Cisco Ironport Email Security Appliances

Ironport Virus Outbreak Filters provide a critical first layer of defense against new outbreaks hours before signatures used by traditional anti-virus solutions are in place. Real world results show an average lead time over reactive anti-virus solutions of 14 hours, along with an extremely high catch rate and near zero misclassifications. Integrated into IronPort's C-Series™ email security appliances, IronPort Virus Outbreak Filters perform a threat assessment of inbound and outbound messages, and quarantines suspicious messages temporarily. Messages are automatically released once signatures from traditional anti-virus vendors are deployed.

Over 100,000 organizations participate in the SenderBase Network, enabling the world's largest email traffic monitoring system

Features

Fast, Accurate Detection

Real-time detection powered by SenderBase®—the world's largest email and web traffic monitoring network. IronPort's SenderBase Network captures data from over 100,000 contributing organizations around the world, and has a view into a remarkable 25% of the world's email traffic, providing unparalleled capabilities in accurately identifying anomalies that are proven predictors of an outbreak. More
The 24x7x365 IronPort Threat Operation Center provides human oversight to ensure speed and accuracy. Experienced analysts use sophisticated tools to verify anomalies and approve automatically generated Outbreak Rules. A customer-facing website also is continuously updated with data on current outbreaks.

Automatic Protection

IronPort's exclusive Context Adaptive Scoring Engine (CASE) scans messages against both "real-time" Outbreak Rules and "always on" Adaptive Rules to accurately identify and quarantine viral messages. Suspicious messages are temporarily quarantined.
IronPort's unique Dynamic Quarantine allows IronPort Virus Outbreak Filters to immediately quarantine viral messages based on limited information, without cost. Quarantined messages are continuously re-evaluated against the latest, increasingly fine-grained rules, and released if they do not match.

Comprehensive Management

An integrated Web-based user interface makes it easy to setup and configure the solution to meet corporate-specific requirements. Administrators can easily configure policy parameters, select the forms of protection that are enabled, and more.
A full suite of alerts and reports, plus a detailed support website ensures complete visibility into global and local outbreak activity.
Unmatched efficacy plus automated quarantine and release translates into zero ongoing administration. Minimal misclassifications eliminate administrator intervention and customer support overhead. In addition, the Dynamic Quarantine enables automated release, based on updated signature availability.

Benefits

Proven Results IronPort Virus Outbreak Filters are the industry's only proven preventive solution for catching new outbreaks. For over a year, IronPort Virus Outbreak Filters has been preventing virus outbreaks from infecting top ISPs, Fortune 500 and Global 2000 companies, as well as major universities. The solution has a track record of providing protection up to 42 hours ahead of traditional anti-virus solutions, along with a high catch rate and minimal misclassifications.
Massive Cost Savings By detecting new outbreaks in real time, and dynamically responding to stop infected messages for hours prior to a traditional anti-virus signature is in place, IronPort Virus Outbreak Filters protect companies of all sizes against significant network damage.
Easily Measurable On average, IronPort Virus Outbreak Filters in use at a typical Global 2000 company will block more than 10,000 infected messages per outbreak. Stopping this many infected messages allows the solution to pay for itself in a single outbreak.
Easy Setup, Zero Ongoing Administration IronPort Virus Outbreak Filters is easy to setup and configure to meet corporate-specific requirements, but is fully automated and requires no ongoing management. Administrators can be "hands-on" or they can leave the system alone and let the automatic Dynamic Quarantine take care of blocking, scanning, and releasing messages – saving valuable bandwidth and system resources. Administrators have complete visibility to outbreak activity.