With changes in working methods, messaging has become a key tool for employees. To be effective and reactive, users feel the need to access their message account, even when they are away from their office, home or computer.
Webmail, which is used to consult messages via a web browser, is the system most used by companies to provide this service.
This introduces an additional problem with the security model. Because of the importance it has assumed, increasing volumes of sensitive data are exchanged via email. The possibility of a third party accessing this information is potentially highly prejudicial for the company.
Deny All provides a complete solution for securing Webmail. The two main systems used for Webmail are based on Microsoft Exchange and Lotus Notes software. The Deny All teams have performed a complete reverse engineering of these two software systems at communications level. Using this knowledge, rWeb incorporates predefined security templates for these applications. This gives clients the option of applying a very high level of protection to their electronic mail with just a few mouse clicks.
The benefits are as follows :
Security :
• A unified security platform incorporating all content filtering on messages and attachments.
• A unique platform viewed from the exterior providing protection for internal systems that are no longer directly accessible from the exterior.
• Protection of authentication mechanisms against the discovery of passwords, session theft, brute force attacks, etc.
• Protection against different bypass and anti-evasion mechanisms
• Incorporates a complete database of the different signatures and vulnerabilities
• Guarantees sensitive content by filtering and transformation on the fly
• Protection against unknown attacks by strict restrictions on application instructions and parameters
Architecture :
• Releases the server from several tasks and improves customer response times
• Supports a high-availability architecture to guarantee continuity of service
• Easy to install with no interruption to servers or firewalls
• Overview and log of operations carried out by the message handling service
The product concerned :
rWeb, the solution to protect Webmail applications
