IronPort EMAIL SECURITY APPLIANCES

HIGH-PERFORMANCE EMAIL S E C U R I T Y. C A R R I E R - P R O V E N T E C H N O L O G Y. E N T E R P R I S E C L A S S M A N A G E M E N T.

IronPort C360 for Medium-Sized Enterprises and Satellite Offices

Medium-sized enterprises face the same daunting challenges as the Fortune 500 and Global 2000 higher mail volumes and new, evolving threats. The IronPort C360 is purpose-built on the foundation of the Iron Port AsyncOS operating system, to provide power for todays volumes and high-perfor mance scanning for tomorrows threats. The unparalleled performance of the IronPort email security appliance delivers industry-leading protection from inbound spam and virus attacks and outbound data loss possibilities, in an easy-to-use appliance.

Todays email-borne threats consist of virus attacks, spam, false positives, distributed denial-of-service (DDoS) attacks, spyware, phishing (fraud), regulatory compliance violations and data loss. The IronPort C360 email security appliance addresses the issues faced by corporations, both large and small, by incorporating preventive and reactive security measures that are easy to deploy and manage.

f e at u r e s

The IronPort C360 contains a powerful multi-layered approach to email security providing advanced threat prevention, blocking spam and viruses, and enabling corporate data loss prevention and remediation.
SPA M P R OT EC T I ON

IronPort provides defense in depth against spam with a preventive layer of reputation filters, followed by reactive filters.
IronPort Reputation Filters provide an

Context Adaptive Scanning Engine (CASE). IronPorts CASE examines the complete context of a message, including: What content the message contains, How the message is constructed, Who is sending the message, and Where the call to action of the message takes you. By combining these elements, IronPort Anti-Spam stops the broadest range of threats with industry-leading accuracy.
The IronPort Spam Quarantine is a self-

outer layer of defense using IronPort SenderBase data to perform a real-time email traffic threat assessment and identify suspicious email senders.
IronPort Anti-Spam Filters utilize the industrys most innovative approach to threat detection, based on IronPorts unique

service end-user solution, with an easy to use Web or email-based interface. This feature provides end-users with their own safe holding area for spam messages and integrates seamlessly with existing directory and mail systems.

IronPort C360 Email Security Appliance

page 2

F e at u r e s
(continued)

V I R U S P R OT EC T I ON

IronPort Virus Outbreak Filters identify and

stop viruses hours before traditional virus signatures are available.

IronPort Bounce Verification tags messages with a digital watermark to provide filtering of bounce attacks at the network edge. Directory Harvest Attack Prevention tracks

fully integrated second layer of virus protection with the highest-performance virus scanning technology in the industry.
McAfee Anti-Virus technology is fully inte-

spammers who send to invalid recipients and blocks attempts to steal email directory information.
E N T E R P R I S E M A N AG E M E N T TOOLS

grated to provide an additional layer of protection (either in conjunction with, or as an alternative to, Sophos) for maximum virus security.

Email Security Manager is a powerful,

DATA LOSS P R E V E N T I O N

graphical management tool that yields fingertip control to manage all security including preventive and reactive anti-spam and anti-virus filters, email encryption and content filtering.
Intuitive GUI enables unprecedented visibility

Integrated Compliance Filters allow custom-

ers to address PCI, HIPAA, GLB, SOX and other regulatory compliance requirements. IronPorts easily deployed solution defends against regulatory compliance violations, enables intellectual property protection and enforces organizations acceptable use policies.
IronPort Email Encryption gives administrators the ability to secure confidential data and comply with partner, customer or regulatory requirements. IronPort PXE encryption technology enables simple, secure communication from the gateway to any recipient inbox while TLS, PGP and S/MIME technology provide security between partner email gateways. Compliance Quarantine provides delegated

and control. The integrated Web-based user interface enables real-time and historical reporting along with the ability to configure policies, search, and selectively release quarantined messages.
Centralized Management eliminates a single

point of failure with superior peer to peer architecture, and makes managing multibox installations of IronPort email security appliances simple. The ability to manage configuration at multiple levels allows organizations to manage globally while complying with local policies.
Email Security Monitor delivers real-time

access to emails that have been flagged by the content scanning engine.
E M A I L AU T H E N T I C AT I O N

threat monitoring and reporting. This technology tracks every sys tem connecting to your IronPort appliance to identify Internet threats (such as spam, viruses and denial-ofservice attacks), monitor internal user trends and highlight compliance violations.
SNMP Enterprise MIB facilitates hands-off

DomainKeys Identified Mail (DKIM), and DomainKeys verification and signing digitally

monitoring and alerting for all system parameters including hardware, security, performance, and availability.

process messages to establish and protect identities with email senders and receivers on the Internet.

IronPort C360 Email Security Appliance

page 3

Benefits

Unprecedented Insight IronPort technology

demonstrates Return On Investment (ROI) through very sophisticated management, monitoring and reporting tools. Each appliance has a unique reporting system, providing both a real-time and historical look at mail flowing through your email infrastructure. These tools provide system administrators with the necessary information to make critical security decisions.

Reduced Administrative Burden The IronPort C360 uses the industrys most advanced technology to deal with threats and anomalies in a fully automated manner. This allows highly skilled IT staff to focus on other problems and leave the email issues to IronPort. Lower TCO The IronPort MTA platform

INTERNET

enables massive reduction in Total Cost of Ownership (TCO) by consolidating email operations and security into a single platform. Self-managing security services provide the lowest-maintenance solution in the industry with minimal configuration requirements.
Increased End-User Productivity By securing the network at the gateway level, the IronPort C360 acts as a shock absorber, in front of the groupware server(s). This ensures that end-users are not bogged down by spam, viruses, and other threats. Unlike other solutions, IronPort security services do not rely on end-users to train the system. Instead, high accuracy is maintained through continuous and automatic rule updates. Improved Network Efficiency The IronPort

The IronPor t C360 integrates easily into existing messaging infrastructuresdelivering defense-in-depth security with carrier-proven tech nology and the management capabilities required by large enterprises and ISPs.

FIREWALL

IRONPORT C-SERIES

GROUPWARE

CLIENTS

IronPor t Email Security Monitors intuitive graphical user in terface enables realtime and historical visibility into your email traffic.

Reputation Filtering system was the first in the industry and remains the most sophisticated. In its default settings, the system will block over 80 percent of incoming mail at the connection level. By eliminating these unwanted messages, companies save bandwidth (the message is never accepted) and system resources. CPU-intensive spam and virus filters are only used when needed, and rate limiting is a very effective defense against hit and run spam attacks or denial-of-service attacks.

IronPort C360 Email Security Appliance

page 4

figure 1.

consist of virus attacks, spam, false-positives, distributed denial of service attacks, directory harvest attacks, phishing (fraud), data loss and more. The IronPort C360 email security appliance addresses the issues faced by medium-sized enterprises and satellite offices, by uniquely combining powerful performance with preventive and reactive security measures that are easy to deploy and manage.
Todays email- borne threats

Power at the Perimeter: The IronPort C360 provides multi-layered security on a single appliance by combining IronPorts revolutionary technology with additional market-leading solutions.

MANAGEMENT TOOLS

SPAM DEFENSE

VIRUS DEFENSE

DATA LOSS PREVENTION

EMAIL ENCRYPTION

THE IRONPORT ASYNCOS EMAIL PLATFORM

specs

C H ASSIS/PR O C E SSO R Form Factor Dimensions CPU Power Supplies ST O R AG E RAID Drives Capacity C O N N E C T IVIT Y Ethernet Serial M AIL O PE R AT IO N S Mail Protocols DNS LDAP IN T E R FAC E S/C O N F IG U R AT I O N Web Interface Command Line Interface File Transfer Programmatic Monitoring Configuration Files C ryptographic Algorithms TLS (Encrypted SMTP) DomainKeys Signing SSH for System Management HTTPS for System Management

19 Rack-Mountable, 2U rack height 3.5 (h) x 19 (w) x 29 (d) One Intel Multi-Core Processor Hot-plug redundant, 750 watts, 100/240 volts

RAID 1 configuration; dual-channel hardware with battery-backed cache Two hot-swappable, 300 GB Serial Attached SCSI 35 GB effective queue capacity

One Intel 10/100 BaseT and two Broadcom Gigabit BaseT Ethernet ports One RS-232 (DB-9) serial port

SMTP, ESMTP, Secure SMTP over TLS Internal resolver/cache; Can resolve using local DNS or Internet root servers Integrates with Active Directory, Notes, Domino and OpenLDAP servers.

Accessible by HTTP or HTTPS Accessible via SSH or Telnet; Configuration Wizard or command-based SCP or FTP XML over HTTP(S) XML-based configuration files archived or transferred to cluster

56-bit DES, 168-bit 3DES, 128-bit RC4, 128-bit AES and 256-bit-AES 512, 768, 1024, 1536 and 2048-bit RSA 768 and 1024-bit RSA RC4-SHA and RC4-MD5

IronPort C360 Email Security Appliance

page 5

Product line

SI Z I N G U P YOU R EM A I L S E C U R I TY S O LU TI O N IronPort Systems provides industry leading email security products for organizations ranging from small businesses to the Global 2000. IronPort X1060 IronPort C660 IronPort C360 IronPort C360D IronPort C150 Built to meet the needs of the most demanding networks in the world. Designed for large enterprises and service providers. Suggested for medium to large enterprises. Recommended for any company with unique outbound email communication needs. An affordable, and easy to use, all-in-one appliance for small to medium enterprises.

Summary

I ndustrial Strength E mail S ecurity

The IronPort email security appliance is the most sophisticated system available today. In production at eight of the ten largest ISPs and more than 40 percent of the worlds largest enterprises, this system has a demonstrated record of unparalleled security and reliability. This same code base that powers IronPorts most sophisticated customers is also available in the IronPort C360 email security appliance, to help protect the email systems of medium-sized enterprises and satellite

offices. By reducing the downtime associated with spam, viruses and a wide variety of other threats, the IronPort C360 enables the administration of corporate mail systems, reduces the burden on technical staff, and quickly pays for itself. The advanced technology within the IronPort email security appliance leads to the simplicity of management, as well as the highest levels of security in the world. IronPorts email security appliances support and protect your email systemsnot only from todays threats, but from those certain to evolve in the future.

c o n ta c t u s

T ry before you buy

Through a global salesforce and reseller network, IronPort offers a free Try Before You Buy program for the IronPort C360. To learn if you qualify call 650-989-6530 or visit us on the Web at www.ironport.com/try

10/08
DOC RELEASE

IRONPORT C360

IronPort Systems
950 Elm Avenue, San Bruno, California 94066 tel 650.989.6500 fax 650.989.6543 email [email protected] web www.ironport.com

IronPort Systems, now part of Cisco, is a leading provider of anti-spam, anti-virus and anti-spyware appliances for organizations ranging from small businesses to the Global 2000. IronPort appliances utilize SenderBase, the worlds largest email and Web threat detection network and database. IronPort products are innovative and easy-to-use providing breakthrough performance and playing a mission-critical role in a companys network infrastructure.
Copyright 2000-2008 Cisco Systems, Inc. All rights reserved. IronPort, the IronPort logo and SenderBase are registered trademarks of Cisco Systems, Inc. All other trademarks are the property of Cisco Systems, Inc. or their respective owners. While every effort is made to ensure the information given is accurate, Cisco does not accept liability for any errors or mistakes which may arise. Specifications and other information in this document may be subject to change without notice. P/N 435-0101-7 10/08