Skip Links

Network World

  • Social Web 
  • Email 
  • Close

RSA `07: Avinti powers e-mail security appliance for enterprise use

Blocks zero-day threats by observing code behavior
By Cara Garretson , Network World , 02/05/2007
  • Share/Email
  • Comment
  • Print

Avinti on Monday will release Version 3.0 of its iSolation Server, an e-mail security appliance that the company has tuned for enterprise use.


Go to RSA '07 HQ for complete coverage


Available now, iSolation Server 3.0 can be used to scan inbound e-mail for hundreds of thousands of mailboxes, making it appropriate for use by large enterprises, says William Kilmer, CEO of Avinti. Until now, the appliance was targeted primarily at small- and midsized businesses.

In addition to enhancing performance, the company has added fault-tolerant features and centralized reporting and administration capabilities, says Kilmer.

iSolation Server, which is also available as a hosted service, uses a technique for catching inbound threats that flags messages potentially containing a virus or malware and runs them through its Observation Engine that executes the code in a safe, contained environment at the gateway, Kilmer explains. If the code attempts to do something abnormal, such as modify the system registry or try to access an Outlook address book and scan e-mail addresses, the message will be quarantined.

The appliance only does this procedure with suspicious messages, such as those where the file extension of the attachment has been changed, and runs multiple virtual machines for executing potentially dangerous code at once so that performance doesn’t suffer, Kilmer says.

According to a recent Gartner prediction, 75% of enterprises will be infected with some undetected, financially motivated or targeted malware in 2007.

iSolation Server’s method of spotting and blocking malicious code gives one customer a high level of confidence that inbound e-mail messages won’t contain threats.

“This unique ability to recognize malicious attachments without relying on virus signatures…virtually guarantees that viruses or malicious code will not be able to make its way to a user’s mailbox,” says Grigoriy Milis, director of technology with Richard Fleischman & Associates, which provides IT solutions to financial institutions that manage hedge funds.

This technique allows iSolation Server to catch brand-new threats that signature-based filters can’t because no signature yet exists for them, says Kilmer. For example, the server was able to catch the recent Storm Worm on the day of its release because it saw that the e-mail messages containing the worm were trying to modify system registries, and another variant was looking for a back door on the recipient’s PC to send information through, he says.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Network World,to go. Wherever you are. Breaking news delivered to your mobile device. Select the hottest topics in networking and start receiving Network World on your mobile device today.