趋势科技邮件安全解决方案.pptVIP

* Suggestion – read numbers in screenshot fields as an example. Example: IP Addresses are monitored for 1 hour. If during that time at least 1000 emails are sent by an IP Address and 80% of the emails are spam, the thresholds are exceeded and the triggering action is activated. In this case the IP Address is blocked temporarily. Additional information (links to appendix) – links to first slide of three Slide 1 - shows additional fields for DHA (# of recipients in the email and # of non-existing recipients – now LDAP integrated, so it checks the directory) Slide 2 lists the process of how the traffic from the IP address is actually profiled – can just speak to this (below) Records all inbound and outbound SMTP traffic Reports records on email traffic from each IP Address to a database The emails are scanned by the anti-spam composite engine The results of the scanning engine are reported to the database The traffic from the IP Address is profiled by cross referencing the recorded traffic with the scanning results For example, total messaging from the IP address vs. spam messages from the IP Address This outcome is compared against the user thresholds If the outcome exceeds the thresholds, the trigger action is applied Block Permanently (SMTP 5xx) or Block Temporarily (SMTP 4xx) Slide 3 – shows how customers can actively manage the monitoring IP Address – they don’t have to wait until the thresholds are triggered. Can select an IP Address and block permanently or temporarily. IP Profiler is not part of the hosted service because this technology is based on customer-specific email traffic. In essence, the hosted service is like one big customer, allowing Trend Micro to tune the protection across all customers. * Stops any remaining spam before it reaches the inbox using a combination of technologies. We are one of the only companies that provides effective multi-lingual anti-spam. This is particularly helpful for global companies. The image spam detection