General discussion

Locked

Email Security

By Bill Pu, MCSE ·
I am trying to convince our President of the need for an inhouse email system, Exchange 5.5. However, he is from the old school in the sense that he does not trust the security of our data if we were to open oursleves to external email. He basically wants us to be able to filter out any inbound email that does not contain any keywords in the subject field. I know that Network Associates' WebShield product has a content filtering process that will filter out email CONTAINING a keyword, but will not work in reverse. We need something that will keep out anything WITHOUT a keyword.

Does anyone have any suggestions or am I just SOL?

Thanks in advance.

Bill Pu

This conversation is currently closed to new comments.

9 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Email Security

by Mike O In reply to Email Security

I don't know about filters and such, but Lotus Notes, I've found, is fairly secure. It has certificates, signing, and encryption all built into the clients. Also, it's not susceptible to the various viruses that are known to propagate through Outlook/Exchange. I've got a Notes guru buddy, and every time I find a vulnerability on the web and point it out to him, he says "been fixed a long time ago."

Collapse -

Email Security

by Bill Pu, MCSE In reply to Email Security

Unfortunately, the previous IT Manager purchased Exchange 5.5 with all the licenses, so we are stuck with implementing this solution.

Collapse -

Email Security

by Mike O In reply to Email Security

I see, I thought you were looking to purchase Exchange.

I've never worked with Exchange, but in Lotus the email rules/filters are in the client side. I would look through Outlook and see what the rules options are, and then configure each user'sclient for the filtering. In Lotus there is a "subject" (or body, or whatever) and a "does not contain" option that you can use to automatically delete the files.

If Lotus has it in the client, I imagine Outlook would have it as well.

Collapse -

Email Security

by Bill Pu, MCSE In reply to Email Security

Thanks for your help. Unfortunately, even if you were to configure a filter to delete incoming email, it would still sit uin the Deleted folder until it was emptied. We are concerned with users that may bypass this by going into the Deleted folderand executing the attachment.

Collapse -

Email Security

by Chuck Rothman, GSEC In reply to Email Security

I'm confused about what he hopes to accomplish by this. Straight E-mail is not likely to compromise the security of the data. Anything that does that would have to be a program -- or a file attachment (and malicious e-mail always has something in the subject field, rendering this sort of filter useless). If you disallow file attachments, I can't see any way that e-mail could be a problem.

I don't believe Exchange has a filtering system, but most antivirus vendors can set up filtering of attachments for you.

My suggestion is to find out what he wants to accomplish and show him how you can do it.

Collapse -

Email Security

by Bill Pu, MCSE In reply to Email Security

Poster rated this answer

Collapse -

Email Security

by Shanghai Sam In reply to Email Security

Check out Mail Essentials. I believe this program can do what you are asking. It has the ability to flag emails with certain words in them and can also disallow emails as per the requirements you give.

Good Luck

Collapse -

Email Security

by Bill Pu, MCSE In reply to Email Security

Poster rated this answer

Collapse -

Email Security

by Bill Pu, MCSE In reply to Email Security

This question was closed by the author

Back to Security Forum
9 total posts (Page 1 of 1)  

Related Discussions

Related Forums