Spam and Virus Filtering and Email Encryption

Spam accounts for 70% of email messages. Over 3% of emails have malicious attachments. 91% of successful hacks begin with email attacks. It all adds up to the urgency of protecting your email.

Progent has partnered with leading IT security companies to offer small and mid-size businesses ProSight Email Guard, a hybrid security solution that uses cloud-based resources and on-premises security gateway hardware to provide multi-tiered defense against spam, email-borne viruses, Denial of Service (DoS) attacks and other email-based threats. In addition, ProSight Email Guard's security gateway hardware provides outbound email encryption, enforces your internal content policies to keep sensitive data from leaking outside of your organization, and helps keep your organization off spam block lists by filtering outbound spam and viruses.

Progent's email security consultants can assist you to design and implement your ProSight Email Guard deployment, help you determine which email security gateway appliances are the best fit for your needs, configure your gateway, integrate ProSight Email Guard with Microsoft Exchange Server or any other email platform, set up policies for filtering inbound and outbound email, configure outbound encryption, plan and deploy high-availability topology that can include clustered security gateways, set up a streamlined cloud-based management system that utilizes delegated administration, and provide training, ongoing consulting support and troubleshooting.

Key Features of ProSight Email Guard
ProSight Email Guard is a complete solution for protecting inbound and outbound email. ProSight Email Guard offers these key features:

• Spam Protection uses heuristic-rules that analyze IP addresses, message content, and even images/
• Zero-hour Virus Protection offers multi-tiered scanning and 24x7 real-time updates
• Cloud-based Pre-filtering prevents the vast majority of email threats from ever reaching your security perimeter
• On-premises Gateway Appliance is purpose-built for deep analysis of inbound and outbound traffic
• Cloud-based Management with delegated administration rights centralizes and simplifies policy and configuration control
• Outbound Filtering provides policy-based Content Filtering for Data Loss Prevention (DLP) and Data Leakage Protection and blocks outbound spam and viruses
• Encryption uses AES with 256-bit keys and automatically protects outbound email that meets your policy settings
• Rate Control blocks spambots and controls outbound email rate based on IP address or sender's email address
• Denial of Service (DoS) Attack Protection keeps your network from being disabled by an overload of malicious spam
• Directory Harvest Attack (DHA) protection keeps spammers from stealing and selling your users' email addresses
• Low False Positive Rate is an industry-leading 0.01% before you apply any of the available custom optimization options
• Internal Email Protection with Exchange protects email that stays within your security perimeter, never reaching your gateway

The reliability of your email system is also improved due to the hardened, geographically dispersed data centers behind Email Guard's cloud infrastructure. Data center uptime averages 99.999 percent, far higher than can be achieved by the email servers of most small or mid-size businesses. If your email server or internal network infrastructure fails, Progent's Microsoft-certified consultants and Cisco-certified network engineers can provide immediate online expertise to get you up and running quickly.

Inbound Email Protection
All inbound email secured by ProSight Email Guard passes through the Cloud Protection Layer, which uses advanced data centers and massive computing grids to block 95% of spam and most email carrying viruses and other malware. Email that clears this first level of filtering is subjected to deep analysis by purpose-built on-premises security gateway hardware that provides multi-level inspection including OCR technology to detect image spam. The Cloud Protection layer and the email security gateway are continually updated in real time by the cloud-based Update Center, a technology center staffed 24x7x365 by security experts to provide zero-hour protection against the latest threats without requiring the intervention of your management personnel. For disaster recovery, the Cloud Protection Layer offers email spooling, which can store all your inbound email for up to 96 hours or redirect it to an alternate destination in case your on-premises data center is disrupted.

Outbound Email Protection
The outbound filtering capability of ProSight Email Guard prevents costly data leaks and protects your reputation as a trusted source of email. ProSight Email Guard provides Data Loss Protection (DLP) through policy-based content filtering. This prevents users from inadvertently releasing valuable or private information through email messages. Leaked information can violate regulatory requirements and can result in loss of competitive advantage, identity theft, and even litigation. The ProSight Email Guard security gateway appliance comes with standard content filters that include HIPAA, Social Security Numbers, credit card numbers. In addition, you can define custom policies for filtering content based on keywords, categories, or other factors. ProSight Email Guard allows you to use content filtering policies for automatically blocking, quarantining or encrypting email messages.

Outbound filtering can also block spam and viruses sent by internal computers that have been compromised, which is a serious vulnerability in BYOD (Bring Your Own Device) environments. Organizations which allow spam and viruses to be sent out can be placed on block lists, or "blacklisted". This loss of reputation can hurt productivity and profits.

Outbound Email Encryption
ProSight Email Guard uses a cloud-based Message Center to encrypt and deliver outbound email. You can configure multiple policies for deciding which emails should be encrypted, and the entire process is handled automatically. The on-premises security gateway sends email to be encrypted to the Message Center using a secure TLS connection. There the messages are encrypted using the advanced AES-256 standard and stored for retrieval. The Message Center sends a notice to the recipient and includes a web link that permits the recipient to retrieve the decrypted email. Any replies are also encrypted at the Message Center.

A plug-in for Microsoft Exchange allows users to encrypt emails on an individual basis. For additional details about ProSight Email Guard outbound email encryption, see Email Guard technology and architecture.

Technologies Behind ProSight Email Guard for Blocking Email Threats
ProSight Email Guard's cloud-based filtering resources, technology centers and gateway appliances combine open source mechanisms with proprietary techniques developed by Progent's partners to protect against spam and other email-based threats. Anti-spam/virus techniques include:

• IP Reputation Analysis
• Sender Authentication
• Recipient Verification
• Predictive Sender Profiling
• Virus Databases
• Pre-Defined And Custom Policies
• Rate Control
• Signature Analysis
• Intent Analysis
• Image Analysis
• Bayesian Analysis
• Spam Rules Scoring Thresholds

• Spam
• Viruses
• Trojans
• Worms
• Polymorphic Viruses
• Spoofing
• Phishing
• Denial Of Service (Dos) Attacks
• Directory Harvest Attacks (Dhas)
• Spyware

How Progent Can help You Deploy and Manage ProSight Email Guard
Progent's certified email security experts can work with you to develop a comprehensive email security strategy that protects you from email-borne threats and helps you stay in compliance with government regulations and industry standards. Progent can help you plan and implement a smooth rollout of ProSight Email Guard, tune your configuration to match your environment, develop auditing and reporting practices, train your management and end users on how to avoid spam and prevent virus propagation, and develop enforceable email policies. In addition, Progent's Cisco CCIE-certified consultants can help you plan, implement and troubleshoot a robust on-premises network infrastructure to support your email solution and efficiently integrate your local IT resources with ProSight Email Guard's cloud-based resources and services.

Progent's Microsoft-certified consultants offer world-class expertise providing remote and onsite IT consulting services for Microsoft Exchange including Microsoft Exchange Server 2019 consulting, Exchange Server 2016 support, plus support and migration services for legacy versions of Exchange Server. Progent also offers Windows Server consulting as well as support for the entire family of Microsoft Servers.

Download the ProSight Email Guard Datasheet
To see the ProSight Email Guard datasheet, click: ProSight Email Guard Spam and Email Content Filtering Datasheet (94 Kb PDF file).

Other Managed Services Available from Progent
In addition to ProSight Email Guard, Progent's ProSight suite of network monitoring and management services offers other affordably-priced managed service packages that address key components of your information system such as endpoint security, backup and disaster recovery, network infrastructure management, virtual machine hosting, and IT documentation management. By partnering with leading technology innovators, Progent can offer small and mid-size businesses the benefits of the same advanced technology used by global enterprises. Managed services available from Progent include:

• ProSight LAN Watch: Server and Desktop Remote Monitoring and Management
  ProSight LAN Watch is Progent's server and desktop remote monitoring managed service that incorporates advanced remote monitoring and management (RMM) technology to help keep your network running at peak levels by checking the health of vital computers that power your information system. When ProSight LAN Watch detects a problem, an alert is sent immediately to your designated IT management personnel and your assigned Progent consultant so all looming issues can be resolved before they have a chance to impact your network. Find out more about ProSight LAN Watch server and desktop monitoring consulting.

• ProSight LAN Watch with NinjaOne RMM: Unified RMM Solution for Networks, Servers, and Workstations
  ProSight LAN Watch with NinjaOne RMM software offers a centralized, cloud-driven solution for managing your client-server infrastructure by offering tools for performing common time-consuming jobs. These include health monitoring, update management, automated repairs, endpoint deployment, backup and recovery, A/V defense, remote access, standard and custom scripts, asset inventory, endpoint profile reports, and troubleshooting support. When ProSight LAN Watch with NinjaOne RMM spots a serious incident, it transmits an alarm to your specified IT staff and your assigned Progent technical consultant so that potential problems can be fixed before they impact your network. Learn more about ProSight LAN Watch with NinjaOne RMM server and desktop remote monitoring services.

• ProSight WAN Watch: Network Infrastructure Management
  ProSight WAN Watch is an infrastructure management service that makes it easy and inexpensive for small and mid-sized organizations to diagram, monitor, optimize and debug their connectivity appliances like routers and switches, firewalls, and wireless controllers as well as servers, printers, client computers and other networked devices. Using state-of-the-art RMM technology, WAN Watch ensures that infrastructure topology diagrams are always updated, captures and displays the configuration of almost all devices connected to your network, monitors performance, and generates notices when problems are detected. By automating time-consuming network management processes, WAN Watch can cut hours off ordinary tasks like making network diagrams, reconfiguring your network, locating devices that need important updates, or identifying the cause of performance problems. Find out more details about ProSight WAN Watch infrastructure monitoring and management services.

• ProSight Reporting: Real-time Reporting for Ticketing and Network Monitoring Applications
  ProSight Reporting is an expanding line of in-depth reporting utilities designed to work with the leading ticketing and network monitoring platforms including ConnectWise Manage, ConnectWise Automate, Customer Thermometer, Auvik, and SentinelOne. ProSight Reporting incorporates Microsoft Graph and features color coding to surface and contextualize key issues such as spotty support follow-up or endpoints with missing patches. By identifying ticketing or network health concerns clearly and in near-real time, ProSight Reporting enhances network value, lowers management hassle, and saves money. For details, visit ProSight Reporting for ticketing and network monitoring platforms.

• ProSight Data Protection Services (DPS): Managed Backup and Disaster Recovery Services
  Progent has worked with leading backup/restore software providers to create ProSight Data Protection Services (DPS), a selection of management outsourcing plans that deliver backup-as-a-service. ProSight DPS products automate and monitor your backup operations and allow non-disruptive backup and rapid restoration of vital files, apps, images, and virtual machines. ProSight DPS lets you avoid data loss resulting from equipment failures, natural disasters, fire, cyber attacks such as ransomware, user mistakes, ill-intentioned insiders, or application bugs. Managed backup services in the ProSight Data Protection Services product line include ProSight Altaro VM Backup, ProSight 365 Total Backup (formerly Altaro 365 Backup), ProSight DPS ECHO Backup using Barracuda purpose-built hardware, and ProSight DPS MSP360 Cloud and On-prem Backup. Your Progent expert can help you to identify which of these fully managed backup services are most appropriate for your network.

• ProSight Duo Two-Factor Authentication: Access Security, Endpoint Remediation, and Protected Single Sign-on (SSO)
  Progent's Duo MFA service plans incorporate Cisco's Duo cloud technology to protect against stolen passwords by using two-factor authentication (2FA). Duo enables single-tap identity verification on iOS, Android, and other personal devices. With Duo 2FA, when you log into a protected application and enter your password you are requested to confirm who you are on a unit that only you have and that uses a separate network channel. A broad range of out-of-band devices can be used for this second means of authentication such as a smartphone or wearable, a hardware/software token, a landline phone, etc. You may register multiple verification devices. To find out more about Duo two-factor identity authentication services, refer to Cisco Duo MFA two-factor authentication (2FA) services for access security.

• Progent's Outsourced/Shared Help Desk: Call Center Managed Services
  Progent's Help Desk services enable your IT staff to outsource Help Desk services to Progent or divide activity for Help Desk services transparently between your in-house support resources and Progent's nationwide pool of certified IT support technicians, engineers and subject matter experts. Progent's Co-managed Service Desk provides a smooth extension of your in-house network support team. End user access to the Service Desk, delivery of support, issue escalation, trouble ticket creation and updates, efficiency metrics, and maintenance of the support database are cohesive regardless of whether incidents are resolved by your core IT support resources, by Progent's team, or by a combination. Find out more about Progent's outsourced/co-managed Service Center services.

• Progent Active Defense Against Ransomware: Machine Learning-based Ransomware Identification and Cleanup
  Progent's Active Defense Against Ransomware is an endpoint protection (EPP) service that utilizes cutting edge behavior machine learning tools to guard endpoint devices and servers and VMs against new malware attacks like ransomware and file-less exploits, which easily escape traditional signature-matching AV tools. Progent Active Security Monitoring services protect on-premises and cloud resources and provides a single platform to automate the entire threat lifecycle including filtering, infiltration detection, mitigation, cleanup, and post-attack forensics. Key features include one-click rollback using Windows Volume Shadow Copy Service and real-time network-wide immunization against newly discovered attacks. Find out more about Progent's ransomware defense and recovery services.

• ProSight IT Asset Management: Network Documentation Management
  Progent's ProSight IT Asset Management service is a cloud-based IT documentation management service that makes it easy to capture, update, find and safeguard data related to your IT infrastructure, procedures, business apps, and services. You can quickly find passwords or IP addresses and be alerted automatically about upcoming expirations of SSLs or domains. By cleaning up and organizing your network documentation, you can eliminate as much as half of time spent searching for vital information about your IT network. ProSight IT Asset Management features a common repository for storing and sharing all documents related to managing your business network such as standard operating procedures and How-To's. ProSight IT Asset Management also offers a high level of automation for gathering and associating IT data. Whether you're planning enhancements, performing maintenance, or responding to an emergency, ProSight IT Asset Management gets you the data you require as soon as you need it. Find out more about Progent's ProSight IT Asset Management service.

• Patch Management: Patch Management Services
  Progent's support services for patch management provide businesses of any size a versatile and cost-effective alternative for evaluating, testing, scheduling, applying, and tracking software and firmware updates to your dynamic information system. Besides maximizing the protection and reliability of your computer network, Progent's software/firmware update management services free up time for your in-house IT staff to concentrate on more strategic initiatives and activities that derive maximum business value from your network. Find out more about Progent's software/firmware update management support services.

• ProSight Active Security Monitoring: Endpoint Protection and Ransomware Defense
  ProSight Active Security Monitoring (ASM) is an endpoint protection service that incorporates SentinelOne's cutting edge behavior-based machine learning tools to defend physical and virtual endpoints against modern malware attacks like ransomware and file-less exploits, which easily escape traditional signature-based anti-virus tools. ProSight Active Security Monitoring protects local and cloud resources and offers a unified platform to address the entire malware attack lifecycle including protection, detection, containment, cleanup, and forensics. Top capabilities include single-click rollback with Windows Volume Shadow Copy Service and real-time system-wide immunization against newly discovered threats. Progent is a SentinelOne Partner, reseller, and integrator. Learn more about Progent's ProSight Active Security Monitoring (ASM) endpoint protection and ransomware recovery.

• ProSight Enhanced Security Protection (ESP): Physical and Virtual Endpoint Protection and Microsoft Exchange Filtering
  Progent's ProSight Enhanced Security Protection (ESP) services offer economical multi-layer protection for physical servers and virtual machines, desktops, smartphones, and Exchange email. ProSight ESP uses contextual security and advanced machine learning for round-the-clock monitoring and responding to cyber threats from all vectors. ProSight ESP provides two-way firewall protection, penetration alerts, endpoint control, and web filtering via cutting-edge tools incorporated within a single agent accessible from a single console. Progent's security and virtualization experts can help you to plan and implement a ProSight ESP deployment that addresses your company's specific requirements and that allows you demonstrate compliance with government and industry information protection regulations. Progent will assist you define and implement security policies that ProSight ESP will manage, and Progent will monitor your IT environment and react to alerts that call for urgent attention. Progent's consultants can also assist you to install and verify a backup and restore system like ProSight Data Protection Services (DPS) so you can get back in business quickly from a potentially disastrous security attack such as ransomware. Find out more about Progent's ProSight Enhanced Security Protection unified physical and virtual endpoint protection and Exchange filtering.

• ProSight Virtual Hosting: Hosted VMs at Progent's Tier III Data Center
  With Progent's ProSight Virtual Hosting service, a small or mid-size business can have its critical servers and applications hosted in a secure fault tolerant data center on a fast virtual host configured and managed by Progent's network support professionals. With Progent's ProSight Virtual Hosting model, the client retains ownership of the data, the OS software, and the apps. Since the environment is virtualized, it can be moved immediately to an alternate hardware environment without requiring a time-consuming and technically risky reinstallation procedure. With ProSight Virtual Hosting, you are not tied a single hosting service. Find out more about ProSight Virtual Hosting services.

ProSight Network Audits
Progent's ProSight Network Audits are a quick and affordable way for small and medium-size organizations to get an objective assessment of the overall health of their network. Powered by some of the leading remote monitoring and management (RMM) tools in the industry, and overseen by Progent's certified team of information technology experts, ProSight Network Audits show you how well the configuration of your essential infrastructure devices conform to industry leading practices. Both the Basic and Advanced options for ProSight Network Audit services are offered at a low, one-time cost and provide immediate ROI like a more manageable Active Directory (AD) environment. Both also come with one year of advanced remote network monitoring and management (RMM). Benefits can include easier management, improved compliance with information security regulations, higher utilization of network resources, faster problem resolution, more reliable backup and recovery, and higher availability. Learn more information about ProSight Network Audits network infrastructure assessment.

Progent's ProSight Ransomware Preparedness Report Service
The ProSight Ransomware Preparedness Report service is an affordable service built around a phone interview with a Progent information assurance consultant. The interview is intended to assess your company's ability to counter ransomware or recover rapidly after an assault by a ransomware variant such as Ryuk, Maze, Sodinokibi, Netwalker, Phobos, LockBit or Nephilim. Progent will consult with you directly to collect information about your existing cybersecurity posture and backup system, and Progent will then deliver a custom Basic Security and Best Practices Report describing how you can follow best practices to create a cost-effective AV and backup/recovery environment that minimizes your exposure to ransomware and meets your business requirements. For details, visit Progent's ProSight Ransomware Preparedness Report Service.

Contact Progent for Email Solutions
If you want to find out more about using Progent's ProSight Email Guard managed services or if you need Progent's help to troubleshoot or enhance your email system, call 800-993-9400 or visit Contact Progent.