Messaging Security

Messaging Security is a program that provides protection for companies' messaging infrastructure. The programs includes IP reputation-based anti-spam, pattern-based anti-spam, administrator defined block/allow lists, mail antivirus, zero-hour malware detection and email intrusion prevention. ^[1]

Explanations

^[2]

• IP-Reputation Anti-spam^[3] It checks each email connection request with a database of IP addresses to establish whether a sender is legitimate or known spam sender and malware. If a sender is recognize us undesirable the messaging Security program drops the connection before de message is accepted.

• Pattern-based anti-spam utilizes a proprietary algorithm to establishe a fingerprint-like signatures of email messages. When a message comes in, its pattern is calculated and checked against a database to determine if the message matches a known email pattern. This approach provides content agnostic protection and blocks spam without looking at any of the actual message content.

• Block/Allow List Anti-spam^[4] Administrators can create a list of IP addresses or domains that they would like to either block or allow. This method ensures that trusted sources are explicitly allowed and unwanted sources are explicitly denied access.

• Mail Antivirus ^[5]This layer of protection blocks a wide range of known virus and malware attacks.

• Zero-Hour Malware Protection By analyzing large amounts of messages, outbreaks are detected along with their corresponding messages. These message patterns are then flagged as malicious, giving information about a given attack. With this information, outbreaks are blocked before a signature may be available, protecting the network in the critical period of attack development.

• SmartDefense Email IPS The messaging security program utilizes SmartDefense Email IPS to stop attacks targeting the messaging infrastructure. Such attacks aim to gain access to the protected network, bring down a piece of the messaging infrastructure, or utilize the messaging infrastructure as a resource for launching new attacks.

Characteristics of Messaging Security

1. Protection against advanced spam such as image-based and multi-language spam.

2. Antivirus protection through the combination of both zero-hour and signature-based detection.

3. UTM solution for Messaging Security that is content and language agnostic.

4. Advanced, real-time IP-reputation service.

5. On-session email blocking (emails are checked and blocked during the original SMTP/POP3 session). ^[6]

See also

• Check Point Abra
• Firewall
• Comparison of firewalls
• Unified threat management
• Check Point VPN-1
• Virtual firewall
• Packet
• List of Linux router or firewall distributions
• Circuit-level gateway
• Sandbox (computer security)
• Screened-subnet firewall

References

1. ^ http://www.checkpoint.com/form/smartdefense/Messaging_Security_FAQ.pdf Messaging Security
2. ^ http://www.checkpoint.com/defense/advisories/public/messaging/index.html Check point messaging Security
3. ^ http://technet.microsoft.com/en-us/library/aa997658.aspx Understanding Anti-Spam and Antivirus Functionality
4. ^ http://lwn.net/Articles/9460/ Spam avoidance techniques
5. ^ http://download.cnet.com/ZoneAlarm-Internet-Security-Suite-2010/3000-8022_4-10291278.html?tag=lia;rcol ZoneAlarm Internet Security Suite 2010 9.3.037
6. ^ http://www.securitypark.co.uk/security_article262700.html