Email filtering tools and techniques

Personal email accounts expose enterprise networks to two threats: viruses coming in, and sensitive data being sent out, innocently or maliciously. Security policies prohibiting employees from accessing personal email accounts at work only go so far. There comes a time when you need a technical tool that either blocks or filters all email going over the corporate network. Here are some suggestions and best practices for choosing and deploying an email filtering tool.

There are two approaches to solving this problem: the appliance approach and the proxy approach.

In the proxy approach, used by Blue Coat and Websense, the email filtering tool acts like a traffic cop, checking the Web sites users are accessing. The tool blocks unauthorized sites that you list in the system. This approach is effective because you can also set it to block common personal email accounts, like Yahoo, Hotmail or MSN. However, the downside to this approach is that these tools are really Web content filters, which means they block email Web sites, not the email itself. Therefore, this approach falls short as a pure email tool for blocking spam or filtering office email accounts.

In the appliance approach, there are many dedicated email filtering tools available. These are standalone products that are installed on the network in tandem with email servers. These appliances watch all incoming and outgoing email traffic, and are tuned to check for email in line with your company's email policies. Unacceptable email – e

To continue reading for free, register below or login

Requires Membership to View

To gain access to this and all member only content, please provide the following information (all fields required):

First Name:
Last Name:
Country: Select... Afghanistan Aland Islands Albania Algeria American Samoa Andorra Angola Anguilla Antarctica Antigua and Barbuda Argentina Armenia Aruba Australia Austria Azerbaijan Bahamas Bahrain Bangladesh Barbados Belarus Belgium Belize Benin Bermuda Bhutan Bolivia Bosnia and Herzegovina Botswana Bouvet Island Brazil British Indian Ocean Territory British Virgin Islands Brunei Bulgaria Burkina Faso Burundi Cambodia Cameroon Canada Cape Verde Cayman Islands Central African Republic Chad Chile China Christmas Island Cocos (Keeling) Islands Colombia Comoros Congo Congo, Democratic Republic of Cook Islands Costa Rica Cote D'Ivoire Croatia Cuba Cyprus Czech Republic Denmark Djibouti Dominica Dominican Republic Ecuador Egypt El Salvador Equatorial Guinea Eritrea Estonia Ethiopia Falkland Islands Faroe Islands Fiji Finland France French Guiana French Polynesia French Southern Territories Gabon Gambia, The Georgia Germany Ghana Gibraltar Greece Greenland Grenada Guadeloupe Guam Guatemala Guernsey Guinea Guinea-Bissau Guyana Haiti Heard and McDonald Islands Honduras Hong Kong Hungary Iceland India Indonesia Iran Iraq Ireland Israel Italy Jamaica Japan Jersey Jordan Kazakhstan Kenya Kiribati Korea, North Korea, South Kuwait Kyrgyzstan Laos Latvia Lebanon Lesotho Liberia Libya Liechtenstein Lithuania Luxembourg Macau Macedonia Madagascar Malawi Malaysia Maldives Mali Malta Man, Isle of Marshall Islands Martinique Mauritania Mauritius Mayotte Mexico Micronesia Moldova Monaco Mongolia Montserrat Morocco Mozambique Myanmar Namibia Nauru Nepal Netherlands Netherlands Antilles New Caledonia New Zealand Nicaragua Niger Nigeria Niue Norfolk Island Northern Mariana Islands Norway Oman Pakistan Palau Palestine Panama Panama Canal Zone Papua New Guinea Paraguay Peru Philippines Pitcairn Poland Portugal Puerto Rico Qatar Reunion Romania Russia Rwanda Saint Helena Saint Kitts and Nevis Saint Lucia Saint Pierre and Miquelon Saint Vincent and the Grenadines Samoa San Marino Sao Tome and Principe Saudi Arabia Senegal Serbia and Montenegro Seychelles Sierra Leone Singapore Slovakia Slovenia Solomon Islands Somalia South Africa South Georgia and South Sandwich Islands Spain Sri Lanka Sudan Suriname Svalbard Swaziland Sweden Switzerland Syria Taiwan Tajikistan Tanzania Thailand Timor-Leste Togo Tokelau Tonga Trinidad and Tobago Tunisia Turkey Turkmenistan Turks and Caicos Islands Tuvalu U.S. Minor Outlying Islands Uganda Ukraine United Arab Emirates United Kingdom United States Uruguay Uzbekistan Vanuatu Vatican City Venezuela Vietnam Virgin Islands Wallis and Futuna Islands Western Sahara Yemen Zambia Zimbabwe
Email Address:

I would like to receive a FREE subscription to Information Security magazine online.
YesNo

Do you manage, evaluate, recommend, implement, support or purchase security products, software or services?
YesNo

Please estimate the yearly security budget for your entire organization including all security products and services.
Please select... Over $10 Million $5 Million-$10 Million $1 Million-$4.9 Million $500,000-$999,999 $100,000-$499,999 $50,000-$99,999 $25,000-$49,999 $10,000-$24,999 Less than $10,000 None

What is your role in purchasing IT related products and services? (Check all that apply)
Technical decision maker
Financial decision maker
Recommend/Specify
Evaluate products
Implement Products/Services
Determine Needs
Create Security Strategy
None

By joining SearchSecurity.com you agree to receive email updates from the TechTarget network of sites, including updates on new content, magazine or event notifications, new site launches and market research surveys. Please verify all information and selections above. You may unsubscribe at any time from one or more of the services you have selected by editing your profile or unsubscribing via email.

TechTarget cares about your privacy. Read our Privacy Policy

Some common products in this line up include SurfControl and GFI MailSecurity, which plugs into Exchange Server but also can be used with other SMTP servers. Other popular products are Fortinet's FortiMail, eSoft's ThreatWall and BorderWare's MXtreme Mail Firewall.

Both classes of products come with various features to keep them up-to-date and on top of the latest email threats. Some conduct their own research of new threats, building the results into regular updates.

Pricing for all of these products are based on contracts and licensing fees negotiated directly with the vendor, except for GFI MailSecurity, which advertises itself as the low-cost alternative. GFI MailSecurity has a fixed price based on a sliding scale, depending on the number of users, ranging from $500 for 25 mailboxes to $7,500 for 1,000 mailboxes.

When shopping around for an email filtering solution, keep the following in mind:

You might also consider using both approaches, if you're network can handle it. They aren't mutually exclusive, but actually complement each other. Using both a Web content and an email filtering system together will protect your system from most email threats.