Re: SPAM/spyware appliances or services

["Lucas, Bryan" <b.lucas () TCU EDU>]

We use the CipherTrust Ironmail

#1) While it is an "appliance" you can operate it in a full hands-off
mode or in a very granular user managed mode.  They offer their Threat
Response Updates (TRUs) that are a downloadable set of configurations
that 'tune' the appliance for you.  Or, you can completely manage the
box by yourself or anywhere in between the two modes.  That way you can
control how much human capital you invest in your anti-spam efforts.
#2) Anti-Spam ability - I manage several environments and I have
thoroughly tested: MessageLabs (outsourced), Sybari Spam Defense and
Advanced Spam Defense, GFI MailEssentials and CipherTrust.  With CT's
latest TRU, it is the best I have seen.  It also has an End-User
Quarantine system and the ability to weight each filter (Dictionary,
RBL, RDNS, Bayesian, etc) to contribute to one large aggregate filter.
#3) The Ironmail is a full gateway product giving you more than just
'anti-spam'.  For example, you can wrap your OWA session, it has an IDS
system to identify attacks or password harvesting, you can build custom
rules such as "forward as an attachment any message with 'yourkeyphrase'
in the subject to these three people", you can build groups from LDAP
sources including AD, then the reporting/logs/graphs gives you the
ability to see what is happening in your environment.

If you want a read-only login to review the Ironmail, or discuss any of
the other solutions I've evaluated, contact me offline.

Bryan Lucas
Server Administrator
Texas Christian University
(817) 257-6971

-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Gary Dobbins
Sent: Tuesday, April 19, 2005 8:15 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] SPAM/spyware appliances or services

Am curious to know who's using an appliance or an external service (as
distinct from software running on the MTA) to aggressively filter spam
for
their campus.  Additionally, do any of you employ products which filter
spam from email traffic as well as filter spyware from HTTP; who's using
what?

--

   ------------------------------------------------------------
   Gary Dobbins, CISSP -- Director, Information Security
   University of Notre Dame, Office of Information Technologies

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.