
Protects against email viruses, exploits & Trojans
The need to monitor email messages for dangerous, offensive or confidential content has never been more evident. The most deadly viruses, able to cripple your email system and corporate network in minutes, are being distributed worldwide via email in a matter of hours (for example, the Love Letter virus). Products that perform single vendor anti-virus scanning do not provide sufficient protection. Worse still, email is likely to become the means for installing backdoors (Trojans) and other harmful programs to help potential intruders break into your network. Products restricted to a single anti-virus engine will not protect against email exploits and attacks of this kind.
Your only defense is to install a comprehensive email content checking and anti-virus solution to safeguard your mail server and network. GFI MailSecurity acts as an Email Firewall and protects you from email viruses, exploits and threats, as well as email attacks targeted at your organization.
GFI MailSecurity is available as an SMTP gateway version and for VS API. The gateway version should be deployed at the perimeter of the network as a mail relay server and scans inbound and outbound mail. The VS API version integrates seamlessly with Exchange Server 2000/2003 and scans the Exchange information stores. Both versions can be deployed simultaneously to achieve optimum protection.
GFI MailSecurity gives you these essential email security features:
| . |
Multiple virus engines - guarantees higher detection rate and faster response to new viruses Tell me more |
| . |
Email content and attachment checking - to quarantine dangerous attachments and content |
| . |
Exploit shield - Protect against present and future viruses based on exploits (e.g., Nimda, Bugbear) Tell me more |
| . |
HTML threats engine - to disable HTML scripts |
| . |
Trojan & Executable Scanner - to detect malicious executables Tell me more |
| . |
Best of breed Exchange and gateway message scanning technology |
| . |
Supports simultaneous deployment in SMTP & VS API mode Tell me more |
| . |
Industry's most competitive pricing, with per server price between $275 and $3495. |
Overview | Features | Screenshots | Download Trial | Pricing
GFI DownloadSecurity for ISA Server Features
Controls what files enter your network
For security reasons, you need to exercise control over what kind of files enter your network. Yet, simply blocking all downloads would be far too restricting for network users - and would substantially reduce the usefulness of the Internet and therefore employee productivity. Instead, GFI DownloadSecurity for ISA Server enables you to define which file types should be quarantined for administrator approval per user. You can also use this feature to monitor downloads and ensure that Internet bandwidth is not wasted on useless downloads.
Scans for viruses in HTTP and FTP downloads
GFI DownloadSecurity scans all incoming HTTP and FTP downloads for known viruses. Integrated with GFI DownloadSecurity for ISA Server are two industrial-strength anti-virus engines. The signature files are updated immediately after new virus outbreaks become known.
*Top*
Norman Virus Control & BitDefender virus engines are included
GFI DownloadSecurity comes bundled with Norman Virus Control and BitDefender. Norman Virus Control is an industrial strength virus engine that has received the 100% Virus Bulletin award 16 times running. It also has ICSA and Checkmark certification. BitDefender is a very fast and flexible virus engine that excels in the number of formats it can recognize and scan. BitDefender is ICSA certified and has won the 100% Virus Bulletin award and the European Information Technologies Prize 2002. GFI DownloadSecurity automatically checks and updates the Norman Virus Control and BitDefender definition files as they become available. The GFI DownloadSecurity price includes one year of updates.
Kaspersky virus engine optional
To achieve even greater security, users can add the widely respected Kaspersky virus engine as a third or fourth anti-virus engine or as a replacement to one of the other engines. Kaspersky Anti-Virus is ICSA-certified and has won awards from various IT magazines, such as PC Magazine, PC World, Computer Buyer and Byte. It is well known for the unsurpassed depth of its object scanning, the high rate at which new virus signatures are released, and its unique heuristic technology that effectively neutralizes unknown viruses. Adding the Kaspersky engine is highly cost-effective.
*Top*
McAfee virus engine optional
It is possible to add the renowned McAfee virus engine as a third or fourth anti-virus engine or as a replacement to one of the other engines. This engine is particularly strong at detecting non-virus attacks such as rogue ActiveX controls. Adding the McAfee engine costs approximately 20% of the GFI DownloadSecurity price.
Quarantines - rather than blocks - suspicious file types
GFI DownloadSecurity's rules engine allows you to quarantine downloads such as .exe files, .zip files and other files that could contain harmful content, such as a virus, worm or Trojan. GFI DownloadSecurity enables you to configure multiple file checking rules and define what must be quarantined on a user or group basis, giving you total flexibility in the way you choose to check incoming files.
*Top*
Trojan and executable analyzer
The GFI DownloadSecurity Trojan & Executable Scanner detects unknown malicious executables (for example, Trojans) by analyzing what an executable does. Trojans are dangerous as they can enter a victim's computer undetected, granting an attacker unrestricted access to the data stored on that computer. Anti-virus software will NOT catch unknown Trojans because it is signature-based. The Trojan & Executable Scanner takes a different approach by using built-in intelligence to rate an executable's risk level. It does this by disassembling the executable, detecting in real time what it might do, and comparing its actions to a database of malicious actions. The scanner then quarantines any executables that perform suspicious activities, such as accessing a modem, making network connections or accessing the address book.
Can block/check applications' hidden downloads
Some software applications automatically connect to their home pages to download updates using HTTP tunnelling. Although this can reduce administration, it can also present a security risk because unknown applications or Trojans can use the same technique to download malicious files onto a user's PC, without the user knowing. GFI DownloadSecurity can protect you against the automatic downloading of files to users' computers by known and unknown applications. You can configure GFI DownloadSecurity to allow updates from known/approved sites (e.g., Microsoft.com) and block automatic updates from unknown sites.
*Top*
Check/block incoming files by file type, not only by extension
GFI DownloadSecurity blocks/quarantines files based on file type (for example, executable) and file extension. Microsoft ISA Server can only block by extension, meaning users could bypass its file blocking system by renaming the extension. GFI DownloadSecurity allows you to ensure that this does not happen on your network.
Network-wide blocking of Java applets & ActiveX controls
ActiveX controls and Java applets are a huge security risk as they can be Trojans or may contain security holes that could be exploited. Although users are prompted by their browser whether they wish to run the ActiveX control or Java applet, those who are unaware of the risks could potentially infect your network by downloading a control from a distrusted site. GFI DownloadSecurity allows you to specify the sites from which you trust ActiveX controls or Java applets and blocks all Java applets and ActiveX controls from mistrusted/unknown sites. This way, GFI DownloadSecurity secures your network from any user who makes the wrong decision in downloading a control or applet.
*Top*
Approve/reject quarantined downloads using the moderator client, email client or web-based moderator
GFI DownloadSecurity provides several options for moderating quarantined downloads and web pages. The moderator client gives you a familiar Windows interface for approving/rejecting files. The web-based moderator allows you to approve/reject downloads from anywhere on your network. Alternatively, GFI DownloadSecurity can also forward quarantined files to an email address, enabling you to use a public folder to distribute the quarantined items to multiple administrators.
Complete integration with ISA Server - Easy installation & administration
GFI DownloadSecurity was built from the ground up to work with ISA Server. It links in as an ISAPI extension and can leverage features such as alerts, reporting and more that are already found in ISA Server. You do not need to change anything in your network configuration.
*Top*
Cost-effective
GFI DownloadSecurity is highly cost-effective compared to other content filtering and anti-virus products. Because the product runs on ISA Server, no dedicated machine or network consultancy is required.
How GFI DownloadSecurity for ISA Server works
Users will not notice GFI DownloadSecurity until they download a file: Then GFI DownloadSecurity displays a download progress dialog box and the download proceeds. Once the download is complete, GFI DownloadSecurity scans the file for viruses. If the file has no viruses and does not trigger a rule, the user receives it immediately. If the file triggers a rule, it is put into quarantine for administrator approval. Once approved, the file is sent to the user as an email attachment or link. If the file is rejected, the user is notified.
*Top*
Combine GFI DownloadSecurity with GFI MailSecurity
GFI DownloadSecurity can be purchased in combination with GFI MailSecurity. GFI MailSecurity for Exchange/SMTP is an email content checking, exploit detection, threats analysis, anti-Trojan and anti-virus solution that removes all types of email-borne threats before they can affect your email users. GFI MailSecurity and GFI DownloadSecurity integrate seamlessly, allowing you to configure content security rules and moderate quarantined files from the same interface.
You're in good company...
Many leading companies have chosen GFI DownloadSecurity. Here are just a few: Baby Lulu Inc., Staffordshire Building Society, Sky Pharmaceuticals, Joseph Rowntree Foundation, TexakaBank, Tayburn Ltd and many more.
*Top*
| System requirements
- Microsoft ISA Server.
- Windows 2000/2003 Server.
|
The leader in anti-spam
GFI MailEssentials is the market-leading server-based spam solution. More than 20,000 companies worldwide use GFI MailEssentials to protect their mail servers from spam.
Server-based anti-spam
GFI MailEssentials is server-based and installs on the mail server or at the gateway, eliminating the deployment and administration hassle of desktop-based anti-spam products. Desktop-based anti-spam involves training your users to create anti-spam rules sets, and subsequently users have to spend time updating these rules. Besides, this system does not prevent your server message stores from filling up with spam. View screenshots from GFI Website
*Top*
Bayesian filtering technology
GFI MailEssentials features Bayesian filtering technology to detect spam based on message content. Rather than just checking for keywords, GFI's Bayesian filter takes the whole message into consideration as well as the content of valid emails that you send (known as 'ham'). This gives it a tremendous advantage over other anti-spam solutions that only take spam into account. Bayesian filters are widely acclaimed to be the best way to tackle spam because they use statistical intelligence to analyze the content of the mail. In short, Bayesian filtering has the following advantages:
- Looks at the whole message
- Adapts itself over time
- Sensitive/adaptive to the company/user
- Multilingual and international
- Hard to trick.
Read more about Bayesian filtering in this GFI white paper.
Downloads updates to spam profile database
GFI MailEssentials can download updates to the Bayesian spam profile database from the GFI site, ensuring that it recognizes the latest spam and spamming techniques. GFI maintains the spam profile database by working with a number of spam collection organizations that continually supply spam samples.
*Top*
Sort spam to users' junk mail folders
GFI MailEssentials gives you the flexibility to choose what to do with spam. You can delete it, move it to a folder, forward the spam mail to a public email address or folder, or send it to individual customizable folders (for example, a "junk mail" folder) in the end-users' inboxes. This allows users to easily review mail that has been flagged as spam.
Mail header analysis & keyword checking
GFI MailEssentials intelligently analyzes the email header and identifies spam based on message field information. It detects forged headers, spam mutation, spam sent from invalid domains, and more. It also enables you too configure keywords to check for spam using keyword checking.
3rd party DNS blacklists (DNSBL) checking
GFI MailEssentials supports third party DNS blacklists (real time black hole lists), which are databases of known spammers. If the sending mail server is on one of those lists, GFI MailEssentials marks the email as spam. GFI MailEssentials supports popular third party blacklists such as ORDB, SpamHaus, Spamcop or RBL. GFI also supports custom blacklists.
*Top*
Block foreign language spam
GFI MailEssentials can block mail that uses particular character sets. For example, you can greatly reduce spam simply by blocking all mails written in Japanese, Russian, Korean, etc.
Automatic whitelist management reduces false positives
Whitelists enable you to ensure that mail from particular senders or domains are never flagged as spam, permitting more stringent anti-spam rules. GFI MailEssentials includes a patented automatic whitelist management tool, which automatically adds all business partners to your whitelist. This greatly reduces false positives, without any need for additional administration.
Fake non-delivery reports (NDRs)
GFI MailEssentials bounces spam back to the sender with a false non-delivery report. This NDR leads them to believe that your address is invalid, and gets your organization's addresses off spam lists.
*Top*
Company-wide disclaimer/footer/header text
GFI MailEssentials enables you to add disclaimers to the top or bottom of an email. Text and HTML formats are supported. You can include fields/variables to personalize the disclaimer. You can also create multiple disclaimers and associate them with a user, group or domain.
Mail archiving to a database
GFI MailEssentials allows you to archive all inbound and outbound Internet mail. This enables you to keep a back-up of all email communications and easily search for a required message. This also allows you to comply with SEC and other regulations that require you to archive email correspondence.
*Top*
Reports on spam filtering and mail usage
The GFI MailEssentials reporter creates advanced reports on your inbound and outbound email. You can report on how much spam you filtered and what rules caught most spam. You can generate reports on user, domain and mail server usage.
Mail monitoring
The mail monitoring feature enables you to keep a central store of the email communications of a particular person or department. Because you can configure the mail to be copied to an email address, all email can be stored in an Exchange or Outlook store, so that you can easily search for email or content.
*Top*
Personalized server-based auto replies with tracking number
With server-based, personalized replies, you can advise your customers that their message has been received and who will handle it. GFI MailEssentials assigns a tracking number to each reply and can also include attachments. View screenshot
POP3 downloader
GFI MailEssentials includes a utility that can download mail from POP3 mailboxes. It supports both single and multiple recipient POP3 accounts.
*Top*
Seamless integration with Exchange Server 2000/2003 & 5.5
GFI MailEssentials integrates seamlessly with Microsoft Exchange 2000/2003: It installs on the Exchange SMTP service and does not require gateway configuration. Via the SMTP protocol, it also works with Exchange 5.5, Lotus Notes and other popular SMTP/POP3 servers.
Content checking, anti-virus & anti-Trojan
Get anti-virus, email content checking and anti-Trojan protection for your mail server with the GFI MailSecurity/GFI MailEssentials bundle. GFI MailSecurity for Exchange/SMTP is an email content checking, exploit detection, threats analysis and anti-virus solution that removes all types of email-borne threats before they can affect your email users. Click here for more information!
You're in good company...
Many leading companies have chosen GFI MailEssentials. Here are just a few: Toyota, IBM, Schuff International, PerotSystems, British Midlands, B&W Speakers and many more. Customer list & customer testimonials
*Top*