IronPort is a technology that was acquired by Cisco in early 2007. It targets web and email
security and is used by some of the largest organizations in the world. However, IronPort
appliances are available to meet the needs of smaller organizations as well.
The email protection appliances protect against spam and perform antivirus fi ltering. A high -
performance web security appliance is also available. The web security appliance performs
spyware fi ltering, URL fi ltering, and anti - malware protection. There is also a security
management appliance, but we will focus on email and web security appliances here.
IronPort email protection appliances, also known as the C - Series of the IronPort line of
products, use a technology called the IronPort SenderBase Network to collect data on over
100,000 Internet service providers (ISPs), universities, and other organizations. Over 120
different email server parameters are collected, giving this database the most accurate view
of email sending patterns of any on the Internet.
Two of the pieces of technology behind the Cisco IronPort email security appliance are
the IronPort Reputation Filters and the SenderBase Reputation Score. These allow users
of the appliance to score email entering the system. Only email with a high enough score is
allowed through the system.
The email appliance also contains the IronPort Virus Outbreak Filters, which protect
an enterprise in real time from viruses as they appear on the Internet. These fi lters can
often protect against viruses before antivirus software vendors are able to create updated
signatures to cover the threat.
In the IronPort web security appliance, also known as the S - Series, the SenderBase Network
is also used, with Reputation Filters and a Web Reputation Score. The appliance offers URL
fi ltering and exploit protection. This technology allows protection for enterprise customers
without waiting for updates.