Upload File

cisco ironport e-mail security appliance · email security architecture ib ds it otb dc t linbound...

  • Home
  • Documents
  • Cisco IronPort E-mail Security Appliance · Email Security Architecture Ib dS it Otb dC t lInbound Security, Outbound Control INBOUND Spam Virus SECURITY ment Defense Defense CISCO
9
Cisco IronPort E-mail Security Appliance Deep dive - Hrvoje Dogan © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential Presentation_ID 1

Upload: others

Post on 06-Jun-2020

11 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Cisco IronPort E-mail Security Appliance · Email Security Architecture Ib dS it Otb dC t lInbound Security, Outbound Control INBOUND Spam Virus SECURITY ment Defense Defense CISCO

Cisco IronPort E-mail Security Appliance

Deep dive - Hrvoje Dogan

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 1

Page 2: Cisco IronPort E-mail Security Appliance · Email Security Architecture Ib dS it Otb dC t lInbound Security, Outbound Control INBOUND Spam Virus SECURITY ment Defense Defense CISCO

Cisco IronPort Consolidates theNetwork PerimeterFor Security, Reliability and Lower Maintenance

After IronPort

Internet

Before IronPort

Internet

FirewallFirewall

Encryption PlatformMTA

DLP Scanner

IronPort Email Security Appliance

Anti-Spam

Anti-Virus

Policy Enforcement

DLP Policy Manager

Groupware

Mail Routing

Groupware

2

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID

Users Users

Page 3: Cisco IronPort E-mail Security Appliance · Email Security Architecture Ib dS it Otb dC t lInbound Security, Outbound Control INBOUND Spam Virus SECURITY ment Defense Defense CISCO

Email Security ArchitectureI b d S it O tb d C t lInbound Security, Outbound Control

Spam VirusINBOUND SECURITY

men

t

Defense Defense

CISCO IRONPORT ASYNCOS™

SECURITY

Man

ageCISCO IRONPORT ASYNCOS

EMAIL PLATFORM

SData Loss Prevention

Secure MessagingOUTBOUND

CONTROL

3

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID

Page 4: Cisco IronPort E-mail Security Appliance · Email Security Architecture Ib dS it Otb dC t lInbound Security, Outbound Control INBOUND Spam Virus SECURITY ment Defense Defense CISCO

Processing the Email (Work Queue)Processing the Email (Work Queue)

ANTI-VIRUS CONTENTFILTERS

VIRUSOUTBREAK

FILTERS

ANTI-SPAMREPUTATION

FILTERSMESSAGEFILTERS

ASYNCOS EMAIL PLATFORM

4

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID

4

Page 5: Cisco IronPort E-mail Security Appliance · Email Security Architecture Ib dS it Otb dC t lInbound Security, Outbound Control INBOUND Spam Virus SECURITY ment Defense Defense CISCO

Relationship Between Listeners, IP Interfaces, and Ethernet Interfaces

SMTP clients connect to the listenerto send mail

A listener is an SMTP server awaiting connections from SMTP clients, typically on TCP port 25, yp y p

IP Interface IP address

Listener Port

An IP interface is the

I P t

IP Interface IP addressbinding of an IP address to a Physical Interface, VLAN, or Aggregated

Link PairPhysical Ethernet Interface

Physical InterfaceVLAN VLAN

IronPort Appliance

Physical Ethernet InterfaceData 1 Data 2

5

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID5

IronPort supports multiple interfaces and multiple listeners

Page 6: Cisco IronPort E-mail Security Appliance · Email Security Architecture Ib dS it Otb dC t lInbound Security, Outbound Control INBOUND Spam Virus SECURITY ment Defense Defense CISCO

Expanded Email Pipeline Host Access Table

(HAT)

Default Domain

LDAP Recipient Acceptance(Work Queue time)

Masquerading orLDAP Masquerading

Received: Header

Virtual Gateways

Delivery Limits

Domain Map

Recipient Access Table (RAT)

Alias Tables

LDAP Routing

Message Filters

Received: Header

Domain-based Limits

Domain-based RoutingAlias Tables

LDAP Recipient Acceptance(SMTP-time)

Anti-Spam

Anti-Virus

Content Filters

Per-P

olicy Sca

Global Unsubscribe

Bounce Profiles

DKIM Signing

DKIM Verification

SMTP Server

Process MailWork Queue

Content Filters

Virus Outbreak Filters

anning

Work Queue SMTP client

Bounce Profiles

SPF/SIDF Verification

IronPort C Series

Exchange Server

InternetMTAProcess

MailSMTP

ReceiveSMTP

Delivery

6

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID

IronPort C-SeriesAccept Mail Deliver Mail

Page 7: Cisco IronPort E-mail Security Appliance · Email Security Architecture Ib dS it Otb dC t lInbound Security, Outbound Control INBOUND Spam Virus SECURITY ment Defense Defense CISCO

Processing the Email (Work Queue)Processing the Email (Work Queue)

ANTI-VIRUS CONTENTFILTERS

VIRUSOUTBREAK

FILTERS

ANTI-SPAMREPUTATION

FILTERSMESSAGEFILTERS

ASYNCOS EMAIL PLATFORM

7

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID

7

Page 8: Cisco IronPort E-mail Security Appliance · Email Security Architecture Ib dS it Otb dC t lInbound Security, Outbound Control INBOUND Spam Virus SECURITY ment Defense Defense CISCO

Registrujte se za Cisco Networkers 25 28 j 2010 B l25-28. januar 2010. Barselona28-31. mart 2010. Bahrein

8

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID

Page 9: Cisco IronPort E-mail Security Appliance · Email Security Architecture Ib dS it Otb dC t lInbound Security, Outbound Control INBOUND Spam Virus SECURITY ment Defense Defense CISCO

9

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID


Managing Cisco NFVI Security...Managing Cisco NFVI Security ThefollowingtopicsdescribeCiscoNFVInetworkandapplicationsecurityandbestpractices. • VerifyingManagementNodeNetworkPermissions,

Cisco Cloud Mailbox Defense...Cisco Cloud Mailbox Defense moves security closer to the mailbox than ever before to prevent phishing, spoofing, ransomware, business email compromises

Cisco Email Security: Layered Protection from Blended Threats · 2016-11-06 · Threat-focused Advanced Threat Defense Cisco Email Security is powered by Cisco Talos Security Intelligence

What's New for Cisco Defense Orchestrator

Cisco Threat Defense (Cisco Stealthwatch)

EMBRAER DEFENSE & SECURITY

Cisco TrustSec Security (CTS) Security Group Tagging (SGT)Cisco Expo © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Public 1 Cisco Expo 2011 Cisco TrustSec Security

Security Overview - Cisco - Global Home Page Cisco Unified Communications Manager Security Guide OL-24964-01 Chapter 1 Security Overview Security Icons Security Icons Cisco Unified

Cisco M190 Content Security Management Appliance ...€¦ · Thank you for choosing the Cisco M190 Content Security Management Appliance (Cisco M190). The Cisco M190 Content Security

Cisco Defense Orchestrator v1 - Instant Demo · Cisco® Defense Orchestrator (CDO) is a cloud-based security policy management product that helps network operations establish and

Cisco Security Everywhere · Cisco Security Investment & Innovation (2013-2015) Sourcefire Acquisition closed Security for ACI RSAC: AMP Everywhere OpenAppID Managed Threat Defense

Cisco Cloud Mailbox Defense - Tech Data

Defense Security Service Cybersecurity Operations …info.publicintelligence.net/DSS-CyberCI.pdf · Defense Security Service Defense Security Service Cybersecurity Operations Division

Defense security embraer_day_2011

Defense Security Service Industrial Security Field ...€¦ · Defense Security Service . Industrial Security Field Operations National Industrial Security Program (NISP) Authorization

A Unified Threat Defense: The Need for Security Convergence · A Unified Threat Defense: The Need for Security Convergence ... The Cisco ASA 5500 Series ... WebVPN, Firewall,

Cisco Security Manager Data Sheet - Zones, Incmedia.zones.com/images/pdf/cisco-security-manager-ds.pdf · Cisco Security Manager generates ... IPS Configuration ... Cisco ASA Advanced

TACCCIO: Cisco Security Strategies · Cisco Confidential 1 TACCCIO: Cisco Security Strategies Cesar Chavez, Cisco Security Consultant ... • Cisco ISE uses SNMP, NetFlow, DNS, RADIUS,

Threat Defense - Cisco · DLP Core Products Network Security Endpoint Security Content Security Application Security System Management Policy—Reputation—Identity Cisco Self-Defending

Borderless Networks Security Visions - Cisco · Complete Web Security Malware, Acceptable Use, Access Control, and Data Security Cisco IronPort Web Security Appliance 1 Cisco AnyConnect

Cisco IOS Threat Defense Features

Cisco Security Control Framework (SCF) Model · Cisco Security Control Framework (SCF) Model OL-19432-01 Cisco Security Control Framework Cisco Security Control Framework The Cisco

Cisco Ransomware Defense Validated Design Guide

Cisco IronPort Security Appliances - Information Store · Presentation_ID © 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential Cisco IronPort Security Appliances Cisco

Unified Threat Management NGFW - Cisco · Firepower Threat Defense New unified software software, application firewalling and threat ... Cisco® 2016 Annual Security Report *Median

Cisco Firepower Threat Defense バージョン 6.2 ......Cisco Firepower Threat Defense バージョン 6.2 コンフィギュレー ションガイド（ Firepower Device Manager

Implementing Cisco Network Security · Implementing Cisco Network Security Cisco 210-260 Dumps Available Here at:

Cisco Enterprise Security · Januar 2017 Threat Defense mit Hilfe des Netzwerks und Cisco StealthWatch Cisco Enterprise Security Thomas Spiegel Consulting Systems Engineer

Cisco Firepower Threat Defense Virtual クイックス …...1 Cisco Systems, Inc. Cisco Firepower Threat Defense Virtual クイックスタートガイド（Microsoft Azure クラウド向け）

Defense Security Cooperation Agency NEWS RELEASE Military... · Defense Security Cooperation Agency NEWS ... Defense Security Cooperation Agency NEWS RELEASE . ... warheads in the

Cisco Support Community Expert Series Webcast · PDF file08.07.2015 · Kureli Sankar, CCIE Security July 8, 2015 FirePOWER Threat Defense for Integrated Services Routers ( ISR ) Cisco

Teledyne Defense & Security

Cisco Defense Orchestrator Customer Testimonials · Customer Testimonials isc ulic Customer Perspectives on Cisco Defense Orchestrator Effective security management made simple Staying

Defense Security Service - dss.mil · Defense Security Service Industrial Security Field Operations National Industrial Security Program Authorization Office Defense Security Service

Cisco security