Email Security Comparison Guide: Part 1 Email Security Comparison Gu

Manufacturer Barracuda GFI Guardian Digital Inc. IronPort MPP Sendmail Manufacturer SonicWALL
Networks

Product Barracuda Spam Mail Security Secure Mail Suite IronPort C-Series, incl. Enhanced Edition V2 Mailstream Product Enterprise 6000
Firewall IronPort C650, C300 Guardian/Gatekeeper
and C100
Hosted/Appliance/Software Appliance Software Appliance/Software Appliance Software Appliance Hosted/Appliance/Software Appliance

Installation No software installation or Very straightforward — software only Pre-installed appliance or very Centralized management Straightforward software Web-based management Installation Easy-to-install appliance
modification to existing install straightforward click-to-install makes user installation only install makes user installation and central management
email required; automatic software on modern hardware straightforward. Appliance straightforward. Requires
updates installation is not plug and multiple modules and high
play. IronPort MTA Platform. level of customization
makes installation more
complex.

Spam Filtering Spam protection Companion server product provides Multifaceted detection using Two levels: context and Three spam-scanning Full spam blocking Spam Filtering Robust anti-spam engine
standard and customizable filtering dozens of technologies to block threat scanning and engines
advanced spam, zero-day attacks adaptive scanning
and special URI filters

Advanced Spam Blocking Spoofing, phishing and Yes, using GFI MailEssentials in
anti-virus protection conjunction with GFI Mailsecurity. GFI
MailEssentials supports SPF,
Whitelisting, Custom Blacklisting,
DNSBL (DNS Blacklisting), Bayesian,
header checking, keyword checking
and new senders.
Global adaptive filtering using Adaptive scanning uses Multiple threshold levels Selective filtering available Advanced Spam Blocking Engine claims 98 percent-
network, hosts multiple learning multiple criteria per user and per engine plus accuracy
technologies and fully
customizable per user. Includes
intrusion detection, complex
analysis and rapid engine
evolution.

Virus and Worm Scanning Virus protection Up to five installable engines plus Multilayered virus protection from Sophos anti-virus scanning Includes five scanning New threat detection as Virus and Worm Scanning McAfee and Kaspersy
quarantining known and unknown attacks, per- and an internal new threat engines well as signature-based signatures plus new
user quarantine and real-time detection and quarantining engine threat detection and
blocking system quarantining

Copyright Tippit, Inc. 2007. All Rights Reserved.

www.itsecurity.com 1
Email Security Comparison Guide: Part 1 Email Security Comparison Gu
Manufacturer Barracuda GFI Guardian Digital Inc. IronPort MPP Sendmail Manufacturer SonicWALL
Networks

Product Barracuda Spam Mail Security Secure Mail Suite IronPort C-Series, incl. Enhanced Edition V2 Mailstream Product Enterprise 6000
Firewall IronPort C650, C300 Guardian/Gatekeeper
and C100
Content and Attachment Policy enforcement. User-definable content-filtering rules Policy enforcement on a per-user For regulatory compliance No Yes — HIPPA, SOX and Content and Attachment For regulatory
Filtering or per-domain basis in body, GLBA lexicons Filtering compliance
header, envelope and more.

Phishing/Fraud Protection Anti-phishing, anti- Yes, through GFI MailEssentials Advanced detection algorithms Basic level — part of spam Basic level Ability to detect Phishing/Fraud Protection Advanced detection
spoofing, filtering. E-Mail connections to specifically for fraud and
authentication. banned/blocked sites phishing

Email/DoS (Denial-Of- Both No Both email and DoS Both email and DoS No Both email and DoS Email/DoS (Denial-Of- Both email and DoS
Service) Attack Protection Service) Attack Protection

Outbound Message Filtering Yes Yes Yes Yes Yes Yes Outbound Message Yes
Filtering
Quarantining Yes Yes Yes Yes Yes Quarantining Yes
Real-time monitoring Yes Yes, Web-based/stand-alone Yes Yes Yes — basic level Yes Real-time monitoring Yes
application
Reporting Yes Yes Yes Yes Yes Yes Reporting Yes
Pricing Models start at $1,499 in Starts at $500 for 25 mailboxes Starts at $3,695 Starts at $3,000 per Starts at $249 for 25 Pricing Starts at about $5,000 per
the U.S. with no per-user appliance users appliance
licensing fees

Comment Appliances may be Straightforward entry-level software Enterprise-class complete email Advanced enterprise-level Basic software only Complex suite of products Comment Solid, straightforward,
clustered for greater solution that is extensible to allow for system built on a solid and highly appliance-based solution — solution — will handle that work together. Has enterprise-level, popular
capacity. The entry-level some growth. secure core. Redundant software part of large family of basic requirements and some unique capabilities appliance-based solution
appliances support up to configuration. Open-source-based appliance-based solutions. comes in a less capable, and allows users to plug in
500 active email users, solution based around EnGarde Offers performance of more free version. the parts they need.
while the high-end Secure Linux. Has some unusual than 1 million messages per
appliance supports up to and advanced features. hour.
30,000 users.

Copyright Tippit, Inc. 2007. All Rights Reserved.

www.itsecurity.com 2
uide: Part 2
Symantec Corp. Tumbleweed Voltage Security Proofpoint Inc. Secure Computing Google/Postini
Communications Inc. Corp./CipherTrust
Corp.
Mail Security Software MailGate SecureMail Gateway Proofpoint CipherTrust Ironmail Google Message Security
or Appliance Server Protection Server

Software/Appliance Appliance Appliance/Software Appliance Appliance Hosted

A single appliance handles Software version Straightfoward, user-friendly Automatically sets up S-class Nothing to install, maintain or upgrade.
up to 750,000 user straightforward, appliance installation appliance It's all in the cloud!!
accounts and email loads more complex appliance
in excess of 30 million
messages a day.

Available with the Reduces email load by Uses external spam engines Advanced spam detection Reputation engine and multiple Industry leading spam detection based on
Microsoft Exchange, blocking “dark traffic” and detection algorithms block spam: patented real-time filtering (not store and
Domino and SMTP including email, DoS blocking, multilingual, analyzes message and sender forward) architecture.
versions attacks and spam automatic
updates Spam processing includes multiple layers
featuring powerful heuristics engine and
Postini threat identification network that
processes 2.5 billion daily email
transactions.

Service level assurances includes 99.999%

availability and 100% virus detection.

Visit http://www.google.com/postini
detection algorithms block spam:
analyzes message and sender

Includes anti-virus and Image spam protection N/A Image-spam protection,
content filtering phishing
protection, some content-
filtering customization and
adult-content filtering
Anti-phishing, temporary block Auto-correcting botnet and zero hour
lists and user-training capabilities virus detection technology. Real-time
filters with early detection capabilities.
User defined spam tolerance levels for all
threats including phishing, DoS, DHA,
image-spam.

Anti-virus is available with Anti-virus: zero-hour virus Uses external scan engines Integrated anti-virus/worm Multiple detection Proprietary zero-hour virus protection and
the Microsoft Exchange, outbreak protection engine works in parallel with techniques for virus protection additional industry standard signature
Domino and SMTP spam and content scan. based detection layers from McAfee and
versions Authentium

Copyright Tippit, Inc. 2007. All Rights Reserved.

www.itsecurity.com 3
uide: Part 2
Symantec Corp. Tumbleweed Voltage Security Proofpoint Inc. Secure Computing Google/Postini
Communications Inc. Corp./CipherTrust
Corp.
Mail Security Software MailGate SecureMail Gateway Proofpoint CipherTrust Ironmail Google Message Security
or Appliance Server Protection Server

Content filtering is Content filtering, policy Very advanced — includes Policy enforcement for Advanced Yes. Enforce content and attachment
available with the manager ability to auto content and attachment filtering policies at user, org, and/or
Microsoft Exchange, encrypt/decrypt without filtering. Automatic domain level. Also, create rules to filter
Domino and SMTP user intervention customizable encryption. documents by specific patterns (both in
versions the message and embedded
attachments), file type, size, source and
destination. Enable multiple dispositions
based on content including quarantine,
supervisory redirect and blocking

Phishing protection Automatic gateway-to- No Phishing protection with Both Both included
included — additional gateway encryption using spam
advanced capabilities TLS protocol filters.
available through further
add-ons
Email only Both email and DoS No Email only Both Both included
(appliance)

Yes Yes Yes Yes Yes Yes

Yes Yes No Yes No Yes

Yes Yes Yes Yes Yes Yes

Yes Yes Yes Yes Yes Yes

Pricing: $1,810 for 100 Appliances are priced on a Starts at $19,000 Starts at around $10,000 $25,000 to $50,000 $1 per user per month
users, one-year per-user basis, starting at with annual subscriptions
subscription plus $995 for around $10,000. fees; around $18,000 per
one appliance. year to keep updated.

Small-to-medium-sized Enterprise and Advanced software Easy to configure and Three product levels available Google's cloud computing email security
businesses and enterprise government customers. solution that is also minimal maintenance blocks threats before they reach
available pre-installed as an required customer's network. Based on threat
appliance visibility gained from 2.5 billion daily email
transactions, Google's technology,
requires no hardware or software, it is
always on, always current and reduces
administrative time by 50-80% (source:
Osterman research)

Copyright Tippit, Inc. 2007. All Rights Reserved.

www.itsecurity.com 4