Email Security Upgrade

June 25th, 2020
Email Security Upgrade

img-blog-Email-Security-Upgrade

We have always taken Business Technology Security seriously for our clients and have included the fundamentals in our Managed Services Agreements since founding our company in 2001. Back then it was sufficient to install a Network Firewall, Anti-Virus and Email SPAM filtering to secure the average company. Over the years things have changed especially with Email security and Cutting Edge Network Technologies has continually evaluated and adjusted our security offerings to keep clients protected.

Today we feel the bar has been raised yet again and drastic changes are needed in the way we protect our clients email communications. Now more than ever email is being targeted via SPAM, Viruses, Phishing and other malicious intentions and businesses need help in protecting themselves from these threats. This comes from conversations with our clients, extensive experience in the field and national peer group advice.

Our Technology Tool Stack Team has determined that we need to up our game in regards to email security for our clients and we have made the decision to upgrade from our current Anti-SPAM solution to an advanced compliance based email security solution – “Barracuda Essentials for Compliance”. We are providing this upgrade at no additional cost to our Full Managed Services customers and will begin “behind the scenes” migrating starting July 1st. We expect these migrations to be seamless and have no visible impact for any of our clients or their employees.

Inbound Email Security:

Advanced Threat Protection

Barracuda's Advanced Threat Protection (ATP) combines behavioral, heuristic, and sandboxing technologies to protect against zero hour and targeted attacks. ATP automatically scans email attachments in real-time; suspicious attachments are detonated in a sandbox environment to observe behavior. In addition to blocking the attachment, the results are integrated into the Barracuda Real Time System providing protection for all other customers.

Learn More about Barracuda's Advanced Threat Protection

Anti-Phishing Protection

The Barracuda Essentials combats phishing attempts by combining anti-fraud intelligence, behavioral and heuristic detection, protection against sender spoofing (i.e., spammers spoofing valid email addresses), along with domain name validation to detect and block phishing attempts.

AI for Real-Time Spear Phishing and Cyber Fraud Defense

As a complement to Barracuda Essentials, Barracuda Sentinel is the leading comprehensive AI solution for real-time spear phishing and cyber fraud defense. Delivered as a cloud service, Barracuda Sentinel combines a powerful artificial intelligence engine, account takeover protection and domain fraud visibility using DMARC into a comprehensive solution that protects people, businesses, and brands from spear phishing, impersonation attempts, business email compromise (BEC), and cyber fraud. Learn more

Malware Protection

The Barracuda Essentials leverages the cloud for dynamic, real time threat analysis, attachment sandboxing and URL protection to prevent malware from affecting email users.

Link Protection

Anti-phishing also includes Link Protection. A popular method that attackers use to deliver malware relies on URLs that contain malicious code, which can be invisibly downloaded and can trigger a much larger attack. Link Protection automatically rewrites these URLs so that the Barracuda Essentials for Email Security can sandbox the request at click time to block malicious links.

Typosquatting Protection

More sophisticated attackers make clever modifications to URLs so they look genuine, but are not. The most common technique is omitting letters or using convincing “typos” that even users who check URLs before clicking often miss. Barracuda’s Link Protection includes typosquatting detection, which automatically identifies and redirects these URLs to our sandbox at click time to block malicious activity.

Spam Filtering

With a long-standing heritage in spam protection, Barracuda Networks remains the leader in identifying and blocking spam. A comprehensive set of security layers ensures that organizations remain productive in the face of evolving threats.

The Barracuda Essentials for Email Security leverages Barracuda Central to identify email from known spammers and determine whether domains embedded in email lead to known spam or malware domains. It leverages many of the same industry-leading techniques found in the Barracuda Spam Firewall that protect against attempts to embed text inside images with the intent of hiding content from traditional spam filters.

Block Email-Borne Viruses

As virus attacks become more sophisticated and complex, email infrastructure requires advanced virus protection. The potential for the destruction and release of information or the disruption of a network severely impacts productivity and can lead to financial loss.

The Barracuda Essentials for Email Security scans email and incoming files using three powerful layers of polymorphic virus scanning technologies. It also decompresses archives for complete protection. Powerful virus definitions are automatically updated to maintain the most up-to-date protection against email-borne viruses.

Denial of Service (DoS) Attack Prevention

Not every attack is focused on planting a virus, or getting users to send their credit card number or to click on a malicious link. Often, the objective of the attack is focused on disabling a network or mitigating its effectiveness. As a cloud-based service, the Barracuda Essentials for Email Security is positioned to stop spammers before they overload an email server.

Outbound Email Security:

Outbound Email Filtering

Outbound filtering prevents organizations from being put on spam block lists and prevents outbound attacks originating from inside the network. Employees can inadvertently cause internal systems to become a source for botnet spam. Using a subset of its defense layers, the Barracuda Essentials for Email Security’s outbound filtering stops outbound spam and viruses.

Secure Communication with Email Encryption

Your emails can travel through many different servers before they reach the intended mailbox. Barracuda Essentials secures your mail by encrypting it during transport to the Barracuda Message Center, encrypting it at rest for storage in the cloud, and providing secure retrieval by your recipients through HTTPS Web access. Data in motion is secured via Transport Layer Security (TLS), and data at rest is secured via AES 256-bit encryption.

If you are sending a sensitive email, you can manually mark it for encryption. However, you can also create a policy to automatically encrypt emails based on their sender, content and other criteria. Encryption policies ensure that your organization complies with regulations designed to protect customer data, such as HIPAA.

Data Leak Protection:
Protect Critical Data from Leaving Your Business

Outbound filtering keeps sensitive data from leaving your organization while simultaneously ensuring that legitimate emails are delivered. At the same time, outbound filtering also blocks outbound spam and viruses, preventing your employees or other infected clients from inadvertently sending malicious email, as well as keeping your mail server IP addresses and domains from being listed on spam block lists.

Employees can inadvertently allow their email to be used for botnet spam. The outbound filter stops outbound spam and the spread of viruses.

Administrators can also create and enforce content policies to prevent sensitive data such as credit card numbers, social security numbers, HIPAA data, customer lists and other private information from being sent by email. Policies can automatically encrypt, quarantine or even block certain outbound emails based on their content, sender or recipient.

Archiving, Compliance and eDiscovery:

Granular Retention Policies

Barracuda Essentials provides a cloud-based archive of all email communication to ensure that you meet demanding business and legal requirements. It follows the accepted “best practice” approach for compliance by archiving an original copy of every email into a separate immutable store for long term retention and preservation.

Compliance and e-discovery capabilities provided within Office 365 may be adequate for some organizations, but the “in-place” approach Microsoft takes for long-term email retention and preservation means these capabilities have inherent limitations. They can be complex and expensive to operate, and are unlikely to meet the needs of organizations with more demanding compliance and discovery requirements.

Barracuda Essentials for Office 365 includes a cloud-based, indexed archive separate from Office 365 that allows for granular retention policies, extensive search, auditing, permissions, legal hold and export of emails that may be required in e-discovery. Litigation holds preserve email from being tampered with until the litigation hold expires or is removed.

Powerful Search and e-discovery

The Barracuda Cloud Archiving Service offers easy-to-use search capabilities, ranging from the most basic search by a user for a misplaced email to advanced Boolean search strategies for an auditor during an e-discovery request.

Barracuda offers native and mobile apps for Android and iOS that simplify search to ensure messages are found easily even when email services are unavailable. Mobile users can search, download and respond to any email ever sent or received, even if deleted from the server. Because all email is indexed, search is often much faster than typical native mobile email applications and provides a much higher search success rate. Users can forward, reply or resend email to themselves.

Please let us know if you have any questions or concerns regarding this free upgrade as part of your Managed Security Services.


Leave a comment!

All fields marked with an asterisk* are required.

We just released another FREE eBook: 3 Types of Cyber Security Solutions Your Business Must Have!DOWNLOAD HERE
+