Posts tagged ‘Brightmail’

SEP 11.0.6

Symantec Endpoint Protection 11.0.6 is available on fileconnect. The release notes are here.
Release Highlights

•”Symantec Protection Center v1.0″ introduces a centralized management console with single sign-on to integrated Symantec applications including Endpoint Protection, Brightmail Gateway, Data Loss Prevention, Web Gateway, Critical System Protection, and IT Analytics
•”SEP Manager Web Console” delivers web-based access to SEP Manager in addition to the legacy JAVA console
•”SEP for Mac” provides integrated management and reporting of Mac and Windows clients in the SEP Manager
•Randomizing scan start time improves support for clients in virtualized environments
•The Symantec Endpoint Recovery Tool allows customers to scan and remove malware from client computers that the SEP client is unable to remediate effectively
•Enhanced default Antivirus and Antispyware security settings make SEP more efficient at detecting malware
•Includes over 155 customer reported defects

One of the defects may be one I’ve had a case open on for more than a year.
Auto Location Switching does not recognize 144 Mb/sec 802.11n connections
Fix ID: 1927272
Symptom: Auto Location Switching does not switch a client to a 144Mbs wireless connection
Solution: Added support for a 144Mbps wireless connection.
I’m hopeful that this will solve the location awareness issues when 802.11n is used. I’ve been told that wouldn’t be fixed until RU6MP1. But we’ll see what this does.
Another writeup of on the release is here.

FT reports Message Labs is for sale

After hearing about Postini’s sale to Google, I wrote earlier this week wondering if Message Labs were also on the market.
A Friday article in the Financial Times reports that Message Labs has been positioning itself to be bought. As Brightmail, Frontbrdge and now Postini were purchased, it is hard for me to see if Message Labs is the the odd man out or if their value is greater now that other options have been removed. The article also states that if a sale is not complete, an IPO could be in the works (reminds me of the Sybari IPO where Microsoft bought the company).
The article reports that likely buyers are McAfee, TrendMicro, IBM and HP.

Symantec Tries its hand at SMTP zero day protection

Protection against the zero day attack has been a buzzword in anti-malware software marketing. Its an important thing to have. You can’t run a business while waiting multiple days for virus definitions to be released covering the latest attack.

Symantec Mail Security for SMTP 5.0 is an new email gateway solution that attempts to provide such protection. It combines Brightmail antispam technology with Symantec antivirus and content filtering.
http://www.securitypipeline.com/185303122?CID=rssfeed_pl_scp

One key new feature is zero-day protection against threats, which uses information on emerging exploits gathered from Symantec’s network of more than 3 million e-mail addresses. When a suspicious e-mail arrives at the server, this feature can be configured to automatically strip off and quarantine the attachment until a virus definition is released, or simply delete the message, said Caccia.
Many vendors are attempting to enable zero- day threat protection by adding multiple virus engines in order to maximize detection, but that doesn’t offer the same level of protection as Symantec’s new offering, said Tom MacArthur, principal of Storbase, a solution provider in Waltham, Mass.
“Although you get some incremental benefit from the [former] approach, it is always better if you can catch viruses early on,” MacArthur said.

Hopefully there will be a bakeoff between this product and those that use multiple engines. It will be interesting to hear more about this approach. I wonder if it is using technology similar to the Real Time Threat Protection Service they just bought when they purchased IMLogic.

Neither approach is going to get 100% of the viruses. They are each vulnerable to targeted attacks. Message Labs on the otherhand uses a heuristic scanner (Skeptic) in addition to three scan engines. Even targeted attacks will have a difficult time penetrating this defense.

Magic Quadrant for Email Boundary Security

Gartner has released their Magic Quadrant for E-mail security Boundary 1H05. It is available from Gartner if you subscribe. It can also be picked up from some of the vendors who did well on the list if you supply your contact info.
I wouldn’t list the Symantec product so high. Sure Brightmail is nice, but the dependence on the Symantec AV engine is almost unforgivable in my book. At the email boundary you want something you can rely on. Heuristics or multi-scan engines.
Its interesting to read about the other products. Barracuda is advertised on the commercial all the time here, so it was interesting so see a quick opinion on their product.
I’m of course happy to see MessageLabs doing well in the report.
Of course some people (or actually one person) may think that I’m full of FUD for mentioning antivirus at all. If you’re like that you probably think the principle of least privilege should be applied so that only allow white listed mail with no email attachments is allowed.

MessageLabs announces partnership with Brightmail

Messagelabs announced today that they will be offering the Symantec Brightmail antispam service in addition to the skeptic heuristic antispam service they currently provide.

Continue reading ‘MessageLabs announces partnership with Brightmail’ »