Websense Hosted Email Security

Overview:

Today’s email threat landscape is dominated by converged email and Web attacks with over 85 percent of unwanted email now containing an embedded URL. Organizations are also facing increasing risks associated with loss of data and violations of acceptable email use. And while email threats are becoming increasingly complex, managing email security doesn’t have to be.

Websense® security-as-a-service (SaaS) email integrates best-in-class Web security and data security technology with email security to achieve unparalleled visibility into emerging threats and one of the highest levels of protection from inbound and outbound email security risks. This easy-to-manage service provides highly accurate protection against spam, viruses, spyware, phishing, and converged email and Web threats. Pre-defined content dictionaries help make it simple to prevent data loss, meet regulatory requirements, and enforce policies on acceptable email use.

How It Works:

Protecting email with Websense® Hosted Email Security is easy. Simply point MX records to the Websense datacenters and all email is filtered before it reaches the network, providing significant bandwidth and storage savings. Websense data centers are load balanced, redundant, highly available clusters located in 10 locations worldwide. The service provides a SLA-backed availablility of 99.999 percent and is certified to ISO27001 standards to provide the highest degree of global and localized security, privacy, and confidentiality.

Websense security as a service for email security enables customers to:

• Reduce business costs and complexity with no on-site equipment to install or maintain, savings in bandwidth and storage, predictable costs, and reduced administrative overhead.
• Increase protection with leading security from converged email and Web threats backed by industry-leading SLAs and the power of the Websense ThreatSeeker™ Network.
• Retain control with 24x7 access and flexible customization of policies, configuration settings, quarantine management, and reporting.

What’s New in Hosted Email Security v5.1?

Websense Hosted Email Security v. 5.1 now offers extended data loss prevention (DLP) capabilities. Organizations from small to large are requiring the ability to protect essential information from being accidentally or maliciously sent out via email. For businesses that want content filtering and DLP functionality to prevent sensitive data from getting into the wrong hands via email – Websense Hosted Email Security offers the ability to easily set up pre-defined policies, use out-of-the-box templates for some of the most pressing data security standards, and ensure data is encrypted when necessary—all available in a cost-effective hosted deployment

Using intelligence from Websense Data Security Suite, the company’s industryleading data loss prevention solution – Websense Hosted Email Security now has the following new capabilities:

• Pre-defined content dictionaries covering 20 topics in 12 languages to easily enforce acceptable use policies, safeguard private and confidential data, and meet regulatory requirements
• Built-in compliance templates to help ensure compliance with the Payment Card Industry Data Security Standard (PCI-DSS) and US state data privacy laws
• True file-type identification to recognize and control content in over 400 different attachment types without relying on filename extensions
• Flexible content rules with advanced regular expressions to customize content inspection to meet unique requirements
• Policy-based encryption that combines content inspection and encryption to securely transmit documents containing sensitive information

Key Features:

Email Security Gateway Anywhere is the only email security product anywhere that offers embedded, enterprise-class data loss prevention (DLP) that:

• Screens incoming email for blended threats that contain links to malicious websites, invasive script, or other Web threats
• Lets you set extremely granular policy controls to guard against outgoing malicious or accidental data loss
• Gives you enterprise-class accuracy without extra expense and complexity of multiple vendors, dashboards, or equipment
• Boosts performance up to three times when compared to other vendors by intercepting all spam and other unwanted email in the cloud, freeing up your servers and preserving bandwidth

Only Websense offers TruEmail DLP™

Some vendors offer a "DLP-lite" imitation that plagues you with false positives and negatives, rendering it nearly useless. Other vendors sell costly standalone DLP boxes that are endlessly complex to deploy and never work quite right. Only Websense delivers TruEmail DLP™ technology, a highly accurate, enterprise-class feature that provides:

• Over 1,000 built-in policy rules
• Natural language processing
• Data fingerprinting
• File matching
• Categories and dictionaries

TruHybrid = More power to you.

Websense TruHybrid™ integrates on-premise and in-the-cloud deployment into one powerful solution that safeguards incoming and outgoing email:

• Inbound: Since up to 85% of your inbound email is spam, we filter it in the cloud, relieving your servers of 85% of their current email workflow.
• Outbound: You get exceptionally granular policy control and reporting for enforcement of outbound DLP using on-premise appliances.

With TruHybrid deployment, you get:

• Maximum security with TruEmail DLP
• Maximum efficiency, combining in-the-cloud and on-premise setup
• Maximum resiliency: If a network outage hits your servers, we queue your incoming email in the cloud, then deliver automatically when you're running again

 

 

ACE combines strategies to knock out new threats.

The Websense Advanced Classification Engine (ACE) detects blended threats, Web scripts, and dynamic attacks by combining a host of detection methods. Powered by the Threatseeker® Network, ACE uses more than 50 million real-time data collecting systems that include these technologies:

Real-time security classification PreciseID™ technology data identification Antispam Reputation services URL filtering Multiple antivirus solutions Websense email security is the only email solution that includes integrated global Web security intelligence and enterprise DLP.

 

One dashboard. You drive.

Our TRITON™ Console puts control at your fingertips. One easy-to-use dashboard gives you:

• Role-based control over data
• Easy expansion to additional security options
• Simplified administration across Web, data, and email for lowest TCO
• Maximum visibility and control through the world's best reporting

Apply DLP policies across Web and email channels from a single location.

 

Reports? No problem.

Our extensive report offering is easy to use and yields information-packed results that make it easy to explain to others what's going on with your email security. You'll get:

• Interactive, drill-down reports
• Automatic report scheduling and distribution
• Access and distribution control
• A huge range of predefined templates
• Capacity for custom reports

 

 

 

 

 

Key Features:

Hosted Email Security Capabilities

Antispam

Websense provides highly accurate spam blocking with very low false positives that is backed by a 99 percent spam detection service level agreement. A combination of technologies is used to identify spam including sender reputation, adaptive learning, URL analysis, heuristics, digital fingerprinting, and optical recognition of image spam. Most importantly, it is the only solution that integrates Websense market-leading Web security technology to protect against phishing and converged email and Web threats. Each email is assigned an aggregate score, which is compared to a customer-defined threshold to determine what action should be taken.

Antivirus

Inbound and outbound email is scanned for viruses, spyware, and other forms of malware using a multilayered approach with multiple commercial antivirus engines and the Websense ThreatSeeker Network to protect against both known and unknown threats. ThreatSeeker provides zero-hour protection by continuously examining email and Web sites to detect trends and patterns that identify emerging threats—closing the window of exposure between a new malware outbreak and availability of a detection signature. The service is backed by as 100 percent known virus detection SLA.

Content Filter

Integrated technology from Websense market-leading data security solutions makes it easy to prevent data loss, meet regulatory requirements, and enforce policies on acceptable email use. Pre-defined dictionaries covering 20 topics in 12 languages plus built-in PCI-DSS and data privacy templates help organizations quickly identify and stop email policy violations. Unique inspection requirements can easily be met with advanced regular expressions and flexible policies. Violations are identified through in-depth inspection of both the email message and the content within the attachment. Messages can also be quarantined based on attachment true file type and deferred for later delivery based on size.

Encryption

Websense encryption secures email communications without sacrificing the ability to inspect encrypted email for malware and content violations. Websense supports server-to-server encryption using industry standard transport layer security (TLS) and ad hoc park-and-pull encryption for communicating to individuals. Encryption policies can be set up to encrypt communications based on sender, recipient, outlook sensitivity settings, or a keyword in the subject. Encryption can be in used conjunction with content filtering to encrypt emails that contain specific content, such as sensitive or confidential information.

Websense security as a service (SaaS) for email also works hand in hand with Websense SaaS Web to provide integrated email and Web protection enabling organizations to consolidate management and reporting for both Web and email security.

Email Privacy

ISO 27001
Websense security as a service for email is independently audited and certified to the ISO 27001 standard to ensure the highest level of security, privacy, and confidentiality. ISO 27001 is an information security management system standard published in October 2005 by the International Organization for Standardization. This certification is widely accepted proof of the quality of an organization’s security program and the most stringent security standard in the industry—exceeding the SAS 70 requirements, which many competitors claim as their certification benchmark.

Datacenter Security
Of all the places your email visits, Websense datacenters are among the safest locations that it can be routed to. Websense has built stringent security and privacy safeguards into the datacenter delivery network itself. Clean emails are not retained by the service, and other emails are only visible to those who have administrative rights into your system—specifically your network administrators and anyone else to whom you have given access to your account. Websense datacenters adhere to stringent physical security safeguards as well, including:

• 24 x 7 x 365 staffing
• Physical intrusion detection systems
• Video surveillance
• Restricted access lists
• Photo and biometric verification

Service Level Agreement Summary

Websense provides industry-leading SLAs to ensure the service performs to the highest levels.

• Availability—99.999 percent
• Spam—99 percent or higher detection rate
• Viruses—100 percent detection of known viruses
• Processing Latency—60 seconds or less for non-spam email less than two megabytes
• Email logs and quarantine—Available five minutes or less after email receipt

All SLAs are subject to the terms and conditions outlined in the customer service agreement.

 

Integrated Threat Protection
Spam and virus protection	Highly accurate SLA-backed protection against spam, viruses, spyware, phishing, and converged email and Web threats.
Zero-hour threat detection	Protection from the ThreatSeeker Network identifies and stops emerging threats to close window of exposure.
Data loss prevention	Integrated technology from Websense market-leading data security solutions prevents data loss and helps meet regulatory requirements.
Content filtering	Pre-defined content dictionaries covering 20 topics in 12 languages makes it easy to quickly identify email policy violations.
Encryption	Protect sensitive and regulated data with secure email communications to business partners and individuals
Security-as-a-service delivery	Save time and money with no equipment to install or maintain, built-in resilience, predictable costs, and reduced administrative overhead.
Top-tier global data center infrastructure	Ten global datacenters with fully redundant power, cooling, and Internet connectivity provide high availability with a 99.999 percent uptime SLA.
Security certifications	Independent audit and certification of security practices to ISO27001 ensures the highest level of security, privacy and confidentiality
24x7 access and support	Access and manage the service through a Web-based portal available anytime from anywhere on the Internet, with 24 x 7 support for extra help when you need it.
Email spooling for disaster recovery	Built-in redundancy and email spooling ensures that email is never lost when a customer experiences a network or mail server outage.
Quarantine management	Powerful message search engine provides complete visibility and access to quarantined messages and logs.
End user self service	Scheduled and on-demand user access to view and release quarantined messages, and whitelist/blacklist senders reduces administrative overhead.
Directory service integration	Automatic synchronization of email addresses and groups with Active Directory and LDAP simplifies policy management.
Roles-based administration	Separate access controls for quarantine management, viewing reports, accessing audit trail, and other key functions allow for delegated administration.
Directory harvest prevention	Built-in protection stops spammers from capturing valid email addresses.
Reporting	Over 40 different reports types with summary and detailed drill-down forensics provide 360-degree visibility into threat types and volumes, messages processed, policy violations, and more.

Deployment Availability:

 

All three Websense® email products – Email Security Gateway Anywhere (ESGA), Hosted Email Security (hES), and Email Security (ES) – give you protection against:

• Traditional email threats such as spam, phishing, and viruses
• Blended threats that combine email, Web, and data
• Data loss through email

Websense products also offer: :

• Single console setup
• Easy upgrade to expand coverage
• Significant cost savings over multiple independent solutions

 

Refer to the chart below to see which of our three packages best fits your needs.
Product	Why it's unique	Who might choose this package
Email Security Gateway Anywhere	Websense exclusive: This is the only email security product anywhere that offers embedded, enterprise-class data loss prevention (DLP) that: Screens incoming email for blended threats that contain links to malicious websites, invasive script, or other Web threats Lets you set extremely granular policy controls to guard against outgoing malicious or accidental data loss Gives you enterprise-class accuracy without extra expense and complexity of multiple vendors, dashboards, or equipment Boosts performance up to three times when compared to other vendors by intercepting all spam and other unwanted email in the cloud, freeing up your servers and preserving bandwidth Also includes all Hosted Email Security features listed below	Companies who want the most comprehensive and lowest-cost DLP coverage available anywhere for email.
Hosted Email Security	Ensures consistent availability of email delivery, with workflow operating on enormous, reliable, and redundant in-the-cloud servers Runs automatic spooling of email in case of outages in your systems Provides these additional security features: 99% detection level for spam 100% detection level for known viruses Content filter for data loss prevention Server-to-server encryption	Companies looking for basic email security at reduced operational costs.
Email Security	Offers multipurpose protection against wide-ranging risks, including: Spam, viruses, and phishing Malicious Web links within email Employees who email confidential information New and ever-evolving attack strategies Offers extreme granularity in configuration, controls, and preferences – plus the option to run on dedicated hardware or in a virtualized environment. Available as software running on either Websense V-Series appliances or your own servers Includes optional add-ons for additional cost: Websense Image Analysis: Advanced algorithms analyze images embedded in or attached to emails in real-time for inappropriate content such as pornography Websense Advanced Email Encryption: Encrypts email from end-user to end-user based on policy, protecting confidential communications with business partners and customers Websense Email Archive: Gives employees unlimited mailbox size for archived Outlook or Notes email, plus accelerates e-discovery by letting you easily search and retrieve messages within seconds	Companies who want comprehensive web security without the headaches of on-premise deployment, maintenance, and upgrades. Deployment options include: Software on-premise, with the Websense V5000™ appliance OR Software on-premise, with Websense software installed on local servers

 

Documentation:

Download the Websense Hosted Email Security Datasheet (.PDF)

Download the What’s New in Hosted Email Security v5.1 Datasheet (.PDF)