Overview:
Stand guard against email attacks today. And tomorrow.
SonicWall Email Security is available as a virtual appliance or as a software application, and is ideal for organizations that require the flexibility and agility that come with virtualization. SMBs, enterprises or MSPs can leverage their shared computing resources to optimize utilization, ease migration and reduce costs. SonicWall Email Security can be configured for high availability in split mode, to centrally and reliably manage large-scale deployments.
SonicWall Email Security
Email is crucial for your business communication, but it can also expose your business to sabotage and productivity drains if email-based threats such as ransomware, phishing, business email compromise (BEC), spoofing, spam and viruses flood your mail servers and user inboxes. What’s more, government regulations now hold your business accountable for protecting confidential data and ensuring it is not leaked and that email containing sensitive customer data or confidential information is securely exchanged. Whether your organization is a growing small-to medium-sized business (SMB), a large, distributed enterprise or a managed service provider (MSP), you need a cost-effective way to deploy email security and encryption, and the scalability to easily grow capacity for — and delegate management across — organizational units and domains.
SonicWall Email Security appliances and software provide superior protection from inbound and outbound email threats and compliance violations by scanning all inbound and outbound email content and attachments for sensitive data, delivering real-time protection ransomware, advanced phishing attacks, spoofing, viruses, malicious URLs, zombies, directory harvest (DHA), Denial of Service (DoS) and other attacks. The solution leverages multiple, patented SonicWall threat detection techniques and a unique, worldwide attack identification and monitoring network.
SonicWall Email Security now integrates with the Capture Advance Threat Protection service, to deliver fine-grained and user-transparent inspection of SMTPbased traffic. The cloud-based Capture ATP service can scan a broad range of email attachment types, analyze them in a multi-engine sandbox, and block dangerous files or emails before they reach your network. Email Security with Capture ATP gives you a highly effective and responsive defense against ransomware and zero-day attacks.
The solution also includes Domain-based Message Authentication, DKIM (Domain Keys Identified Mail), SPF (Sender Policy Framework), Reporting and Conformance (DMARC), a powerful email authentication method that helps identify spoofed mail, reducing spam and advanced phishing attacks such as spear-phishing, whaling, CEO fraud and business email compromise, It also reports on sources and senders of email, so you can identify and shut down unauthorized senders falsifying email with your address and protect your brand. In addition, it prevents confidential data leaks and regulatory violations with advanced compliance scanning and management, including integrated email encryption cloud service to ensure secure exchange of sensitive data.
Administration of the Email Security solution is intuitive, quick and simple. You can safely delegate spam management to end users, while still retaining ultimate control over security enforcement. You can also easily manage user and group accounts with seamless multi-LDAP synchronization. For large, distributed environments, multi-tenancy support lets you delegate sub-administrators to manage settings at multiple organizational units (such as enterprise divisions or MSP customers) within a single Email Security deployment.
Benefits:
- Capture ATP service for email security protects against advanced threats such as ransomware and zero-day malware
- Advanced analysis techniques to stop spam, phishing, spoofing, zombie and virus attacks
- 24/7 access to the SonicWall GRID Network to stop new threats as they emerge
- Add-on anti-virus and anti-spyware protection for multi-layer security
- Optional Email Compliance and Encryption subscription services for secure, mobile-ready, email encryption and exchange
- Intelligent automation, task delegation, at-a-glance customizable dashboard and robust reporting for simplified management
- Flexible deployment options for longterm value
Features:
SonicWall Email Security Capture Advance Threat Protection Service
Detect and block advanced threats until verdict. This service is the only advancedthreat-detection offering that combines multi-layer sandboxing, including full system emulation and virtualization techniques, to analyze suspicious code behavior within emails, to protect customers against the increasing dangers of zero-day threats. And, the Email Security Capture now delivers finer granularity with more extensive file-type inspection, additional in-depth reporting capabilities, and a more streamlined and less obtrusive user-experience.
Advanced analysis techniques
Stop spam, phishing, spoofing, zombie and virus attacks using multiple proven, patented1 techniques including reputation checks that check not only a message’s sender IP reputation, but also the reputation of its content, structure, links, images and attachments. Email Security protects against DHA and DoS attacks, and ensures sender validation. Advanced analysis techniques include a Support Vector Machine (SVM) algorithm, adversarial Bayesian filtering, image analysis and gibberish detection to uncover hidden known threats, and new threats.
SonicWall GRID Network
Receive the most accurate and up-to-date protection against new spam attacks while ensuring delivery of benign email with real-time threat information from the SonicWall Global Response Intelligent Defense (GRID) network, which collects information from millions of data sources. The SonicWall threat team analyzes that information and performs rigorous testing to establish reputation scores for senders and content, identifying new threats in real-time.
Anti-virus and anti-spyware protection
Get up-to-date anti-virus and antispyware protection with SonicWall GRID Anti-Virus. Also add Cyren, Kaspersky and McAfee anti-virus signatures and malicious URL detection for multilayer protection that is superior to that provided by solutions that rely on a single anti-virus technology.
Moreover, you can safeguard your network from the time a new virus outbreak occurs until the time an anti-virus signature update is available by adding the predictive technology of SonicWall Time Zero Virus Protection.
Intelligent automation, task delegation and robust reporting
Simplify management with intelligent automation, task delegation and robust reporting. Automatically manage email addresses, accounts and user groups. Seamlessly integrate with multiple-LDAP servers. Confidently delegate spam management to end users with the downloadable Junk Button for Outlook® plug-in, while still retaining full control. Locate any email in seconds with the Rapid Message Search Engine. Centralized reporting (even in split mode) gives you easily customizable, systemwide and granular information on attack types, solution effectiveness and built-in performance monitoring and reports are available in PDF and JPEG formats.
Compliance Policy Management
This add-on service enables compliance with regulatory mandates by helping you to identify, monitor and report on email that violates compliance regulations and guidelines (e.g., HIPAA, SOX, GLBA, and PCI-DSS) or corporate data loss guidelines. The subscription service also enables policy-based routing of mail for approval, archiving and encryption.
Email Encryption
Add a powerful framework for stopping data leaks, managing and enforcing compliance requirements and providing mobile-ready secure email exchange for organizations of all sizes.
Encrypted email can be tracked to confirm the time of receipt and time opened. Intuitive for the recipient, a notification email is delivered to the recipient’s inbox with instructions to simply log into a secure portal to read or securely download the email. The service is cloud-based with no additional client software necessary and unlike competitive solutions; the encrypted email may be accessed and read from mobile devices or laptops.
Flexible deployment options
Gain scalable, long-term value by configuring your solution for growth and redundancy with minimal upfront costs. You can deploy Email Security as a hardened, high-performance appliance, as software leveraging existing infrastructure or as a virtual appliance leveraging shared computing resources to optimize utilization, ease migration and reduce capital costs. Start with a single system and then as your business grows, add capacity and move to a fail-over enabled, split-mode architecture. Multi-tenancy support allows large enterprise or managed service provider deployments with multiple departments or customers to establish organizational units with one or multiple domains. The deployment may be centrally managed, but still allows a given organizational unit to have its own users, sub-administrators, policy rules, junk boxes and more.
How it Works:
Deployment Options:
SonicWall Email Security Deployments
The highly flexible architecture of SonicWall Email Security enables deployments in organizations that require a highly scalable, redundant and distributed email protection solution that can be centrally managed. SonicWall Email Security can be deployed in either all-in-one (Figure 1) or split mode (Figure 2).
In split mode, systems may be configured as a remote analyzer or a control center. In a typical split-mode setup, one or more remote analyzers is connected to a control center. The remote analyzer receives email from one or more domains and applies connection management, email filtering (anti-spam, anti-phishing and anti-virus) and advanced policy techniques to deliver benign email to the downstream email server. The control center centrally manages all remote analyzers and collects and stores junk email from the remote analyzers. Centralized management includes reporting and monitoring of all related systems. This paradigm allows the solution to costeffectively scale and protect both inbound and outbound email for growing organizations. Using SonicWall Email Security Virtual Appliances, split mode can be fully deployed on one or multiple servers for optimal efficiencies of scale.
Flexible, Scalable Deployment Options
All-in-one configuration (Figure 1) In an all-in-one configuration, filtering and management take place on the same system.
High availability deployment (Figure 2) For load balancing and redundancy, split mode enables organizations to filter at the network perimeter while providing centralized control. Administrators can easily synchronize SonicWall Email Security across multiple LDAP servers in distributed and hosted environments for scalable deployment.
Specifications:
| Virtual Appliance Specifications: |
| Hypervisor |
ESXi and ESX (version 5.0 and newer) |
| Operating System Installed |
8 GB (expandable) |
| Allocated Memory |
4 GB |
| Appliance Disk Size |
160 GB (expandable) |
| Documentation |
VMware Hardware Compatibility Guide |
| |
Appliance,
Virtual Appliance |
Windows Server |
| Anti-spam effectivenes |
|
|
| Connection management with advanced IP reputation |
|
|
| Phishing detection, classification, blocking |
|
|
| Directory harvest, denial of service, NDR protection |
|
|
| Anti-spoofing with support for SPF, DKIM and DMARC |
|
|
| Policy rules for user, group, all |
|
|
| In memory message transfer agent (MTA) for enhanced throughput |
|
|
| Complete inbound and outbound protection in a single system |
|
|
| Installation |
< 1 hour |
< 1 hour |
| Management per week |
< 10 min |
< 10 min |
| Automatic multi-LDAP sync for users, groups |
|
|
| Compatible with all SMTP email servers |
|
|
| SMTP Authentication support (SMPT AUTH) |
|
|
| Allow/deny end user controls |
|
|
| Customize, schedule and email 30+ reports |
|
|
| Judgment details |
|
|
| At-a-glance, customizable management dashboard |
|
|
| Rapid message search engine |
|
|
| Scalable split-mode architecture |
|
|
| Clustering and remote clustering |
|
|
| Single sign-on |
|
|
| Per user junk boxes, junk box summary actionable email |
|
|
| Per user anti-spam aggressiveness, block/allow lists |
|
|
| SonicWall GRID anti-virus, anti-spam, anti-phishing auto-updates every minute |
|
|
| 24x7 support |
|
|
| RMA (appliance replacement) |
|
|
| Software/firmware updates |
|
|
| McAfee, Kaspersky, and Cyren Anti-virus |
|
|
| SonicWall TimeZero anti-virus |
|
|
| Zombie detection |
|
|
| Robust policy management, |
|
|
| Attachment scanning |
|
|
| Record ID matching |
|
|
| Dictionaries |
|
|
| Approval boxes/workflow |
|
|
| Email archiving |
|
|
| Compliance reporting |
|
|
| Compliance subscription capabilities plus policy-enforced email encryption and secure email exchange |
|
|
| Includes email protection dynamic 24x7 subscription plus multi-layer anti-virus (McAfee,Kaspersky, Cyren), malicious URL detection and compliance management subscription features |
|
|
Services and Add-Ons:
Capture ATP Subscription
Protect against emerging zero-day attacks and prevent sensitive data from leaving your organization. Get clear visibility into your SMTP traffic, with detailed reporting to help you better manage your email communications. SonicWall Email Security now integrates with our Capture Advance Threat Protection (ATP) service, to deliver fine-grained and user-transparent inspection of SMTP-based traffic. This cloud-based sandboxing technology enables you to scan a broad range of email attachment types to detect advanced threats, analyze them in a multi-engine sandbox, block them prior to a security verdict, and rapidly deploy remediation signatures. With multiple administrative options ranging from removing the offending attachment to blocking the entire message, Email Security with Capture ATP delivers higher security effectiveness, faster response times and a lower total cost of ownership for industry-leading email sandboxing security.
Email Protection Subscription with Dynamic Support (required with appliance or software purchase)
Deliver threat protection for SonicWall™ Email Security software or appliances, with SonicWall Email Protection subscription with Dynamic Support (8x5 or 24x7). You receive:
- Automatic anti-spam, anti-phishing and anti-virus updates from the SonicWall GRID network
- Software and firmware updates
- Phone-based support (8x5 or 24x7), web-based support (anytime)
- RMA for the appliance: 1-year warranty for repair or replacement of any defective product due to manufacturer's defects
Anti-virus Subscriptions
Add optional multi-layer anti-virus protection, including McAfee Signature updates, SonicWall Time-Zero virus protection and zombie detection.
Email Compliance Subscription
Promote compliance with internal and industry mandates, using compliance dictionaries, attachment scanning, approval boxes, record ID matching, archiving, encryption and compliance reports.
Email Encryption subscription
Prevent confidential data leaks and regulatory violations with advanced compliance scanning and management, including integrated email encryption cloud service to ensure secure exchange of sensitive data. Configure policies to scan outbound email content and attachments for sensitive data. When detected, the email is encrypted for secure email exchange with customers and partners. Encrypted email can be tracked to confirm the time of receipt and time opened. Intuitive for the recipient, a notification email is delivered to the recipient's inbox with instructions to simply log into a secure portal to read or securely download the email. The service is cloud-based with no additional client software necessary and unlike competitive solutions; the encrypted email may be accessed and read from mobile devices or laptops.
TotalSecure email subscription
Ensure greater return on investment and long-term value with a subscription bundle including SonicWall Email Protection subscription with 24x7 Dynamic Support, Email Compliance subscription, and multi-layer anti-virus protection, including McAfee, Kaspersky and Cyren signature updates, plus SonicWall Time-Zero virus protection and zombie detection.
