Secure Your E-mail Systems - Protecting Against Port 25 Vulnerabilities

It goes without saying that e-mail plays a critical role inemployee when it slips through the spam filter, and the
any organization. This relatively new communicationjob offer from the competitor won't go away once
technology has, by many accounts, replaced thethe recipient has printed it out on her printer. The best
telephone as the most useful business tool available.way to prevent these malicious attacks is to stop
Unfortunately, e-mail has also been a victim of its ownthem before they become a problem - at the
success and presents a unique threat to the enterprisegateway.Stopping spam and other malicious e-mail
network as a whole.Protecting networks from virusestraffic at the gateway requires a coordinated effort to
and hackers has traditionally been the responsibility ofsolve a whole host of issues. These include, but are
the Firewalls, Virus Scanners, and Intrusion Detectioncertainly not limited to, spam, viruses, corporate policy
Systems (IDS) set up by enterprises as a defenseinfringements, directory harvest attacks, denial of
against the myriad attacks they come under each day.service attacks, phishing, spoofing, and snooping.
Virus scanners scan each PC in the network,Furthermore, accuracy in identifying spam e-mails is
gateway servers are guarded against attempts tocrucial. It is much better to receive the occasional
gain access by locking down extraneous ports andspam than accidentally filter out an important e-mail
firewalls prevent unauthorized programs fromfrom a customer.Historically, enterprises have turned to
accessing the network. All these measures preventmultiple vendors to solve their e-mail security issues.
direct attacks against the network on every portThey have relied on anti virus vendors to protect them
except port 25 and port 110 - the ports used by SMTPfrom viruses. They use a separate anti spam vendor
(Simple Mail Transfer Protocol) and POP (Post Officeto help cut back on the spam. Then there are the
Protocol) to transmit e-mail from one server toissues of content filtering, policy enforcement,
another.Ports are the openings in the operating systemencryption, and network security. Over time it has
through which applications connect to each other.become clear that having so many vendors
When a firewall receives an e-mail connection on portapproaching these issues from so many directions is
25, it generally assumes that the transmission is e-mailprohibitively expensive and time consuming for
and allows it to flow through to the e-mail server. Theadministrators to manage. Increasingly companies are
transmission may be a valid e-mail, it could be a virusturning to hardened e-mail appliances like CipherTrust's
or a spam, or it could be a job offer for an employeeIronMail. According to Gartner, the globally respected IT
or something much worse. Regardless of the trueresearch firm, "Instead of having several email
intent of the "e-mail", at this point it is incumbent uponsecurity-related point products at the boundary, many
various systems within the network to guard againstenterprises will want only one". IronMail is designed
these threats. Unfortunately, experience has taught usspecifically to guard against port 25 attacks on
that partial success in these areas is the norm, not theenterprise e-mail systems. It can be tuned to work
exception.effectively with any type of organization and has been
Stop E-mail Threats at The Gatewayemployed for use in a wide range of industries such as
The best place to stop a threat is before it gets insidehealthcare, government, finance, education,
the network. Virus scanners are only as good as theirmanufacturing, retail, and many more. It allows
latest update, and are virtually useless against neworganizations to stop spam and viruses, protect
viruses that have yet to be identified. If a user doesemployees from fraud and inappropriate content,
not update his virus definition list, then his machine willenforce corporate policies, provide secure delivery,
be infected. A pornographic spam will offend anencrypt e-mail, and provide remote access.