Norman Virus Control for Marshal8e6

The Business Issue
Email and the Internet are vital business tools,
allowing your organization to communicate
and access information efficiently. However,
they also present vulnerable entry points
for viruses and malicious code into your
organization, diminishing the benefits that
email and the Internet were intended to
provide.
The 2006 CSI/FBI Computer Crime and
Security Survey reported that 65% of the
615 companies surveyed suffered significant
financial losses as a result of virus infection
during the year. The average reported cost of
these virus infections was US$69,125 per
company. Other industry experts have
estimated that as many as 80% of the
world’s computers are infected with some
form of malicious code, such as spyware.
Managing virus security risk in a corporate
environment can be very difficult. Users bring
all manner of external devices into
the office to connect to their computers.
They download unknown files and
applications from the Internet. They connect
their laptops to unsecured networks outside
the office. They open email attachments sent
to them by complete strangers. A layered
approach to anti-virus security incorporating
user education, active desktop anti-virus and
“always on” gateway virus monitoring is fast
becoming best practice.
The Solution
With Norman Virus Control, you can apply
anti-virus from one of the world’s leading
antivirus providers to email and Internet
activity before viruses reach the trusted,
internal network.
MailMarshal SMTP integrates Norman
scanning at the email content inspection
level. As messages are filtered for spam and
other non-business content, MailMarshal
employs Norman to scan each message
for viruses and malicious code. Scanning is
essentially instant thanks to MailMarshal’s
multi-threaded design and tight product
integration. Infected emails are identified and
quarantined. Notification messages can be
automatically sent to IT staff, and detailed
reports can be generated -- identifying how
many and what viruses MailMarshal has
blocked over any given period.
Norman also works with MailMarshal
Exchange, providing real-time anti-virus
protection on inter-office Exchange email.
WebMarshal integrates Norman at the Web
proxy level. Any files requested by users
are virus scanned by Norman before they
are passed to the user’s browser. Users are
informed in realtime of suspected
virusinfected
files and any offending files are automatically
blocked. Reports are available detailing how
many and what viruses WebMarshal has
blocked and what the offending URLs were.
Norman Sandbox Technology
Norman Virus Control now features Norman’s
innovative “SandBox” technology.
Conventional anti-virus solutions rely on
signature files that are created when a new
virus is discovered in the wild. This requires
that the anti-virus solution be regularly
updated
to be effective against the latest virus threats.
If it is not, it will not recognize a new virus.
The Norman SandBox technology is
designed
to identify new viruses that have not been
seen before. When a file is passed to
Norman Virus Control for checking by
MailMarshal or WebMarshal, it is first tested
using the virus signature file to see if it is
a known virus. If it’s not found in the
known virus list, it is passed on to the
SandBox where the file is let loose to
reveal its intentions. The SandBox
is a simulated environment controlled
by theNorman virus scanner; so, if it is
a virus, it cannot actually do any harm.
The SandBox assesses the behavior
of the file as it executes. If the file
behaves suspiciously or exhibits virus-like
qualities, it is classified as harmful.
If the file is harmless, it is delivered to
the application that requested the check.
If it is harmful, it is placed in quarantine
thus preventing the network from being
infected. The Norman SandBox feature
is not only effective against viruses but
also spyware and other malicious content.
Technical Features and
Benefits of Norman
Virus control
• Detects and blocks viruses at the
Internet gateway before reaching your
internal computer network.
• Protects users from opening
virus-infected emails, by blocking the
emails before they reach individual
mailboxes.
• Prevents users from accidentally
accessing virus infected Web sites or
files by blocking downloads in realtime.
• Provides high-speed virus scanning via
multi-threaded message unpacking
design.
• Features Norman’s innovative new
SandBox technology to identify potentially
harmful files based on behavior. Provides
greater virus detection, particularly
against new viruses never seen before.
• Controls viruses in a total policy-based
framework. You can choose what happens
when viruses are detected. They can
be quarantined for investigation or
automatically deleted. You can also send
notification messages to the administrator
or email sender, informing them of the
detected virus. Essentially any
policyrelated measures that you wish to
take regarding viruses are possible with
MailMarshal and WebMarshal.
(Options for email and Web scanning differ.)
• Creates detailed virus incident reports that
clearly demonstrate Return on Investment
for your staff and executive management.
You know when and where a virus was
detected, how many viruses have been
blocked, and what types of viruses you are
blocking.
• Shows real-time monitoring of viruses
quarantined in the MailMarshal Today
page.
• Provides 24x7x365, always-on virus
protection. Users cannot turn off virus
protection.
• Scans both incoming and outgoing email.
Scans both downloaded and uploaded files
to and from the Web.