Kaspersky Security for Mail Server
Proven multi-layered protection for every aspect of your corporate email

Building resilience against the number one attack vector

Email is the primary attack vector threatening business IT security. Attackers have increasingly sophisticated ways to infiltrate organizations through mail-based attacks, resulting in financial, operational and reputational losses. To counter these developments, businesses need to think about resilience as well as protection. By optimizing your resilience and minimizing your attack surface, you can make your business a less attractive and even unfeasible target for attackers – regardless of whether your company operates an on-prem, cloud or hybrid emailing infrastructure.

• Email is the number 1 cybercriminal entry-point into enterprise IT systems.
• Kaspersky Security for Mail Server uses multiple security layers based on award-winning protection technologies, machine learning and global threat intelligence to detect and block email-borne cyberthreats, including malware and ransomware, spam, phishing and BEC attacks.
• Numerous platforms and architectures are supported - ideal for diversified enterprises with complex structures and those moving to the cloud.

Multi-layered malware protection

Multiple security layers are capable of stopping the most complex email-borne malware – including spyware, wipers, miners and ransomware- all of which are often spearheaded by targeted phishing. Reputational data from the cloud, precise detection, cloud and on-prem machine learning models, globally acquired threat intelligence and exclusive research data combine to ensure one of the best detection-tofalse-positives ratios in the industry.

Breadth of scenarios: one license for all

A single product license covers a unique variety of scenarios – including boosting the protection of your preexisting emailing infrastructure or building a new, secure one. A range of emailing architectures encompassing Linux- or Windows-based, comprising on-prem, virtualized, cloud or a combination of these, it is all covered in a single Kaspersky product.

Automated anti-spam (with content and source address reputation)

Kaspersky’s anti-spam system uses smart engines to minimize the possibility of false positives as they continuously adapt to changes in the spammers’ techniques. Globally collected reputation data is processed in the cloud and used to feed AI aspects, providing a solid basis for efficient spam detection.

Countering Business Email Compromise (BEC)

A dedicated machine learning-based detection system, with algorithmic models updated regularly with new scenarios, processes a number of indirect indicators, enabling the system to block even the most convincing fake emails. Support for sender authentication mechanisms such as SPF / DKIM / DMARC helps protect against source spoofing – especially helpful for withstanding Business Email Compromise (BEC) scenarios.

Sandboxing

To protect against even the most sophisticated, heavily obfuscated malware, attachments are executed in a safe emulated environment where they’re analyzed to ensure that dangerous samples aren’t let through into the corporate system. For Kaspersky Anti Targeted Attack users, integration adds “detonation” in a lifelike external advanced sandbox environment– providing much deeper levels of assessment and dynamic analysis.

Advanced anti-phishing

Kaspersky’s advanced anti-phishing system uses Neural Network based analysis to create effective detection models. With over 1,000 criteria used – including pictures, language checks, specific scripting – this cloud-assisted approach is supported by globally acquired data about malicious and phishing URLs and IP addresses to provide protection from both known and unknown/zero-hour phishing emails.

Blocking unsafe content transfers

Kaspersky’s configurable attachment filtering system can detect file disguises commonly used by cybercriminals, identifying potentially dangerous attachments. DLP-like functionality allows the administrator to configure complex rules for preventing data leakage, armed with the power of Regular Expressions and benefitting from a plethora of best practices accumulated by the community

Beyond the gateway – mailbox-level resilience

Mailbox-level technologies include:

Email rescanning – addressing scenarios like delayed phishing URL activation.

Anti-spam shadow quarantine – ideal for low-tolerance environments. Borderline-suspicious emails can be held in temporary quarantine until sufficient evidence has been accumulated by Kaspersky Security Network for a judgement to be made on whether delivery is definitely safe.

Visibility

A clear user-friendly web-based interface enables your administrator to monitor levels of corporate mail protection, with tools including:

• Configurable dashboard
• Convenient event viewer with powerful Boolean event search
• Event export to your SIEM system
• In-console or emailed reports
• System health monitor

Scaling and resilience

The solution supports clustered architectures in order to tackle growing traffic loads and ensure the resilience of the entire email security system in case of a disaster. To ensure that no critical data is lost due to disinfection, deletion or a technical mishap, original messages can be backed up according to admin-specified criteria, giving riskfree access.

Management and access control

Flexible rules allow the administrator to set up policies combining multiple criteria and to track any violation attempts. For an all-in-one Secure Email Appliance, specialist instruments to configure non-security aspects of the system are offered in the same management console. Role-based Access Control means separate administrators can be allocated to different areas of the business or to different clients.

eXtended Detection & Response

Integration with Kaspersky Anti Targeted Attack gives you access to a stack of expert-level detection technologies comprising an advanced sandbox, mobile threat analyzer, special data feeds containing C&C data and more. After successful detection, a targeted attack can be disrupted by blocking its components through finding and isolating them across different infrastructure layers, using XDR cross-product scenarios.

A single security solution for all your email security needs

Kaspersky Security for Mail Server protects mail on all major email platforms

• A Secure Email Gateway (SEG)
  A software appliance or standalone Linux app
• Integrated protection for MS Exchange
  Checks your mailboxes and what travels between them
• Cloud-native MS365 email security
  And you get protection for other MS365 apps, free!
• A single license covers all scenarios
  Gateway, mailbox and cloud email security inside!

Protection you can trust - for known and unknown threats

Multiple security layers backed by ML and leading global threat intelligence

• ML-based malware, spam & phishing detection
  Cloud-processed global threat data
• Plus trusted external threat intel sources
  And Kaspersky’s industry-leading research
• Engines tested by independent labs
  Rigorous testing; top results

Supports confidentiality and compliance

Content filtering and DLP-like controls promote data security and compliance

• Filtering keeps risky files out
  Rules reduce the risk of data leaks
• Regular expressions for granular filtering definitions
  Use your queries or get them from the community
• Templates to identify sensitive documents
  Easy rules to find/keep sensitive data inside