v8.0
TRITON AP-EMAIL
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 2
ACE IN DEPTH
Anti-Malware
Reputation
Analysis
Behavioral
Sandboxing
Anti-Spam/
Phishing
Real-time Data
Classification
Real-time
Content
Classification
Real-time
Security
Classification
URL
Classification
Integrated set of defense
assessment capabilities in 8 key
areas.
• 10,000 analytics available to support
deep inspections.
• Predictive security engine see
several moves ahead.
• Inline operation not only monitors,
but blocks threats.
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 3
*Email DLP Module included in Triton AP-Email
Deployment Strategies
DEPLOYMENT
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 5
Standard Network Deployment*10k appliance – AP-EMAIL appliance or AP-EMAIL Virtual
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 6
DNS Configuration For On-premises Deployment
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 7
DNS Configuration For Email Hybrid Module
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 8
Clustering With Load Balancer
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 9
Clustering With MX Record
How Does TRITON AP-EMAIL Process Messages
MESSAGE PROCESSING
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 11
Message Processing
• Message Processing Flow
• Message Filtering Framework
• Five Message Queues
• Pre-Filtering
• RBL & WRS
• DKIM Verification
• True Source IP Detection
• Content Filtering
• URL Sandboxing
• File Sandboxing
• Deliver Messages
• Traffic Shaping
• Email Routing
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 12
Message Processing Flow
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 13
Content Filtering: Overview
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 14
URL Sandbox: Real-time Analysis At Point-of-Click
http://www.callouts.com/download/happy-holidays-icons-stamps/
http://webdefence.global.blackspider.com/urlwrap/?q=AXicHcxBCsIwEEDRceXCa7htUqqCuBJB0GNMk0AKk0yaiQ05pnsPY3X7-
PzNFt47gM8eIFM7DKOSvKiAExmOJTMpwwHm2-n-WJ5D35-P_QCrN-Ou1Y3iorh_4ktJF61rrcogEb-K_FxbrpEYrfaYUus802SxSTetf-
mkYEii4QufZC5c&Z
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 15
URL Sandbox: What Happens For Embedded URLs
Email sent containing
embedded URL
ACE Intelligence
Bad URL blocked at gateway
Proactive ACE Intelligence
Emails with suspicious links
are flagged for URL sandboxing
ACE Intelligence Good
URL pass at gateway
URL Sandboxing
Analyze the flagged URL at
Point-of-Click
1
2
3
4
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 16
File Sandbox *
TRITON AP-EMAIL adds a flag:
need ThreatScope scan
attachment
…
Antivirus
ThreatScope
TRITON AP-EMAIL
*Optional Add-On
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 17 17
Built-In Enterprise Class DLP
Module DLP
� Built-in enterprise-class email DLP with unique data fingerprinting, natural language processing,
drip DLP, reporting forensics and over 1,700 built-in policy templates for high accuracy
� DLP for Mobile Devices via ActiveSync detects and blocks confidential emails and attachments
from being accessed on mobile devices
� No complex 3rd party product integration
� Ease DLP administration across email, Web, mobile, and endpoint channels with single
interface—create one policy and use multiple times
� Reduce the number of false positive incidents and the associated investigation involved Value
Defensibility
consecutive years in Leaders Quadrant for Gartner Content-Aware
Data Loss Prevention—the same technology of Email DLP5
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 18 18
Built-In Enterprise Class DLP In Action
DLP-Lite: Correctly
Identify Incident
Websense: Correctly
Identify Non-Incident�
DLP-Lite: Incorrectly
Identify Incident
Websense: Correctly
Identify Non-Incident
through NLP & SSN
validation�
X
�
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 19
DLP Integration
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 20 20
Module Image Analysis*
� Challenge
– Inappropriate images (e.g. porn) create legal liability and risk
� Solution
– Advanced algorithms analyze images embedded or attached
in emails in real-time
� Benefit– Provide comfortable, safe workplace for employees
– Limit legal liability associated with inappropriate images via
*Optional Add-On
Configurations
LOG AND REPORTING
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 22
Logs & Reports
• Log Types
• Message
• Connection
• Audit
• System
• Console
• Hybrid Service
• Primary Reports
• Today dashboard
• History dashboard (last 30 days)
• Presentation report
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 23
Message Log
Records information about emails
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 24
Connection Log
Records information about connections
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 25
Audit Log
Provides audit trail of policy changes and settings
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 26
System Log
Records current state of TRITON AP-EMAIL
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 27
Console Log
Records administrator activities
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 28
Dashboard
Displays various reports from TRITON AP-EMAIL
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 29
Today Report
Status > Today > Customize
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 30
History Report
Status > History: Last 30 days
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 31
Presentation Reports
Status > Presentation Reports
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 32
Real-Time Monitor
Status > Real-Time Monitor Pause and Start button
Select log typeKeyword filter
Select appliance
INDUSTRY RECOGNITION
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 34
Forrester Wave™: Email Content Security
34
“Websense scored the
highest in email filtering
capabilities and overall
Current Offering
evaluation criteria.”
© 2015 Websense, Inc. © 2015 Websense, Inc. Page 35
EMA Hosted Message Security Services: Value Leader & Best Hybrid Strategy
35
Top Related