High-end mail security is being made available for everyone. Halon® SPG-150/300/400/500, VSP and HSP are affordable yet unparalleled spam prevention and mail security appliances and services that stand out in precision, performance, flexibility and style.
Stops spam, not mail
End-user productivity is increased as no “training” or looking for genuine messages in a spam folder is necessary. We won't say a mail is spam just because someone wrote “v*agra”. Instead, we analyze patterns in the spammers' behavior; comparing signatures against ongoing spam outbreaks.
Perimeter botnet protection
GlobalView™ is a trusted, real-time, cooperative zombie/botnet prevention network, processing billions of e-mail every day. GlobalView™ saves resources by blocking more than 98% threats at IP level. The magic happens through ippolicyd: an asynchronous, lightweight, scriptable, process.
We prohibits e-mail with executable code that is distributed in large quantities, thus detecting new viruses for which signature-based engines has not yet definitions. For a complete protection, this is assisted by Kaspersky's award-winning proactive malware engine, and a third engine with a very large signature database.
In addition to hardware appliances (SPG), the product is offered as a hosted service (HSP) and virtual machine download (VSP) optimized for VMware and XenServer. Getting a scalable, redundant and secure mail service has never been easier. With an existing virtual environment, the investment is minimal.
- Clustering: Full master-master scheme clustering using a shared configuration with private keys and e-mail index replication increases availability. Administration is simplified by the interface which fully supports central management.
- Zero maintenance: Deploy and forget. The real-time outbreak nature of the product makes “training” obsolete, as all signatures, reputation data and malware definitions are automatically synchronized and updated.
- Scripting: By learning from scripts compiled from the built-in blocks and the script documentation, advanced features such as bounce-tag verification, conditional routing, DSN spam prevention, SMTP behavior, attachment handling etc can be implemented. Feel the power of being able to control the system using the language in which it is written.
- DKIM, DNSSEC and IPv6: Jump-start deployment of future technologies using the first mail gateway to fully support signing and validation with a secure domain resolver.
- Outgoing mode: Stay out of blacklists, by not distributing spam or viruses. The appliances feature inbound and outgoing mode simultaneously, and can be made fully transparent by relaying authentication requests to the back-end server. Corporate security policy enforcement, rate controls, encryption and signatures can be applied, for a complete experience.
- Virtualization: By offering both hardware appliance (SPG) and virtual machine (VSP) editions of the spam prevention series, administrators who have VMware or XenServer environment can easily evaluate and implement the product.
- Transparency: The processing takes place during the receiving of a mail. For example, inline back-end recipient verification avoids creating backscatter, and such information is heavily cached. Each of the SMTP commands, which maps to the processes' flows, can be either accepted (250), rejected (550) or deferred (421). In that way, senders are always made aware of a message not being delivered, in conformance with European government regulations.
- Quarantine: In addition to rejecting, many other actions are available and can be combined; such as an easy-to-use quarantine (supporting branding, seamless Exchange and GroupWise integration, clustering, etc), direct delivery (bypassing the outgoing queue), deferring, wrapping, duplication, etc.
- H/OS: The time-proven security-hardened operating system from Halon Security is found in security gateways, firewalls and mail gateways all around the world. Built upon the proprietary HSL scripting language running on a bare-bone FreeBSD kernel are the asynchronous services that enables H/OS 2 to handle immense amounts of connections.