Technical FAQ
Transitioning to McAfee SaaS Email Protection
from Postini
Frequently Asked Questions
Google recently and abruptly announced that all Postini customers must either migrate to Google Apps, which includes a paralyzed version of Postini, or terminate their contract upon expiration and move to another vendor:
http://support.google.com/postini/bin/answer.py?hl=en&answer=2717451
To make matters worse, the Google Apps email filter will not maintain many of the valuable features that IT departments have come to depend on. Therefore, it’s no surprise that McAfee has welcomed scores of Postini customers to its award winning McAfee SaaS Email Protection service since the announcement.
Q: Why Choose McAfee?
A: There are many reasons why you should switch from Google/Postini to McAfee:
• As the world’s largest dedicated security vendor, McAfee’s primary focus will always be providing the highest level of
security to our customers. When it comes to email security, McAfee solutions goes beyond defending against spam, phishing, malware, and blended attacks, to also help customers secure outbound communications via integrated encryption, a robust set of pre-built compliance templates, the ability to scan 300+ attachment types, and data loss prevention technologies to safeguard data from bad actors or accidental mishaps. Email continuity and email archiving are integrated as part of the solution.
• McAfee has a long-term commitment to email security, demonstrated by our history of frequent product
enhancements, and over 10 years of operational excellence.
• We understand that providing good customer service requires more than just a support web site, which is why
McAfee provides 24x7 live customer support at no additional charge.
• McAfee recently received these important industry recognitions for email security:
– Leader, Gartner Magic Quadrant for Secure Email Gateway – Leader, Forrester Wave for Email Content Security
– Value Leader, EMA Radar Report for Hosted Email Security – 5-Star Best Buy, SC Magazine Email Content Security – Innovator: Data Protection, SC Magazine
• McAfee is ISO 27001 certified and serves tens of thousands of businesses and millions of end users worldwide:
– Console localized for end users in 18 languages
– Localized email processing with data centers in North America, Europe, Asia, and Australia.
• Integration with McAfee SaaS Web Protection helps organizations optimize security for greater cost effectiveness.
Q: How is McAfee SaaS Email Protection Different than Postini and Google Apps?
A: First and foremost, McAfee keeps your email safe with our “defense In-depth” approach to threat protection, utilizing three AV engines, zero hour protection, and most importantly, McAfee Global Threat Intelligence (GTI). GTI is McAfee’s cloud-based threat identification network, drawing threat data from over 100 million global listeners and billions of email transactions per day.
Differentiators to consider:
• McAfee offers Spooling options for instances when email cannot be delivered to your network due to outages,
including the ability for users to interact with spooled email
• Outbound filtering including built-in DLP and integrated encryption services • 60 days of audit logging versus Postini’s 45 days
• Near-real time message audit records availability
• Proxy-based filtering, which minimizes disk writes and provides senders with accurate chain of custody information,
as opposed to Google Apps’ store-and-forward model
• McAfee’s proxy architecture won’t overwhelm your system with unnecessary connections. • No character limit on allow/deny list entries
• With convenient roles like “quarantine administrator” McAfee makes it easy for organizations to delegate appropriate
levels of access to the corporate helpdesk
• Easy-to-use TLS, SPF, and DKIM functionality, supporting your ability to enforce email authentication best practices Migration Process Overview
In this guide, we’ll show you the most common configuration tasks, but keep in mind that there is a lot more to McAfee SaaS Email Protection than what you’ll find here! To learn more, we highly recommend attending one of our free online training classes. Setup can take anywhere from a few minutes to several days depending on your knowledge level and the complexity of your infrastructure.
Tasks
1. Preparation
2. Configure inbound delivery 3. Configure inbound server failover 4. User creation
5. Configure inbound policies 6. Configure outbound policies 7. Inbound cutover
Data Sheet
McAfee SaaS Email Security
Complete email security and access without the operational costs
In a difficult economy, many companies delay technology investments, including
upgrades to security infrastructure and additional IT staff, or look to cut costs
by moving the inboxes to the cloud. According to a SANS Institute study, 95% of
all attacks on enterprise networks are the result of successful spear-phishing.
1The
email threats they propagate are more sophisticated than even before—and more
dangerous.
Blocking Spam and Malware Is Just Half the Battle
Everyone who depends on email to do business needs to put into place these security measures:
• Block inbound noise and threats before they can
impact your network, employees, or business operations.
• Accurately identify and block outbound emails
that contain proprietary, inappropriate, or actionable content, whether in the message body or in attachments, and act on them appropriately.
• Ensure always-on access to email
communications.
• Maintain and document compliance to company,
industry, and government regulations.
• Manage the complete email environment for
up-to-the-minute security, continuity, and compliance.
Deferred Management Is Not an Option
Staying on top of all these challenges can be par-ticularly time consuming and costly. Fortunately, there’s a much easier way to manage email security, provide reliable storage and retrieval, and ensure continuous access—at a lower cost and with minimal IT effort.
Low-Cost, Easy-to-Manage Email Protection
A snap to deploy, McAfee® Security-as-a-Service
(SaaS) email security solutions are always on, always up-to-date, and require no additional hardware or software investment nor any extra time and resources to maintain them. Because these services stop spam and email-based threats before they infiltrate your network, the load on
your email servers is greatly reduced, saving you valuable bandwidth and server storage. World-class 24/7 McAfee Customer Support ensures that help is never more than a phone call away. Simplified web-based administration and reporting
With a single, intuitive web-based management console, email policy updates are simple to manage across all your domains and locations. Admini-strators can configure and enforce policies for spam, malware, and content-filtering policies, including attachment content rules. Microsoft Active Directory integration enables easy, ongoing maintenance. Policies may be applied globally to user groups or individuals for ultimate flexibility. Reports, logs, message audits, and quarantines provide the necessary visibility. McAfee SaaS email solutions also free up valuable IT resources and lower your total cost of ownership.
Email is today’s engine of productivity. Every day, with thousands of email messages passing through a typical company’s servers, managing email to ensure security and availability has become a huge task. But there’s a better way. McAfee SaaS email security solutions provide you with total control over email security and availability while freeing IT resources to focus on strategic work that advances corporate initiatives.
Robust infrastructure and operations you can rely on
The McAfee SaaS data-center strategy includes maintaining multiple data centers across four continents. McAfee SaaS is ISO 27001-certified and the service provides full redundancy with active-active redundant hardware at all network
Protecting the Click McAfee ClickProtect helps you eliminate the threats from embedded URLs within an email message, and is a core feature of the solution.
Easy to Adopt Modules: • SaaS Email Protection
& Continuity
• SaaS Email Encryption • SaaS Email Archiving
layers: Firewall, router, and load-balancer switch. Within each data center, we also provide auto-mated network and application monitoring, which provides visibility into alerts and alarms and security experts overseeing the systems 24/7.
Fierce Email Security
The power of billions—McAfee Global Threat Intelligence™ (McAfee GTI™)
The Security Connected framework from McAfee correlates cross-vector intelligence from email, web, network, and endpoint threat data. McAfee GTI applies Big-Data analytics on the collective intelligence, so that McAfee email security always has the latest, up-to-the-moment information for optimized email security.
Protecting the click
McAfee ClickProtect helps you eliminate the threats from embedded URLs within an email message. It checks for changes in URL intent occurring between the time the message is scanned (scan time), regardless of how harmless it may have appeared, and when the URL is clicked by a user (click time). This re-inspection may include both a URL reputation check and proactive emulation leveraging the same industry-leading Gateway Anti-Malware technology in McAfee Web Protection. Administrators can configure both scan-time and click-time policies, and enable URL emulation to protect users from the click. SafePreview offers a sneak peak, leveraging user intelligence as an additional layer of security.
Superior spam protection
The patented Stacked Classification Framework spam detection system applies multiple layers of analysis in a proxy-based filtering approach to determine the probability that an email is spam, regardless of language. Because each filtering technology has unique strengths designed to identify specific threats, including image-based spam, the combination creates one of the most accurate and comprehensive filtering processes in the industry.
McAfee GTI message reputation inspects each message to detect known and emerging message-based threats such as spam, even if these messages come from a reputable source. Reputation scrutiny enables McAfee SaaS Email Protection & Continuity to block or quarantine email more efficiently and accurately.
SPF and DKIM validation provide yet another layer of security. SPF validates incoming messages to ensure that they are indeed originating from sender-verified registered domains, and DKIM validates that the messages have been electronically signed by the sender and are legitimate.
Use gray/bulk mail filtering to further reduce unwanted email
Unwanted mail could be legitimate bulk mail that was once solicited by the user, but is now no longer wanted and may represent a nuisance to recipients. By using graymail filters, administrators can set graymail policies and even delegate to users to enable this capability to keep mailboxes clear of graymail.
Block viruses and worms bidirectionally with triple-layer scanning
In addition to blocking inbound attacks, outbound emails are filtered to protect your clients against malware, scanning both the message body and attachments. Included is our proprietary WormTraq detection technology and our industry-leading, signature-based antivirus engine powered by McAfee GTI. Third-party antivirus technology is also included to help customers meet compliance requirements.
Complete scalability to protect from massive-scale email attacks
Our complete solution shields your network and critical messaging gateways from email attack, instantly blocking denial-of-service and other SMTP-based attacks: Directory harvest attacks, email bombs, and channel flooding.
Identify Sensitive Data for Compliance and to Prevent Data Loss
Prebuilt rules, advanced content scanning, and document fingerprinting
Advanced data-loss prevention and compliance capabilities give you instant access to prebuilt content rules for PCI-DSS, healthcare, financial data, regional privacy regulations, and more to enable you to quickly create compliance policies. Scan and secure more than 300 document types to protect against outbound data loss.
Optimized Protection Bring it all together to simplify management while getting greater visibility with a single pane of glass.
• McAfee SaaS Email Protection
is available as part of McAfee Email Protection, which enables customers to choose their deployment form factor, including an integrated hybrid approach via a single management console.
• Combine McAfee SaaS email,
web, and endpoint security into a one-stop console.
Advanced document fingerprinting
Verified technology enables you to train your email security to determine which documents are policy controlled. By creating and storing digital fingerprints of selected documents, the solution learns what kind of content needs to be controlled by policy. Policies can be granularly enforced for whole or partial con-tent matches in email and attachments.
Never lose another email
When outages occur, business-critical inbound emails are not rejected. All incoming emails are spooled during an outage and intelligently delivered when your email servers come back online.
Always-on email continuity—no matter what Whether the network is inaccessible due to natural disasters, power outages, or regular maintenance, McAfee SaaS Email Protection & Continuity keeps employees, customers, partners, and suppliers connected 24/7. The secure, easy-to-use web interface allows users to send and receive messages with continued protection, search for and retrieve stored messages, and manage quarantines and message stores just as they would in a live environ-ment. And the service retains all messages sent or received during the outage, intelligently synchronizing an accurate record of all outage-period message activity when your own email servers come back online.
Encryption Protects from Prying Eyes
Built-in transport layer security (TLS) encryption for secure organization-to-organization communication
For organizations that need a higher level of security for inbound and outbound email, our TLS protocol accepts and filters encrypted inbound and outbound messages and delivers them across a secure tunnel. Easy-to-use push/pull encryption
When your business requires secure communications with your customers, McAfee SaaS Email Encryption empowers you to take ownership of encrypting sensitive information, even if your recipient doesn’t have an encryption solution. Our easy-to-use, mobile-enabled push/pull encryption technology ensures that your data is protected from prying eyes.
Branding for a consistent online experience Encryption notification emails may be branded to match the look and feel of your organization to provide your customers with a consistent online experience.
Better Security for Microsoft Office 365 and Google Apps
It’s easy to layer stronger email security for Microsoft Office 365 and Google Apps for Business-hosted mailbox customers. With a simple checkbox in the management console and redirection of MX records, customers can turn on unparalleled inbound threat protection, including ClickProtect, and the ability to inspect outbound email for sensitive content. This eliminates the need to manually input—and maintain—hundreds of IP addresses into your email security service to inspect email originating from Google or Microsoft.
Intelligent Routing for a Strong Brand
As your business grows, it becomes even more vital to maintain a strong corporate brand. McAfee SaaS intelligent routing empowers you to easily add new local domains to your existing public-facing domains, seamlessly routing emails to the appropriate mail systems and recipients. It cuts bandwidth costs by eliminating the need to reroute mail from a primary location to users at satellite offices.
Archive Unlimited Email Data, No Hardware Required
Today’s email volumes are soaring. At the same time, government and industry regulations increasingly require you to produce documentation for all kinds of decisions and processes. Facing these pressures, companies need fast, simple, and affordable email archiving and retrieval. The McAfee SaaS Email Archiving service reduces email storage and management costs, securing your company’s inbound, outbound, internal, and even historic email as it’s created, while shrinking Microsoft Exchange databases to a manageable size. It also satisfies compliance and e-discovery requirements, protecting your business and employees. Its powerful search features help authorized users find and retrieve messages simply in seconds, without IT assistance. A cloud-based service, McAfee SaaS Email Archiving requires no hardware or software to purchase, and no need to manage backup media and offsite storage. Choose a retention period of up to 10 years. McAfee SaaS Email Archiving is offered as a standalone service or with other McAfee Email Protection solutions.
2821 Mission College Boulevard Santa Clara, CA 95054 888 847 8766 www.mcafee.com
McAfee, the McAfee logo, McAfee Global Threat Intelligence, and McAfee GTI are registered trademarks or trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other marks and brands may be claimed as the property of others. The product plans, specifications, and descriptions herein are provided for information only and subject to change without notice, and are provided without warranty of any kind, express or implied. Copyright © 2013 McAfee, Inc.
60255ds_saas-email-security_0613_fnl_ASD
McAfee Products Inbound FilteringMcAfee SaaS
McAfee SaaS Email Protection and
Continuity
McAfee SaaS Email Protection and Continuity with Encryption Infrastructure and Operational Services
24/7 support • • •
Capacity and performance management • • •
Automatic maintenance and upgrades • • •
ISO 27001-certified data centers • • •
Monthly, annual, multiyear subscription • • •
Administration and End-User Support
Message audit • • •
Support for more than 15 languages • • •
Security Connected from McAfee • • •
Google Apps and Microsoft Office 365 compatible • • • Email Security
McAfee GTI • • •
ClickProtect • • •
Inbound spam, phishing protection, and malware protection • • •
Gray/bulk mail filtering • • •
TLS encryption • • •
Enforced SPF and DKIM authentication • • •
DKIM signing • •
Outbound policy enforcement and malware protection • •
Email spooling • •
Continuous email access • •
Push/pull encryption •
Encryption branding •
Attachment content scanning, more than 300 file types •
More than 114 pre-built compliance and data loss templates •
Document fingerprinting •
Optional
Email archiving • • •
Intelligent routing • • •
Time for a Change
Get enterprise-grade protection for less time, money, and stress. The savings don’t stop with your purchase—find out how you can minimize maintenance with our easy-to-use and award-winning service and free your over-extended IT staff to focus on more strategic projects.
Learn more at www.mcafee.com/ emailsecurity, and sign up for a free trial at www.mcafeesaas.com.
