Video Screencast Help
Search Video Help Close Back
to help

Security Community Blog

Showing posts tagged with Hosted Mail Security
Showing posts in English
Philip Routley | 02 May 2013 | 0 comments

Outsourcing your company’s security demands a supplier that is big enough, resilient enough and secure enough to do the job properly. This is why Symantec.cloud invests so heavily in its infrastructure. Our global footprint includes 18 data centres across four continents, two network operating centres and thousands of servers handling email, Web, and instant messaging traffic.

We apply the highest standards to our data centres because our customers demand the highest levels of confidentiality, data integrity and reliability. Certifications like ISO 27001 and audit report standards like SSAE 16 are vital external instruments to demonstrate the quality and security of our cloud services. 

This post will provide an overview of the various certifications and why they are important

What is ISO 27001?

ISO 27001 is a security management standard to guide the development and implementation of an Information Security Management...

Vikram Kumar-SAV to SEP | 05 Feb 2013 | 0 comments

 

Symantec keeps tab on the changing Threat Landscape and incorporates relevant security on its products.Same is the story with SAV to SEP to now SEP 12..

When we had SAV in the market what our customer needed was just a Antivirus to protect their system from downtime..here antivirus was looked more as a Availability facilitator than a core security product..till early 2000.

Even though we had SCS (firewall and IPS) seclected people used the other features.

Starting from 2006-2007 that was a high rise in malware being created and vulnerabilities being exploited..slowly the trend changed and it all came down to money making malwares..

FakeAntivirus, Downadup, Various Blackmailing Trojans etc..here the audience was not high profile..and SEP 11 very well detect and blocks and does whatever it can..Slowly people started using IPS, ADC and found much more can be done with SEP and they are doing it..

However in last few years there has been...

Matthew R. Ellison | 20 Dec 2012 | 0 comments

 

A few weeks ago an announcement was made regarding the fact that Disney had acquired Lucasfilm, home of the Star Wars and Indiana Jones franchises. Anybody who, like me, is a Disney fan will know that all of this goes together like peanut butter and jelly. My most treasured pin is Minnie Mouse as the classic Star Wars Princess Leia but that’s just one example of how the two universes have collided. However, what surprised me were the negative remarks from many of my friends and colleagues about what a disaster this was. The comments focused on all the various ways that Disney would betray the Star Wars fans, from commercialisation to characterisation, but it was all negative.

As somebody who is both a lifelong Star Wars fan (I adore all of the films from I to VI. I was 5 when Star Wars came out and I went to the cinema 4 times to see it. My son was 7 when Episode I came out so he grew up watching those, with me enjoying his enjoyment) and a huge Disney...

Matthew R. Ellison | 07 Nov 2012 | 1 comment

Not so long ago I was introduced to a customer who when she discovered I was part of Symantec.cloud, she instantly responded ‘We don’t use the cloud’. As we talked further it became obvious that two things were relevant to this customer. Firstly, her fear was actually one of losing control of important company data. Secondly the reality was that her stance had probably meant she already had lost control of important company data. As this customer performed no monitoring of their staff’s Internet usage and enforced mailbox size limits it is likely staff were already using the cloud.

It is almost a guarantee that people within any organisation that provides Internet access are using tools such as DropBox and Hotmail to store company information. One organisation we dealt with discovered that their project team was using a free consumer file sharing service to store essential customer and internal data rather than pay internally to use the IT provided...

Pritesh J. Chauhan | 11 Oct 2012 | 0 comments

 

Over the last few weeks we have been working with a number of customers who have large administrative overheads when protecting their IT Infrastructure.

 

When selecting a new service they have either gone to tender or bought an off the shelf solution upon recommendation from colleagues/friends. 

 

Whilst this may seem great at first, over the years this has built up a number of systems each requiring their own management systems, portals, update systems and most importantly, they lack integration between solutions. Whilst this may seem like a large problem, it gets worse - the issue with these customers was that they had multiple products performing conflicting tasks. 

 

One example from a customer who had one product that is designed to AV scan contents of a USB pen drive upon connection to the machine. Another product to encrypt USB pen drives upon connection. This is great if the admin could...

Matthew R. Ellison | 10 Oct 2012 | 0 comments

This blog continues from Part One.

Firstly we looked at how the email got through in the first place. The technique of an email coming from one place, but appearing to come from another is known as spoofing. Often in larger organisations it is quite normal to have third party applications or companies who legitimately spoof email – Marketing, HR, Cloud based application vendors and many more.

This is what had happened here, some issues with an external vendor had caused them to turn off the Content Control rule to allow spoofed email to be delivered. Of course what should have happened is for an exception to be created for that particular sender. It was only a temporary change during testing, but had never been fixed (I am not going to comment here on their testing processes).

That was easy...

Matthew R. Ellison | 10 Oct 2012 | 0 comments

Over the past couple of weeks we have been working very closely with a customer who was the victim of a phishing scam. Specifically it was a whale phishing (or whaling) technique, a type of spear phishing attack that is directly targeted at senior individuals within an organisation. (The opposite of Whale Phishing is Minnow Phishing or Minnowing where the attack is specifically directed at the apparently less significant members of a company such as receptionists or call centre workers – as seen in the recent Norton & Yahoo Cybergeddon movie)

Phishing is a fascinating area of security as it typically relies on our humanity (or you can read that as stupidity) to be successful. I see this with family members who quite happily delete emails from banks they don’t have accounts with, yet contact me to ask whether ‘this email that’...

Matthew R. Ellison | 02 Oct 2012 | 2 comments

It’s no great surprise that our houses and lives are increasingly connected, in my lounge alone I run an Ethernet switch with 6 devices connected to it. Recently I had to install a new Wireless router and with a new wireless key and update all of my wireless devices so I could use Norton DNS. After updating two Internet radios, a Wii, four smart phones, two PCs and four laptops, I vowed never to do it again!

I have to confess, I was genuinely surprised at how many connected devices had pervaded our house. Things had changed slowly and each small addition hadn’t really been noticed.

I often see a similar approach with many of our cloud customers. I was recently with a customer who has been with us for a number of years and yet confessed that they hadn’t logged on to their portal for months. The assumption was that their solution was just working and they had no need to change anything.

Cloud solutions bring...

MartinLee | 27 Sep 2012 | 0 comments

The analogy between computer viruses and biological viruses is well developed. Computer viruses spread across the world and within organisations in ways that are consistent with models developed to understand and predict the spread of biological diseases in epidemics.

 

However, viruses that spread from host to host aren't the only form of malware, targeted trojans are an example of malware that infect hosts but which does not spread. These particular malware are sent to individuals that have been specifically selected by the attackers in order to compromise the target's computer to steal high value information. Because, unlike computer viruses, these malware do not replicate, we cannot predict who will be hit by these types of malware by considering these computer infections as similar to a spreading epidemic.

 

We can, however, apply other techniques adapted from the understanding of human disease. If the recipients of targeted trojan...

Elspeth Magoria | 06 Sep 2012 | 0 comments

Join Symantec and Washington University at the St. Louis Symantec $25k Cyber Security Challenge. This one-of-a-kind event invites security professionals and ethical hackers like yourself to help further improve current security technologies and solutions.

Come learn about the current global threat landscape and IT trends requiring organizations to take new approaches in security – cloud, mobility, compliance, etc.

Stay for the "Challenge", an exciting cyber "Capture the Flag" (CTF) simulation. Take part for a chance to win cash and prizes! And don't miss the Hands-On Security Demo Lab that will showcase current security solutions around mobile, data loss, encryption, email and web security and more.

Be There To Win - All registered attendees get a $50 Amazon.com Gift Card and if you refer two friends and they attend...