Sophos Reflexion Total Control Email Security
Blocks spam, viruses and volume-based attacks before they reach the corporate network

Features:

Volume-Based Email Protection

The first two layers of defense are designed to eliminate inbound emails destined for unknown users at your domain - so called directory harvesting attacks. Currently, 80-90% of all messages traveling over the Internet are actually sent to unsers that don't exist at the target domain.

Permitted Countries

This capability further augments content filtering by blocking messages from any country other than those specifically approved for delivery at the enterprise and individual user levels. Delivery decisions are based on the IP address of the sending server. While some organizations may not be able to use this capability, many domestic businesses may not ever want to receive email that can be determined to have originated outside their home countries or geographic areas of operation.

Total Control Panel

As an option, Reflexion automatically inserts a control panel at the bottom of incoming messages and removes it on forward or reply. This control panel provides a simple and convenient way for users to interact with RTC. For example, users can update their access preferences for a specific sender and address by simply clicking on the intuitive in-message links that are provided. Reflexion's control panel is available in English, Spanish, French, German, Brazilian Portuguese, Dutch, and Italian.

Address-on-the-Fly™

Reflexion makes it easy for users to employ alternate aliases for a single inbox. Address-on-the-Fly enables users to spontaneously disclose a purpose-specific address on a website, in a discussion forum, in print or conversation, etc., without having to manually configure that address ahead of time. These addresses take the form of a root name plus a suffix of the user's own choosing. For example, to register on eBay, Jane Doe might disclose the address [email protected], where the ".ebay" suffix serves as an "email PIN" that assures delivery of email sent to this address. Addresses are independently controllable by policy through simple interaction with the Total Control Panel, so that legitimate users of the address can be "locked down" in the event the address is ever harvested and abused by a spammer.

Partner Features

Reflexion Total Control has been designed specifically to address the needs of IT solution providers:

• Branding: RTC is fully brandable. Partners can put their logo on the Message Center, the Welcome Message for new users, the daily quarantine digest, and all other customer-facing messages to reinforce their name recognition and brand with their clients.
• Co-administration: Reflexion's partners can use the Reflexion Message Center to provision new users and manage their clients without Reflexion's intervention.
• Maximum Configurability: Reflexion is extensively configurable, providing partners with the high degree of user control that they need to respond to the widest range of client requirements.

Product Highlights:

Hosted Email Security

• Multi-layered in-depth defense
• Geographic- and languagebased filtering
• Address-on-the-Fly™
• In-message control panel
• Identifies address sharing

Outbound Email Auditing

• Outbound antivirus scanning
• Open relay and zombie prevention
• Avoids IP address blacklisting

Volume-Based Protection

• Defeats directory harvesting and denial-of-service attacks
• Supports SMTP restrictions to prevent direct-to-IP attacks

Automatic Email Spooling

• Automatic spooling of all incoming email for 14 days in the event of local power or email server outage
• Optional email archiving, discovery and recovery (see RADAR)

How Reflexion Works:

Inbound and outbound email is processed as shown in the below diagram. Deployment of the service requires a simple MX record change to route email through Reflexion's servers. Reflexion can work with any local email server, and doesn't require the installation of any server, client software, or hardware at the customer's location.

There are three main points:

• RTC provides many different layers of protection for defense-in-depth of one's inbox.
• The service is uniquely configurable, providing the versatility that email administrators and solution providers need to address the widest range of end-user requirements. Mail for a specific user will only be subjected to the tests dictated by their configuration (or if one is not specified, by the default enterprise configuration).
• The architecture is extensible so that new defenses can be added as they become available or desirable.

Documentation:

Download the Sophos Reflexion Total Control Datasheet (PDF).