IronPort C300 Email Security Appliance for Medium-Sized Enterprises and Satellite Offices

Overview

IronPort C300™ email security appliances provide advanced threat prevention, block spam and viruses, and enable corporate email policy enforcement. Today's email-borne threats consist of virus attacks, spam, false positives, denial-of-service (DoS) attacks, spyware, and phishing (fraud). The IronPort C300 email security appliance addresses the issues faced by corporations, both large and small, by incorporating preventive and reactive security measures that are easy to deploy and manage.

Built on the foundation of the IronPort AsyncOS™ operating system, the IronPort C300 email security appliance protects the email systems of medium-sized enterprises and satellite offices. Placed at the network perimeter, the IronPort C300 provides comprehensive security for email traffic —allowing administrators to have complete control over all email entering and leaving their networks. This unprecedented capability eliminates the loss of critical email by configuring different mail policies for customers and trusted partners.

Download IronPort C300 Email Security Appliance Datasheet

The IronPort C300 for medium-sized enterprises and satellite offices

Features

The IronPort C300 contains a powerful multi-layered approach to email security by providing advanced threat prevention, blocking spam and viruses, and enabling corporate email policy enforcement.

Spam Protection

IronPort® provides defense in depth against spam with a preventive layer of reputation filters, followed by reactive filters.

IronPort Reputation Filters™ provide an outer layer of defense using IronPort SenderBase® data to perform a real-time email traffic threat assessment and identify suspicious email senders.

IronPort Anti-Spam™ Filters utilize the industry's most innovative approach to threat detection, based on IronPort's unique Context Adaptive Scanning Engine™ (CASE). IronPort's CASE examines the complete context of a message, including: "What" content the message contains, "How" the message is constructed, "Who" is sending the message, and "Where" the call to action of the message takes you. By combining these elements, IronPort Anti-Spam stops the broadest range of threats with industry-leading accuracy.

The IronPort Spam Quarantine™ is a self- service end-user solution, with an easy to use Web or email-based interface. This feature provides end-users with their own safe holding area for spam messages and integrates seamlessly with existing directory and mail systems.

Virus Protection

IronPort Virus Outbreak Filters™ identify and stop viruses hours before traditional virus signatures are available.

Sophos Anti-Virus technology provides a fully integrated second layer of virus protection with the highest-performance virus scanning technology in the industry.

Policy Enforcement

Next Generation Compliance Filters enable customers to address HIPAA, GLB, SOX and other regulatory compliance requirements. IronPort's easily deployed solution defends organizations against outbound content compliance violations.

Compliance Quarantine provides delegated access to emails that have been flagged by the content scanning engine.

IronPort Email Encryption gives administrators the ability to secure confidential data and comply with partner, customer or regulatory requirements. IronPort PXE™ technology enables simple, secure communication from the gateway to any recipient inbox — while TLS, PGP and S/MIME technology provide security between partner email gateways.

Email Authentication

DomainKeys Signing digitally signs outgoing messages to establish and protect your identity with email receivers on the the Internet.

IronPort Bounce Verification™ tags messages with a digital watermark to provide filtering of bounce attacks at the network edge.

Directory Harvest Attack Prevention tracks spammers who send to invalid recipients and blocks attempts to steal email directory information.

Enterprise Management Tools

Email Security Manager™ is a powerful, graphical management tool that yields fingertip control to manage all email security, including preventive and reactive anti-spam and anti-virus filters, email encryption, and content filtering.

Intuitive GUI enables unprecedented visibility and control. The integrated Web-based user interface enables real-time and historical reporting along with the ability to configure policies, search, and selectively release quarantined messages.

Centralized Management eliminates a single point of failure with superior "peer to peer" architecture, and makes managing multibox installations of IronPort email security appliances simple. The ability to manage configuration at multiple levels allows organizations to manage globally while complying with local policies.

Mail Flow Central™ allows you to find the status of any message that has traversed your infrastructure. With this centralized reporting tool, administrators and support staff can quickly answer end-user inquiries such as, "What happened to my email?".

Email Security Monitor™ delivers real-time threat monitoring and reporting. This technology tracks every system connecting to your IronPort appliance to identify Internet threats (such as spam, viruses and denial-of-service attacks), monitor internal user trends and highlight compliance violations.

Benefits

Unprecedented Insight IronPort technology demonstrates Return On Investment (ROI) through very sophisticated management, monitoring and reporting tools. Each appliance has a unique reporting system, providing both a real-time and historical look at mail flowing through your email infrastructure. These tools provide system administrators with the necessary information to make critical security decisions.

Reduced Administrative Burden The IronPort C300 uses the industry's most advanced technology to deal with threats and anomalies in a fully automated manner. This allows highly skilled IT staff to focus on other problems and leave the email issues to IronPort.

Lower TCO The IronPort MTA platform enables massive reduction in Total Cost of Ownership (TCO) by consolidating email operations and security into a single platform. Self-managing security services provide the lowest-maintenance solution in the industry with minimal configuration requirements.

Increased End-User Productivity By securing the network at the gateway level, the IronPort C300 acts as a "shock absorber," in front of the groupware server(s). This ensures that end-users are not bogged down by spam, viruses, and other threats. Unlike other solutions, IronPort security services do not rely on end-users to "train" the system. Instead, high accuracy is maintained through continuous and automatic rule updates.

Improved Network Efficiency The IronPort Reputation Filtering system was the first in the industry and remains the most sophisticated. In its default settings, the system will block over 80 percent of incoming mail at the connection level. By eliminating these unwanted messages, companies save bandwidth (the message is never accepted) and system resources. CPU-intensive spam and virus filters are only used when needed, and rate limiting is a very effective defense against "hit and run" spam attacks or denial-of-service attacks.

Chassis / Processor
Form Factor	19" Rack-Mountable, 2U rack height
Dimensions	3.5" (h) x 19" (w) x 29" (d)
CPU	One Intel Xeon processor
Power Supplies	Hot-plug redundant, 700 watts, 100/240 volts
Storage
RAID	RAID 1 configuration; Dual channel hardware with battery-backed cache
Drives	Two hot-swappable, 146GB Ultra 3 SCSI
Capacity	35GB effective queue capacity, 45GB non-mail (e.g. log) capacity
Connectivity
Ethernet	One Intel 10/100 BaseT and two Broadcom Gigabit BaseT Ethernet ports
Serial	One RS-232 (DB-9) Serial Port
Mail Operations
Mail Protocols	SMTP, ESMTP, Secure SMTP over TLS
DNS	Internal resolver/cache; Can resolve using local DNS or Internet root servers
LDAP	Integrates with Active Directory, Notes, Domino and OpenLDAP servers
Interfaces / Configuration
Web Interface	Accessible by HTTP or HTTPS
Command Line Interface	Accessible via SSH or Telnet; Configuration Wizard or command-based
File Transfer	SCP or FTP
Programmatic Monitoring	XML over HTTP(S)
Configuration Files	XML-based configuration files archived or transferred to cluster
Cryptographic Algorithms
TLS (Encrypted SMTP)	56-bit DES, 168-bit 3DES, 128-bit RC4, 128-bit AES and 256-bit-AES
DomainKeys Signing	512, 768, 1024, 1536 and 2048-bit RSA
SSH for System Management	768 and 1024-bit RSA
Programmatic Monitoring	RC4-SHA and RC4-MD5

Product Line

Sizing Up Your Email Security Solution

IronPort Systems provides industry leading email security products for organizations ranging from small businesses to the Global 2000.

IronPort X1050	Built to meet the needs of the most demanding networks in the world.
IronPort C650	Designed for large enterprises and service providers.
IronPort C300	Suggested for medium to large enterprises.
IronPort C300D	Recommended for any company with unique outbound email communication needs.
IronPort C100	An affordable, and easy to use, all-in-one appliance for small to medium enterprises.

Summary

Industrial Strength Email Security

The IronPort email security appliance is the most sophisticated system available today. In production at eight of the ten largest ISPs and more than 20 percent of the world's largest enterprises, this system has a demonstrated record of unparalleled security and reliability.

This same code base that powers IronPort's most sophisticated customers is also available in the IronPort C300 email security appliance, to help protect the email systems of medium-sized enterprises and satellite offices. By reducing the downtime associated with spam, viruses and a wide variety of other threats, the IronPort C300 enables the administration of corporate mail systems, reduces the burden on technical staff, and quickly pays for itself. The advanced technology within the IronPort email security appliance leads to the simplicity of management, as well as the highest levels of security in the world. IronPort's email security appliances support and protect your email systems—not only from today's threats, but from those certain to evolve in the future.

Contact Us

Try Before You Buy

Through a global salesforce and reseller network, IronPort offers a free "Try Before You Buy" program for the IronPort C300. To learn if you qualify call 650-989-6530 or visit us on the Web at www.ironport.com/try.