Symantec 10765539 - Mail Security For SMTP, Руководство по планированию

Страница: 10 / 38

10 Introducing Symantec Mail Security for SMTP
New features for all users
■
The incoming connection arrives at the inbound MTA via TCP/IP.
■
The inbound MTA accepts the connection and moves the message to its
inbound queue.
■
The Filtering Hub accepts a copy of the message for filtering.
■
The Filtering Hub consults the LDAP SyncService directory to expand the
message’s distribution list.
■
The Filtering Engine determines each recipient’s filtering policies.
■
The message is checked against Blocked/Allowed Senders Lists defined by
administrators.
■
Virus and configurable heuristic filters determine whether the message is
infected.
■
Content Compliance filters scan the message for restricted attachment types
or keywords, as defined in configurable dictionaries.
■
Spam filters compare message elements with current filters published by
Symantec Security Response to determine whether the message is spam. At
this point, the message may also be checked against end-user defined
Language settings.
■
The Transformation Engine performs actions per recipient based on
filtering results and configurable Group Policies.
New features for all users
Table 1-1 lists features that are new for both Symantec Mail Security for SMTP
users and Symantec Brightmail Antispam users.
Table 1-1 New features for Symantec Mail Security for SMTP and Symantec Brightmail Antispam
Category Features Description
Threat
protection
features Improved Email Firewall Protects against directory harvest attacks, denial of service
attacks, spam attacks, and virus attacks.
Sender Authentication Protects against phishing attacks, using the Sender Policy
Framework (SPF), Sender ID, or both.
Improved virus protection Additional virus verdicts protect against suspected viruses,
spyware and adware, and encrypted attachments.
Email messages that may contain viruses can be delayed in the
Suspect VIrus Quarantine, then refiltered, with updated virus
definitions, if available. This feature can be effective in defeating
virus attacks before they are widely known.
View a continuously updated list available of virus definitions.