Secure Email Gateway Product Sheet

Products

• Email Gateway: enabling broad infrastructures with email functionality, connected via SMTP

• Email Security: protecting complete email infrastructures against virus, spam, phishing, and advanced threat attacks

• Email Archive: fulfill regulatory requirements and enable retention policies for email communication

• Email Encryption: automatically encrypting emails and attachments using established standards like S/MIME and PGP to protect confidential information

• Email Continuity: protect the business from email outages via a redundant email platform

Connectors and Add-Ins

Pre-built Connectors & Add-Ins

• Azure Active Directory Connector for Directory Synchronization

• User Synchronization for Encryption (USE) to import encryption rules, identities, and certificates

Business Features

Cloud Email Gateway

• Email Systems: seamless integration with Microsoft 365, Exchange, Google Workspace without additional hardware or software

• TLS Connection: connection of customer systems via opportunistic or enforced TLS (Transport Layer Security)

• VPN Connection: connection of customer systems via VPN (Virtual Private Network)

• Predelivery Logic: additional and comprehensive routing capabilities using customizable rulesets

• Directory Synchronization (DirSync): reconciliation of address books and directory services from Microsoft (Exchange, Active Directory, Azure Active Directory (AAD) for Microsoft 365), HCL Notes Domino and LDAP (Directory Synchronization)

• Directory Filter (DirFilter): rejects incorrectly addressed (i.e. attempted denial of service and directory harvesting attacks) emails in accordance with RFC and/or handles them with traffic throttling mechanisms

• Inbound Reputation Management (SPF, DKIM, DMARC): supplements the Directory Filter checking the reputation of the senders (Email Authentication) using SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail) and DMARC (Domain-based Message Authentication, Reporting and Conformance)  

• myEAS: admin portal with granular, hierarchical access rights management for administrators

• Monitoring and Reporting: easy management of service instances and user profiles via Retarus myEAS, including detailed (custom) report, analysis functions and real-time performance monitoring

• Email Live Search: ability to track how a message was processed via search filters over a period of 45 days with near instantaneous results

• Multi Data Center Connection: high availability and disaster recovery through globally distributed Retarus data centers

• Scalability: cloud service designed to process high email volumes

• Compliance: meeting data processing regulations through local data processing in Retarus data centers

• 24/7 support: operated directly from Retarus with no third-party outsourcing

Email Security

• Available Packages: Essential Protection (EP: AS, AV, Phishing); Advanced Threat Protection (ATP); Post Delivery Protection (PDP); Sandboxing; Forensic SIEM

• Quarantine Management (via email and browser): simplified email handling for employees and administrators. At customizable points in time, reports sent by email (Email Digests) and Online Quarantine web portal offer a quick view of emails flagged for deletion or quarantine.

• AntiSpam Management: runs spam checks of incoming emails using rules and tools (e.g. content and structure analyses/heuristic methods, "bad word" filter, fingerprint analysis, Machine Learning, sender check); continuous updates of intelligent filter, pattern, and identification rules: backscatter protection; multi-lingual content analysis

• AntiVirus MultiScan (up to 4x): scans incoming and outgoing messages as well as file attachments for viruses using heuristic analysis (Zero-Hour Protection)and continuous updated virus definitions of various market-leading sources

• Phishing Filter: detects phishing emails that are not yet caught by the AntiVirus MulitScan or AntiSpam Management using query of several databases of renowned specialized providers (see also Time-of-Click Protection)

• Forensic SIEM Integration: provisioning of real-time forensic data in the form of events via protected interface to exisiting SIEM tools

• Sandboxing: subjects file attachments to an in-depth analysis (e.g. files and active elements) in a virtual machine checking for unusual behavior using a combination of static and dynamic analysis as well as machine-learning algorithms

• Attachment Blocker: blocks selected attachments from reaching the company infrastructure eg. .exe, .zip, or Office files with macros. 

• CxO Fraud Detection: uses algorithms that identify from-spoofing and domain-spoofing, to detect falsified senders (i.e. "impersonation attacks", "Business Email Compromise (BEC)"), based on combination of detection methods and algorithms (header analysis, domain similarity, recognition of  fake sender names)

• Deferred Delivery Scan (DDS): effective re-scanning with quadruple Retarus AntiVirus MultiScan protecting from viruses that were unknown at time of initial scan

• Time-of-Click Protection: automatically re-writes URLs in emails offering continuous protection against suspected phishing target addresses through real-time checks, effective blocking of websites and customized warnings for affected users

• Patient Zero Detection^®: patented solution using digital fingerprints to identify emails containing malware or phishing links that have already been delivered to the user's inbox (Post delivery protection)

• Patient Zero Detection^® Real-Time Response: allows results to be processed in a rule-based manner and automatically move or delete potentially dangerous emails from a user's mailbox

• Advanced Routing & Rewriting: delivery of emails for specified recipients within a domain to designated target servers or configurable MTAs

Email Archive

• Reliable long-term storage of all incoming and outgoing emails to support in meeting regulatory requirements

• Tamper-resitant, secure data storage based on hybrid encryption

• Providing tracking information via EAS Live Search

• Access protocol created automatically

• Messages retrievable including attachments

• Access based on dual-control principle via web-based Retarus administrative portal

• Powerful search refunctionality with configuration option for data-protection compliance

• Archiving of internal email communication via Journaling (Microsoft Exchange or M365 Exchange Online) upon request

• Secure and convenient access for customer's administrators via Single Sign-on upon request

• Importing emails from other archiving systems (ideally in eml format) upon request

• Exporting archived emails to external data storage upon request

• Using customer's own (public) keys (private keys remain with customer) upon request

Email Encryption

• Encrypts emails and attachments before sending to recipient using customer-specific rules

• Compatible with any SMTP-based email system like Microsoft 365, Exchange, Gmail

• Retarus manages encryption keys and certificates, no user training required

• Secure communication via encrypted webmail portal for recipients without encryption

• Operates in Retarus data centers complying with data protection regulations

• Filters encrypted emails for viruses and spam before and after decryption

• Supports all major encryption standards like S/MIME, PGP, OpenPGP

• Automatic or manual signing of outgoing encrypted emails

• Centralized policy management for emails requiring encryption and signing

• Secure TLS or VPN connection to Retarus for end-to-end protection

Email Continuity

• ”Switch-over" routing of emails to the alternative platform in case of emergency

• End users can continue working via an easy webmail interface with company address book access

• Optional email history access to recent inbound messages

• Non-Microsoft environment, compliant with only webmail and secure browser access

• Provides corporate email addresses for employees without access to critical infrastructure

• Automatic webmail inbox provisioning for users with intuitive interface requiring no training

• Integrated with Retarus Secure Email Platform for additional services like archiving or encryption

• Customizable to meet specific requirements

End of Maintenance

Discontinued Products and Features

• Retarus Quiet Time

Legacy Connectors

• Domino Notes Connector for Directory Synchronization