Hi Alan:
Comment all you like. J Guess it comes down to the level of paranoia Ive become accustomed to over the years while boring horizontal holes in the ocean, and the last five years in Afghanistan keeping systems up in the face of cyber-attacks and an user base who carried guns and high explosives. John M. From: Alan Davies [mailto:adav...@cls-services.com] Sent: Monday, July 02, 2012 10:03 AM To: MS-Exchange Admin Issues Subject: RE: Cloud-Based Email Filtering Lol .. no comment! ;) Yes, youre quite right about it being a chokepoint. However its a well defended and hugely redundant implementation of a service that should easily surpass any controls, operational or security, that the vast majority of businesses could put in place. Its a massively high-throughput system copying mail for later perusal, controls aside, would be rather impractical. Your ISP is a far higher risk and more likely location for such snooping. At the end of the day, a decent data classification and handling policy is the correct solution there. Appropriate use of TLS and/or S/MIME will remove the confidentiality/integrity concerns. DoS comes down again to the terms of service and again is more likely to be realised through your ISPs capabilities. Know your vendors and independently audit them where appropriate. a From: John Matteson [mailto:john.matte...@gmail.com] Sent: 02 July 2012 12:41 To: MS-Exchange Admin Issues Subject: RE: Cloud-Based Email Filtering Guess its the sailor in me.. shoving all your mail through a service is a chokepoint. One that could be exploited to copy mail for later perusing or cut, providing a denial of your service. Just two of my concerns. John M. From: Alan Davies [mailto:adav...@cls-services.com] Sent: Monday, July 02, 2012 5:13 AM To: MS-Exchange Admin Issues Subject: RE: Cloud-Based Email Filtering Ill second that about 10 years experience with them across multiple roles. No issues at all. If you think this exposes you to additional operational risk or security risk, you probably overestimate greatly your own operational or security capabilities! ;o) That said, the portal could sometimes be easier to use and Symantec taking over fills me with dread for the future development of the service .. Honestly, cloud services for email and web traffic are an absolute no-brainer for me these days. Its such a great fit and great price that youd have to be trying *really* hard to do better, let alone cheaper, internally Ive never come across a company that does so. The additional benefits of removing Internet peering touchpoints from your network shouldnt be underestimated either from a security perspective. If you do both of these things and also enforce device control on authorised media (preferably along with a policy for offline scanning prior to internal use once they touch a non-company machine), then malware is going to have a seriously hard time getting onto your systems (not that I wouldnt recommend application whitelisting, removal of admin, etc. and all other sensible host measures). a From: Rick Berry [mailto:rbe...@elevativenetworks.com] Sent: 01 July 2012 16:29 To: MS-Exchange Admin Issues Subject: RE: Cloud-Based Email Filtering We use Symantec cloud, ex-Brightmail/ex-MessageLabs. Basically its MessageLabs, and has been rock solid for us. From: Roger Wright [mailto:rhw...@gmail.com] Sent: Friday, June 29, 2012 4:14 PM To: MS-Exchange Admin Issues Subject: Cloud-Based Email Filtering I've used Postini elsewhere with excellent results, and at $12/user/year it's very cost-effictive. Any other recommendations for external spam and malware filtering? Roger Wright ___ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist **************************************************************************** ******** WARNING: The information in this email and any attachments is confidential and may be legally privileged. If you are not the named addressee, you must not use, copy or disclose this email (including any attachments) or the information in it save to the named addressee nor take any action in reliance on it. If you receive this email or any attachments in error, please notify the sender immediately and then delete the same and any copies. "CLS Services Ltd × Registered in England No 4132704 × Registered Office: Exchange Tower × One Harbour Exchange Square × London E14 9GE" --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist