message
for the recipient

Recipient gets
encrypted message

Encryption key is
requested by
recipient to decrypt
message

Decrypted message
is displayed to
recipient

Integrated MTA-to-MTA TLS enforced security with advanced


end-to-end encryption to meet evolving customer requirements
C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

29

Easy for the Sender

Automated key management


No desktop software requirements
Send to any email address transparently
Encryption triggered by keywords, policies, senders,
recipients, etc.

Sender Controls

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

30

And Easy for the Recipient

Open attachment

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Enter password

View message

Cisco Confidential

31

Offering Enhanced Visibility and Control


With Multidevice Support for Encrypted Email Anytime and Anywhere

Smartphones

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Tablets

Laptops

Cisco Confidential

32

Cisco Email Security: Management


Management

Threat Defense

Data Security

Antispam

Data Loss Prevention

Antivirus and Virus Outbreak Filter

Encryption

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

33

Cisco Email Security Manager


Single View of Policies for the Entire Organization
Categories by: active directory, domain, username, or LDAP

Allow all media files


IT

Quarantine executable files

Mark and deliver spam


Delete executable files

Sales

Archive all mail


Virus-outbreak filters
disabled for .doc files

Legal

A single, versatile dashboard to manage all the services on the appliance


C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

34

Comprehensive Insight
Unified Business Reporting
Consolidated and custom reports

Single view across


the organization

Multiple data points

Email volumes
Spam counters
Policy violations

Real-time insight
into email traffic and
security threats
Actionable drilldown reports

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Virus reports
Outgoing email data
Reputation service

System health view

Cisco Confidential

35

Visibility into Email Messages


Message Tracking

What happened to the email I sent 2 hours


ago?
Track individual email messages

Who else received similar emails?

Forensics to help ensure compliance

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

36

Customizable Service Offerings


Broad Protection and Control

Inbound Protection

Outbound Control

Threat Defense

Data Security

Antispam

Data Loss Prevention

Antivirus and Virus Outbreak Filter

Encryption

Flexible Deployment Options


C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Appliance

Virtual

Cloud

Cisco Confidential

37

C97-728331-00 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

38

S-ar putea să vă placă și