Kaspersky Hosted Email Security - More Information

Functionality

Protection from malware

All messages are filtered through several layers before reaching your network.

1. Pre-scan service. Detects known malicious programs for which antivirus updates have not yet been issued.
2. Filtration by format. Blocks certain types of attachments. This reduces the risk of infected objects penetrating the network.
3. Kaspersky® Anti-Virus. Updates to the antivirus databases are rolled out to Kaspersky® Hosted Security Services as soon as they are released. Special updates are issued when new malicious programs are detected. Pre-Scan and BitHunt ensure effective protection even before updates are released and detect up to 100% of all email-borne malicious programs.
4. BitHunt. Up to 95% of all malware can be packed in a variety of ways. This can prevent even known malicious programs from being detected. The AllUnpack module incorporated into Kaspersky® Hosted Email Security makes it possible to unpack/decrypt practically any packed/encrypted executable file.

Protection from spam

The anti-spam filter in Kaspersky® Hosted Email Security uses Kaspersky® Anti-Spam and Kaspersky® BitHunt, the proactive protection system. The filter combine all known formal spam detection methods with content filtration that uses heuristic analysis to detect key spam phrases and compare message blacklists and whitelists in the client’s typical traffic.

1. Lists. The module checks a sender’s IP address in the provider and public organisation blacklists (DNSBL – DNS-based Blackhole List). If the IP address has been added to the whitelist by an administrator, the message is accepted without being subject to additional filtration.
2. Formal message attributes. The module filters out spam using typical attributes such as a modified sender address or a missing IP address in the domain names system (DNS); an unusually large number of recipients; or concealed recipient addresses. Additionally, the size and format of the message is checked.
3. Message content. The module scans messages for the presence and position in the text of words and phrases which are typical for spam. The actual text of the message, as well as the text of any attached files, is analyzed.
4. Signatures (samples). The program uses a database of linguistic signatures which is updated around the clock. This makes it possible to recognize modified versions of spam messages, which are designed specifically to circumvent spam filters.
5. Detecting graphical spam. GSG-3 blocks spam containing images.
6. BitHunt. This technology incorporates a reputation filter, which gives a reliability rating to the IP address of the sender. There are several criteria used to estimate reliability – the amount of spam and malicious programs sent from a given IP address, whether or not the IP address is dynamic, etc. If the reputation of a host is particularly bad, mail from it will not be accepted.
7. Urgent Detection System. UDS technology makes it possible to receive information about the latest spam attacks immediately a spam run has been detected. This information is used to scan messages which have not yet been assigned a definite status (spam/non-spam).
8. Semantic analysis of message content. The filter automatically categorizes all messages, i.e., it assigns a category to incoming messages on the basis of a semantic analysis of the text.

Additional protection parameters

In addition to antivirus and antispam protection, Kaspersky Hosted Email Security can block files of a number of different formats. Normally, the type of attachment is defined based on its internal file structure, name and extension. This technology provides improved security and reduces the amount of employee time wasted.

The solution supports the following formats:

• attachments (EXE, SYS, DLL, etc.)
• Microsoft Word documents (DOC, DOT)
• Microsoft Excel tables (XLS, XLT)
• Microsoft PowerPoint presentations (PPT, PPS)
• RTF documents (RTF)
• ZIP (ZIP), RAR (RAR) and ARJ (ARJ) archives
• video files (AVI, MPG)
• music files (MP3, OGG).

Administration

The service offers configuration and reporting via a secure web portal. Authorized access to the interface is provided via an SSL channel. The following reports can be created:

• Mail received. Information about mail received by every client domain over a specific period of time and the volume of unwanted correspondence.
  
• Mail forwarded. Number of messages forwarded can be tabulated by domain and by user.
• Spam. Reports can be generated on the quantity, volume and main sources of spam.
  Malicious programs. Reports can be generated on the number and volume of scanned files, and the most common malicious programs over the reporting period.
  
• Top 10. The 10 most common malicious programs, sources of spam, most active addressees, etc. can be specified for any report generated.
  
• Summary report. This report provides a summary of all information on all client domains. Such reports include data on all the points listed above.
  
• Executive Report. A brief report can be generated which is suitable for distribution to the executive director or CEO*.

Please Note: We would like to remind you that Kaspersky Hosted Security is specifically designed for organisations.