v8.0

TRITON AP-EMAIL

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 2

ACE IN DEPTH

Anti-Malware

Reputation

Analysis

Behavioral

Sandboxing

Anti-Spam/

Phishing

Real-time Data

Classification

Real-time

Content

Classification

Real-time

Security

Classification

URL

Classification

Integrated set of defense

assessment capabilities in 8 key

areas.

• 10,000 analytics available to support

deep inspections.

• Predictive security engine see

several moves ahead.

• Inline operation not only monitors,

but blocks threats.

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 3

*Email DLP Module included in Triton AP-Email

Deployment Strategies

DEPLOYMENT

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 5

Standard Network Deployment*10k appliance – AP-EMAIL appliance or AP-EMAIL Virtual

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 6

DNS Configuration For On-premises Deployment

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 7

DNS Configuration For Email Hybrid Module

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 8

Clustering With Load Balancer

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 9

Clustering With MX Record

How Does TRITON AP-EMAIL Process Messages

MESSAGE PROCESSING

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 11

Message Processing

• Message Processing Flow

• Message Filtering Framework

• Five Message Queues

• Pre-Filtering

• RBL & WRS

• DKIM Verification

• True Source IP Detection

• Content Filtering

• URL Sandboxing

• File Sandboxing

• Deliver Messages

• Traffic Shaping

• Email Routing

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 12

Message Processing Flow

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 13

Content Filtering: Overview

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 14

URL Sandbox: Real-time Analysis At Point-of-Click

http://www.callouts.com/download/happy-holidays-icons-stamps/

http://webdefence.global.blackspider.com/urlwrap/?q=AXicHcxBCsIwEEDRceXCa7htUqqCuBJB0GNMk0AKk0yaiQ05pnsPY3X7-

PzNFt47gM8eIFM7DKOSvKiAExmOJTMpwwHm2-n-WJ5D35-P_QCrN-Ou1Y3iorh_4ktJF61rrcogEb-K_FxbrpEYrfaYUus802SxSTetf-

mkYEii4QufZC5c&Z

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 15

URL Sandbox: What Happens For Embedded URLs

Email sent containing

embedded URL

ACE Intelligence

Bad URL blocked at gateway

Proactive ACE Intelligence

Emails with suspicious links

are flagged for URL sandboxing

ACE Intelligence Good

URL pass at gateway

URL Sandboxing

Analyze the flagged URL at

Point-of-Click

1

2

3

4

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 16

File Sandbox *

TRITON AP-EMAIL adds a flag:

need ThreatScope scan

attachment

…

Antivirus

ThreatScope

TRITON AP-EMAIL

*Optional Add-On

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 17 17

Built-In Enterprise Class DLP

Module DLP

� Built-in enterprise-class email DLP with unique data fingerprinting, natural language processing,

drip DLP, reporting forensics and over 1,700 built-in policy templates for high accuracy

� DLP for Mobile Devices via ActiveSync detects and blocks confidential emails and attachments

from being accessed on mobile devices

� No complex 3rd party product integration

� Ease DLP administration across email, Web, mobile, and endpoint channels with single

interface—create one policy and use multiple times

� Reduce the number of false positive incidents and the associated investigation involved Value

Defensibility

consecutive years in Leaders Quadrant for Gartner Content-Aware

Data Loss Prevention—the same technology of Email DLP5

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 18 18

Built-In Enterprise Class DLP In Action

DLP-Lite: Correctly

Identify Incident

Websense: Correctly

Identify Non-Incident�

DLP-Lite: Incorrectly

Identify Incident

Websense: Correctly

Identify Non-Incident

through NLP & SSN

validation�

X

�

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 19

DLP Integration

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 20 20

Module Image Analysis*

� Challenge

– Inappropriate images (e.g. porn) create legal liability and risk

� Solution

– Advanced algorithms analyze images embedded or attached

in emails in real-time

� Benefit– Provide comfortable, safe workplace for employees

– Limit legal liability associated with inappropriate images via

email

*Optional Add-On

Configurations

LOG AND REPORTING

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 22

Logs & Reports

• Log Types

• Message

• Connection

• Audit

• System

• Console

• Hybrid Service

• Primary Reports

• Today dashboard

• History dashboard (last 30 days)

• Presentation report

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 23

Message Log

Records information about emails

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 24

Connection Log

Records information about connections

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 25

Audit Log

Provides audit trail of policy changes and settings

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 26

System Log

Records current state of TRITON AP-EMAIL

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 27

Console Log

Records administrator activities

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 28

Dashboard

Displays various reports from TRITON AP-EMAIL

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 29

Today Report

Status > Today > Customize

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 30

History Report

Status > History: Last 30 days

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 31

Presentation Reports

Status > Presentation Reports

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 32

Real-Time Monitor

Status > Real-Time Monitor Pause and Start button

Select log typeKeyword filter

Select appliance

INDUSTRY RECOGNITION

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 34

Forrester Wave™: Email Content Security

34

“Websense scored the

highest in email filtering

capabilities and overall

Current Offering

evaluation criteria.”

© 2015 Websense, Inc. © 2015 Websense, Inc. Page 35

EMA Hosted Message Security Services: Value Leader & Best Hybrid Strategy

35