Video Screencast Help
Mail and Web Security Blog
Showing posts in English
Duncan Mills | 20 May 2013 | 0 comments

Part 2 – the impact of the changing threat landscape.

In the first part of this 3-part blog we looked at changes in the cloud security industry and how mergers and acquisitions and vendors’ changing strategies have impacted their customers. In part 2 we will look at how the threat landscape has changed and what this means to those organisations that rely on a cloud email and web security vendor.

Early entrants into the SaaS email security market quickly realised that they were in a unique position to offer better protection than their competitors that were producing on-premises products. Because they were protecting, in some cases, tens of thousands of customers, they had visibility of the end-to-end flow of millions of emails. This meant they had a significant amount of security intelligence that they could use to identify suspicious emails and protect against zero-day threats.

Today it is common for email and web security vendors...

Duncan Mills | 16 May 2013 | 0 comments

The increased use in the workplace of user-owned devices such as smartphones and tablets, often referred to as bring your own device (BYOD), provides businesses with significant productivity and cost benefits. However, it also presents a number of complex challenges related to security.

Due to the rise of smart media devices like smartphones, tablets and ultrabooks, it is estimated that potentially, as many as 30-35%* of endpoints connected to a company’s network could be unmanaged. These are more at risk than managed endpoints which are typically subject to software patching and endpoint security policies.

Of course unmanaged endpoints are still protected by your perimeter security, such as secure web gateways. However, these have typically evolved from caching proxies and URL filters. What you need is an additional layer of security that provides the best possible levels of protection for unmanaged endpoints.

Symantec Web Gateway (SWG) will...

wib3rd | 15 May 2013 | 7 comments

Symantec Messaging Gateway 10.5 Pre-release Evaluation

 

On June 25th, 2013 Symantec will be launching the pre-release evaluation of Symantec Messaging Gateway 10.5. This new version of Symantec Messaging Gateway plans to introduce new features including.

 

  • Remove Zero Day Malware and Targeted Attacks from Office and PDF attachments with new “Disarm” technology.
  • Block more Spam and Malware with Expanded Threat URL Reputation
  • Simplify management with LDAP Authenticated Administration
  • Enhanced management of Unscannable Messages
  • Communicate securely with trusted partners using enforced inbound TLS encryption
  • Increase security with TLS encrypted delivery to Symantec DLP
  • Control Spam attacks and message volume from inside the your environment with Outbound Sender Throttling Capability
  • Deploy using new Hyper-V support

 

The Symantec ...

Duncan Mills | 10 May 2013 | 0 comments

Part 1 – changes in the industry

The email and web security industry has seen many changes over the past years, especially in the cloud or SaaS market. Many vendors in this space started by offering email anti-malware and anti-spam services. They then added email content control and web anti-malware and URL filtering.

Some vendors invested heavily, built their own multi-tenant infrastructure, patented their technology and owned intellectual property, whilst others simply purchased and deployed enterprise equipment into datacenters and managed it on behalf of their customers. Some were more serious about security than others, offering multiple signature-based AV engines as well as proprietary protection technologies and elements of data loss prevention.

Around the mid 2000s the market became quite crowded, with a number of large cloud email and web security vendors, some mid-sized ones and lots of smaller, local players. In the second half...

Ian McShane | 03 Jan 2013 | 0 comments

Join hashtag #MailSec and learn more about the dangers of targetted email attacks and how to prevent them.

Takedowns of large botnet rings in recent years have caused spam numbers to plummet. However, the drop in spam doesn’t make spammers any less dangerous. Spammers have now turned to targeted attacks to reach their victims. As targeted attacks and malware continue to expand and grow in number, and data breaches continue to rise, users and businesses of all sizes need to be aware of what to look out for, and how to protect proprietary information. No business is too big or too small to be a target.

 
Please join Symantec’s email security experts Ian McShane (@ianmcshane), Paul Murray (@paulsmurray), Matt Cooke (@mattcooke), Paul Wood (@paulowoody)  and Eric Schwake (@lombar77) next Thursday, January 10 at 11 am ET, to discuss targeted attacks and what can be done to prevent them from harming you or your business....
Ian McShane | 15 May 2012 | 1 comment

Did you see my session at Symantec Vision 2012?  If not, you missed me talk about how you need your very own Robocop to protect services, applications and storage that accept and distribute files.

His prime directives align very well with how you should approach your service and infrastructure security:

1. Serve the public trust - Your users will TRUST your service.  They'll ignore warnings and common sense because YOU are giving them access to something.

2. Protect the innocent - Your users are unlikely to be as security-aware as you are, they may not understand risks and they certainly shouldn't be trusted to protect themselves :)

3. Uphold the law - You need to be able to set and enforce policies and you need to do this at your application or storage level.

{If you're a fan of...

Ian McShane | 20 Mar 2012 | 25 comments

 

Hi!
 
My last post back in October 2011 introduced the beta program for a new application for our messaging security customers.
I'm delighted to announce that we achieved our Generally Available (GA) milestone yesterday on March 19th meaning that the Symantec Email Submission Client is now available for all of our customers to download and install.  This is my first "1.0" product release so I'm particularly excited to see this product ship :)
 
Did I mention that this is provided at no extra charge?  Yup, free.
 
We had some excellent beta participants in this cycle, ranging from large enterprise customers to small businesses and we got some fantastic real world feedback which helped us ship an even better product than we originally scoped.
 
So, what is SESC?
 
The Symantec...
Ian McShane | 31 Oct 2011 | 4 comments

One of the great things about working in the Messaging & Web Security BU is the amount of cool new technology and functionality we work on.  Some times, this is behind the scenes on our backend systems and other times this is new functionality for existing products.

This time, however, I'm really excited to announce the beta program of a brand new application:

Symantec Email Submissions Client

This application allows you to automate the submission of missed spam (aka false negatives) to Symantec, directly from your end user mailboxes.

Symantec Email Submission Client takes advantage of the Exchange Web Services framework built into Microsoft Exchange Server to provide a submissions solution that:

  • Does NOT require any installation to you endpoint devices.
  • Does NOT require any updates to be managed/pushed to your endpoint devices. 
  • Does NOT require any complex end user training.
  • ...
Ian McShane | 02 Aug 2011 | 1 comment

I'm excited to announce that the beta program has started for our next release of Symantec Protection for Sharepoint Servers.

You can sign up to this beta at this link : https://symbeta.symantec.com/callout/default.html?callid=8A18C6447CE54D99AD4ADEBCC28E7F9C

 

With this release, you'll see new features such as:

 

  1. Completely new quarantine management functionality available through the UI.
  2. Brand new user interface.
  3. Simple export & import of configuration, settings and policies to enable quick and easy disaster recovery as well as roll out your policies to multiple farms in a quick and efficient manner.
This release supports the following platforms:
  • Windows® SharePoint® Services 2.0 (WSS 2.0)
  • Windows SharePoint Services 3.0 (WSS 3.0)
  • ...
Sergi Isasi | 11 Jul 2011 | 5 comments

I am pleased to announce that Symantec Web Gateway 5.0 is now available!  Nearly half of our production deployments have already upgraded to the new version and the software is now available to all customers. 

This release brings not only a significant change in our product, but also significant change in the way organizations defend against malware at the gateway.  Symantec’s introduction of our Insight file reputation technology into our enterprise security product stack represents a generational leap in malware detection and dramatically changes the game against malware writers.  Insight allows Web Gateway customers to block a malicious file that no one has ever seen before at the edge, before it even gets to the user endpoint.  An attacker can no longer create a single file for a targeted attack on a key executive or user and assume that it will make it past a heuristic.  A malicious attack kit user or FakeAV writer can no...