Symantec 10765539 Planning Guide - Page 10

10 Introducing Symantec Mail Security for SMTP New features for all users ■ The incoming connection arrives at the inbound MTA via TCP/IP. ■ The inbound MTA accepts the connection and moves the message to its inbound queue. ■ The Filtering Hub accepts a copy of the message for filtering. ■ The Filtering Hub consults the LDAP SyncService directory to expand the message's distribution list. ■ The Filtering Engine determines each recipient's filtering policies. ■ The message is checked against Blocked/Allowed Senders Lists defined by administrators. ■ Virus and configurable heuristic filters determine whether the message is infected. ■ Content Compliance filters scan the message for restricted attachment types or keywords, as defined in configurable dictionaries. ■ Spam filters compare message elements with current filters published by Symantec Security Response to determine whether the message is spam. At this point, the message may also be checked against end-user defined Language settings. ■ The Transformation Engine performs actions per recipient based on filtering results and configurable Group Policies. New features for all users Table 1-1 Table 1-1 lists features that are new for both Symantec Mail Security for SMTP users and Symantec Brightmail Antispam users. New features for Symantec Mail Security for SMTP and Symantec Brightmail Antispam Category Threat protection features Features Improved Email Firewall Sender Authentication Improved virus protection Description Protects against directory harvest attacks, denial of service attacks, spam attacks, and virus attacks. Protects against phishing attacks, using the Sender Policy Framework (SPF), Sender ID, or both. Additional virus verdicts protect against suspected viruses, spyware and adware, and encrypted attachments. Email messages that may contain viruses can be delayed in the Suspect VIrus Quarantine, then refiltered, with updated virus definitions, if available. This feature can be effective in defeating virus attacks before they are widely known. View a continuously updated list available of virus definitions.