1. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 銳擎智識股份有限公司 Executive Vice President Richard Chuang Richard@andreach.com

2. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 MailScan for ISPs Richard Chuang richard@andreach.com

3. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Contents Overview Infrastructure and resources ISP ’ s Mail-Server Setup (Before MailScan) Email infrastructure and Setup Introduction to MSSPL Content Security - Introduction & Definition MailScan for ISP – The 100% solution Summary of solutions Conclusion

4. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Overview An ISP is an organization well equipped to provide enhanced IT services like Internet browsing & email access to customers. An ISP ’ s goal is to provide excellent services in terms of Data Security, Speed & Stability.

5. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Infrastructure & Resources. MailScan Server Configuration : Servers are IBM Pentium P-III 800 Intel Processor with 512 MB RAM, 20GB H/Disk with Windows NT (preferably Windows 2000) as their Operating System and using Service Pack 6.

6. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 ISP ’ s Mail-Server Setup (Before MailScan)

7. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 E-mail infrastructure and setup l Mailing system used is Linux based l There are approx. 5000 users who are having access to Internet & e- mail. l Users connect to the ISP to access their mails.

8. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Mail-Server Setup of the ISP

9. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Mail-Server Setup Internet Linux Server Clients

10. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Problems identified & Solutions solicited

11. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 l Virus Scanning : Primary Objective was to scan all Incoming & Outgoing messages for viruses, generate a warning in case of a Virus Infection to Sender, Recipient & Administrator. l Content Security : To scan Subject & Body of emails for abusive words & if such words are found, forward the email to Administrator l Disclaimer : All outgoing emails from every USER should have the users signature. Every outgoing email should also be stamped as “ checked for viruses ” when MailScan processes the same. l Valid Domains : To check Valid Sender Domains before accepting emails (to block spam emails). l Junk Emails: To discard junk emails from pre-defined From: addresses fields. Problems Defined

12. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 MSSPL A Complete Security Solutions Company

13. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 MicroWorld Software Services Pvt. Ltd. ( “ MSSPL ” ) is one of the leading solution providers for Content Security and Communication Software ’ s in India. It has branch offices responsible for Marketing and providing Technical support, in the U.S.A., Bangalore and Delhi and a large channel network across the nations providing a complete assurance of technical assistance “ Anytime - Anywhere ”. MSSPL has the technical and technology expertise to implement software solutions for communications and security. It ’ s current clients include Banks, Financial Institutions, Corporates, Airlines, Travel Agencies, etc. Introduction to MSSPL

14. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 MSSPL has also leveraged it’s expertise in Content Security and Communication Software’s. MSSPL’s Content Security products, under the brand names of eScan and MailScan, are sold worldwide through a network of Distributors, dealers & resellers. MSSPL is also a pioneer in developing security solutions for POP gateways. We’ve the monopoly in the world market for solutions on POP gateways. MSSPL is also heading towards providing solutions to ISP’s worldwide.

15. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Content Security Definition and Need

16. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Definition and need of Content Security: Need: Content Security reflects users need for an Internet Management tool that controls Web contents, email scanning and downloadable application execution. Purpose: Web content scanning and security products identify and manage Web content involving racist or hate materials, profanities, banned file types, oversize data packets and potential loss or corruption of data. Objective: As email demand grows, users also want to ensure that their ISP ’ s are well equipped to handle the present, the future viruses and content threats.

17. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Security Policy Management Contextual Policy Management : Contextual Policy Management is defined by the ability to apply policies to emails and Web transfers not just as content but according to the sender, the recipient and delivery mechanism. Different policies may be required for different groups or individuals. The policy may even require individual to apply multiple policies to single emails with multiple recipients. Comprehensive Object Management: Comprehensive Object Management means that the scanning application understands file types, encryption and file extensions. Recursive Decomposition : This refers to the ability to take apart content, remove the policy violations and recompose the message.

18. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 The Solution: MailScan for ISP ’ s

19. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 The basic components of MailScan. Anti-Virus scanning in attachments Applet containment Content Inspection Auditing and reporting capabilities Secure messaging Automatic download of updates All important policy based modules for implementing policies MailScan - Complete Content Security Solution

20. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Unique features to be developed for ISP’s setup Feature customization Accounting : Userwise accounting Complete logging of number of emails send & received by individuals from and to a particular domain. Complete report on amount of data transfer in bytes or megabytes by every individual. Report generation can be either for emails send or emails received or both.

21. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Commercial: Price wise calculations per user is possible for the amount of emails send or received. Importing features: Supports importing a list of users from a SQL database. Full Scan Control could be done for pre- defined users in this database. User-level customization: Individual customization is possible depending on the users requirements.

22. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 MailScan for ISPs – The 100% Solution Virus Scanning: All incoming & outgoing message attachments are scanned for viruses & in case of a virus infection, Warning emails are sent to Sender, Recipient & Administrator. Security Policy definition: Security Policies that can be defined MailScan are categorised as Universal policies and User-specific policies. These policy definitions or Rule-Sets can be incorporated in MailScan which can be propagated over network automatically. All incoming & Outgoing emails are scanned for abusive words. These are defined using MailScan Administrator & if any such words are found, a warning message is sent to Mail-Sender & Mail-Recipient. Reports: User receives the following information: Mail-Sender, Mail-Recipient, Subject of Mail, Attachment(s) & Virus in the email, Status.

23. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Updates of Security Policies & Virus signatures: MailScan facilitates this and helps users avoid time consuming manual intervention and eliminates associated security problems. l Disclaimer: All outgoing messages have the Users signature and “ Scanned ” message of Mailscan. l Compression & Decompression: All outgoing attachments if more than 1 MB are compressed to Self- Executable file to effectively utilize their Leased Line Bandwidth Incoming Attachments, if in Compressed form of (.ZIP) can optionally be uncompressed & Scanned/Cleaned for Viruses. l Domain Validity : It does a DNS lookup to check for valid domains before accepting incoming emails from the internet (available in MailScan for SMTP Servers). Solutions offered (cont ’ d)

24. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Incoming emails scanned by MailScan on Windows NT machine All incoming mails first come to MailScan installed on the Windows NT system. MailScan scans the emails and gives it to the Linux server. The Linux server distributes the emails to the respective users. Mail-Server Setup for Incoming mails after installing MailScan Windows NT gives all the emails to the Linux Server Linux distributes emails to the Respective users. Internet

25. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Users send outgoing mails to Linux server All Outgoing emails come to Linux server, the Linux server then routes them to MailScan residing on Windows NT system. MailScan scans messages/attachments for viruses, compresses attachments if size more than a defined size, scans for predefined words or phrases in Subject & Body of Mail & accordingly delivers it to the Administrator in case of violations or to the Internet. Mail-Server Setup for outgoing emails after installing MailScan Outgoing Mails MailScan scans emails and sends it to the Internet Internet Users Linux sends it to MailScan installed on Windows NT machine

26. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 MailScan provides an effective & comprehensive Content Security solution on the Gateways. It provides the administrator all possible information of any Security violations. It helps the ISP to make an effective use of its bandwidth. It gives the ISP, tools to stop SPAM and delete junk emails which burden the internet. It automatically downloads Security policies & dynamically updates itself. Very easy to Administrate and Control. Summary of Solutions:

27. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 CONCLUSION MailScan is the most viable solutions for an ISP

28. www.AndReach.Comwww.AndReach.Com 1999-2002 銳擎智識股份有限公司 Q&A