1. Multi-tiered Mail Security from Symantec The Need for Defense in Depth Chris Miller Director, Product Management

2. A G E N D A Evolution of Challenges in Email
Security & Availability
Importance of Defense in Depth
Symantec Mail Security Portfolio
Symantec Technologies & Response
Symantec Mail Security Enterprise Edition 1 2 3 4 4 5 6
NDA required – Symantec Confidential – © 2005

3. Evolution of Challenges in Email
25 – 30 - % annual growth of business through 2009 *
Over 60 - % of received today as spam **
80 - % of viruses entering through the gateway ***
75 - % of corporate Intellectual Property in ****
79 - % of companies who accept as written confirmation of approvals, orders and other transactions*****
* Gartner (excluding spam)
** Symantec ISTR, Mar 2005
*** IDC
**** Enterprise Strategy Group
***** Osterman Research
NDA required – Symantec Confidential – © 2005

4. Email Security & Availability Defense in Depth for Email
Manage Lifecycle
Security & Availability Defense in Depth for
Management
Keep Protected
Keep Running
Risk and Data
Reduction
Records Retention
Data Reduction
Internal
Protection
Records Discovery and Retrieval
SMS 8160 Appliance
"Antispam Router"
Symantec Mail Security
Software/Appliance/Hosted
Symantec Mail Security for > Microsoft Exchange > Lotus Domino
Enterprise Vault > Microsoft Exchange > Lotus Domino
VERITAS EV Compliance Accelerator & Discovery Accelerator
Internet
Microsoft Exchange
IBM Lotus Domino
MTA
Enterprise
Vault Server
Here is the products from Symantec that are included in the solution.
The patent-pending traffic-shaping technology in Symantec Mail Security 8100 Series reduces total volume by up to 50% before it enters the network by giving spam the narrow bandwidth for traffic. We are not blocking messages but making spam go slowly into the network while ensuring the legitimate messages move faster.
The Symantec Mail Security product line offers an integrated security solution combining accurate antispam (formally from Brightmail) and market-leading antivirus technologies to effectively and accurately stop spam and viruses. Symantec provides the solution in three form factors, in appliance, in software and in hosted services.
Contents filtering capability in Symantec Mail Security, for both SMTP and Groupware layer, also prevents the sending or receiving of unauthorized or inappropriate by scanning message body text for keywords and phrases using flexible and customizable filtering rules.
A market-leading archiving solution is VERITAS Enterprise Vault, which reduces the amount of data on primary storage by compressing data and automatically moving , based upon policy, to less expensive secondary storage. VERITAS Enterprise Vault also helps customers address document retention compliance needs via a policy-based data storage and retention solution to manage throughout its lifecycle, without impacting how users interact with .
The leading backup product, VERITAS NetBackup, simplifies backup and recovery without taking the messaging server offline and ensures the continued availability of services.
Storage Foundation for Windows simplifies online data migration to new storage platform.
Storage Foundation HA for Windows, which is clustering server capability, provides high availability for application, data and servers and scale from local to wide-area disaster recovery.
Vault Store
SMTP Traffic
Spam Retention (Regulation-dependent)
Spam
Quarantine
remains accessible
to end users
SMS = Symantec Mail Security
NDA required – Symantec Confidential – © 2005

5. Effects of Internet Threats on Email Infrastructure
Spam comprises between 60-70% of incoming enterprise
Mass-mailer worms - steadily increasing in frequency and severity (usually 1-5% of mail stream)
Unwanted and oversized content is traversing inside and outside organization
NDA required – Symantec Confidential – © 2005

6. Importance of Defense in Depth Email Security
Customers require multiple layers of protection for against viruses, spam and unwanted content (influx or leakage)
SMTP Gateway
Eradicating spam from the mail stream (and message store)
Stopping viruses (esp. mass-mailer worms) at the earliest point of entry
Preventing unauthorized or unwanted content from entering or leaving org
Mail Server (Exchange/Domino)
Real-time, scheduled and on-demand sweeps of message stores
Preventing leakage to unauthorized internal and/or external users
Prevent spread of unwanted content internally & outside org
NDA required – Symantec Confidential – © 2005

7. Symantec Mail Security Portfolio SMTP Gateway & Mail Server Tiers
Symantec, the global leader in information security, is the only vendor that offers best-of-breed security at the network, gateway, and server, with multiple deployment options for all organizations
NDA required – Symantec Confidential – © 2005

8. SMTP Protection – How it works
What it does?
Virus scanning of inbound/outbound Internet traffic
Spam detection and quarantining with centralized web-based user control
Content compliance technologies for filtering inappropriate content for inbound and outbound traffic
Benefit to Security
Over 97% reduction in remaining spam (InfoWorld Product Review 2004) with % accuracy (Yankee Group Report 2004)
Removes worms and viruses at earliest point of entry
Eliminates mass-mailer worm content before it hits mail store/database
Prevents leakage of company internal content or infiltration of inappropriate content
NDA required – Symantec Confidential – © 2005

9. Mail Server Protection – How it works
What it does?
Real-time, scheduled and on-demand scan of message store/database
Virus scanning of inbound, outbound and internal traffic
Content compliance technologies for filtering inappropriate content
Benefit to Security
Prevents spread of viruses to internal users
Ability to retroactively cleanse message stores after early-hour attack
Prevent internal and external leakage
NDA required – Symantec Confidential – © 2005

10. Unique AntiSpam technology and architecture
Proven 97%+ effectiveness
% accurate - Fewer than 1 in 1 million false positives
Updates every 10 minutes: automatic, timely and secure
No administrative burden
No tuning/training required
24/7/365 protection from new spam/phishing attacks
NDA required – Symantec Confidential – © 2005

11. Consistent & Reliable Protection – 22 Consecutive VB 100% Awards
PASS 22
Symantec
Number
Date
Symantec
Trend
Sophos
McAfee
Kaspersky
GeDAD RAV
CA Vet
CA eTrust
F-secure
Symantec:
Submitted all supported environments for analysis since Nov. ‘99
ONLY vendor to obtain 22 consecutive VB100 Awards
On this slide note that:
Trend failed to submit for several recent tests and allude to their recent issues with virus definition.
Highlight that Symantec has not failed in over 6 years while submitting every single time for all tests on supported platforms (We don’t submit for VB 100% tests on the Linux platform since we don’t have an offering).
The VB 100% logo is awarded to anti-virus products that:
Detect all In the Wild viruses during both on-demand and on-access scanning in Virus Bulletin's comparative tests.
Generate no false positives when scanning a set of clean files.
Virus Bulletin's aim is to offer subscribers the best impartial advice about anti-virus security and the products on offer.
As the virus threat is continually changing, you should look for products that have achieved a succession of VB 100% awards, rather than just one or two. Developers that can best keep their products up to date are more likely to receive VB 100% awards. Virus Bulletin's tests are widely recognized within the industry. The comparative tests tend to focus on virus detection rates and scanning speed, as well as looking at how each product fares when scanning a set files that are known to be clean.
Pass: Detected all "In the Wild viruses" in comparative tests (with no false positives)
Fail: Missed detection after three attempts
—: Chose not to submit for testing
NDA required – Symantec Confidential – © 2005

12. Symantec's Global Network of Spam and Virus Labs
Calgary
Dublin
San Francisco
Redwood City
Tokyo
Santa Monica
Taipei
Antivirus Labs
Antispam Labs
Sydney
Virus Protection
Spam Protection
4 Operation Centers
Over 2 Million Decoy Accounts
Tens of Millions Of Spam Processed Daily
Over 20 Countries
24 x 365 Response
6 Security Response Centers
Digital Immune System Infrastructure
Over 120M systems worldwide
Over 45 Countries
24 x 356 Response
NDA required – Symantec Confidential – © 2005

13. Symantec Mail Security Portfolio Broad form factor and platform support
* SMS SMTP, Domino & Exchange include "Premium Antispam" option
NDA required – Symantec Confidential – © 2005

14. SMTP Gateway Deployment Option Considerations
Software
Appliance
Hosted Service
Description
On-premise
License, OS, and hardware
Vendor updated
Off-premise scanning
Note: Not a "managed service
Initial costs
License, OS, & Hardware
License and hardware (appliance)
License only
Ongoing costs
Maintaining hardware, OS and application updates/patches
Appliance upgrades (new or additional)
No H/W, OS, application to maintain
Policy Settings
Customer-controlled
Customer Controlled
Security
Hardened/secured by manufacturer
Proxy preferred (vs. store-and-forward)
Vendor-reputation
Relative Cost of Ownership
High
Moderate
Low
NDA required – Symantec Confidential – © 2005

15. Gartner Magic Quadrant for E-Mail Security Boundary, 1H05
Source: Magic Quadrant for Security Boundary, 1H05
Arabella Hallawell, June 2005
NDA required – Symantec Confidential – © 2005

16. Introducing… Symantec Mail Security Enterprise Edition (Bundle)
Single license, activation key and price for full coverage across tiers
Integrated AV, premium antispam, and CF across all tiers*
Flexibility of form factor
Broad coverage of platforms & OS
Scheduled, on-demand, daily and hourly virus updates
10-minute updates on spam defs for 97% % accuracy
Robust content filtering tools for compliance
* SMS SMTP, Domino & Exchange include "Premium Antispam" option
NDA required – Symantec Confidential – © 2005

17. SMS EE Functional Overview
Mail Security 8200
(Appliance)
Hosted Mail Security (Hosted)
SMS SMTP/SBAS
(Software)
SMS Exchange (Mail Server)
SMS Domino (Mail Server)
Virus Protection
NAVEX Engine 
Mass-mailer Cleanup
Attachment blocking
Spam Prevention
Brightmail AntiSpam Engine
Web-based Spam Quarantine -
Content Compliance/Filtering
Message Inspection
Attachment Inspection
User/Group Policies
Central Management
Policy
Reporting
NDA required – Symantec Confidential – © 2005

18. Symantec Mail Security Enterprise Edition Pricing and Licensing
Total user count X price per user
Includes Gold Support
Software and Content Updates
1, 2 and 3 Year Subscriptions
NDA required – Symantec Confidential – © 2005

19. Benefits of Symantec Mail Security Enterprise Edition (bundle)
Simplifies acquisition for multi-tier security
Simplifies and lowers cost of ownership through "power-of-one"
Single comprehensive bundle SKU, contract, price, support contact
Leading antispam and antivirus technologies and solutions backed by the leader in Internet Security
Recipient of InfoWorld "Technology of the Year" award for 2004
Gartner Magic Quadrant for Security
Most consistent VirusBulletin Awards
NDA required – Symantec Confidential – © 2005

20. What does Symantec Mail Security Enterprise Edition mean for existing Symantec customers?
Symantec AntiVirus Enterprise Edition
Add flexibility to extend SMTP protection to Symantec Mail Security 8200-Series Appliances or Symantec Hosted Mail Security
Need: Symantec Mail Security Enterprise Edition Add-on
Price is same as Brightmail Antispam/Premium AntiSpam only
Symantec Brightmail AntiSpam or Symantec Mail Security for Exchange/Domino/SMTP only
Full coverage across both tiers, with both antivirus and antispam, including deployment flexibility
Need: Symantec Mail Security Enterprise Edition X-Grade
Price recognizes current investment
NDA required – Symantec Confidential – © 2005

21. Key Symantec Differentiators
Appliance, Software and Hosted offerings for SMTP gateway
Integrated mail server solutions for Domino and Exchange
Integrated virus and spam defenses, along with filtering tools for controlling the flow of inappropriate or unwanted content
Global Virus and Spam Response
Unequaled antispam effectiveness
95+% detection*, 1 in 1 million false positives
20+ filtering techniques
Updates every 5-10 minutes
Best-in-class Symantec AntiVirus engine
22 consecutive VB 100% awards (submitted every time for supported platforms)
NDA required – Symantec Confidential – © 2005
* InfoWorld Product Review 2004

22. Try Symantec Mail Security Products
Symantec Brightail AntiSpam Software
ses.symantec.com/try-antispam
Symantec Hosted Mail Security
Symantec Mail Security for Exchange
Symantec Mail Security for Domino
NDA required – Symantec Confidential – © 2005

23. Questions
NDA required – Symantec Confidential – © 2005