Email and Web Security with Data Loss Prevention When companies need proven protection from email and web threats, and prevention of data loss for privacy and compliance, they turn to WatchGuard XCS. These solutions provide the most comprehensive and proactive security across email and web in the industry, with consolidated visibility and control of your email and web traffic. Next-Generation Anti-Spam Technology Protection for Web Traffic • A nti-spam engine examines sender info and content, including images, attachments, and embedded URLs, and conducts contextual analysis to determine risk level. • Reputation Enabled Defense, a key “in the cloud” component of XCS, blocks up to 98% of unwanted email at the perimeter, dramatically optimizing bandwidth. • Signature-based anti-spam combines with knowledgebased learning technology to block spam and protect against emerging, difficult-to-detect variants. • Spam quarantine allows end users to access and manage their quarantined messages, safe lists, and block lists via digests that are emailed to them. • E xtend the same powerful defenses against threats and data loss to all web traffic with a Web Security subscription. • U RL filtering provides immediate and accurate network defense against malicious and inappropriate web sites. • I n-the-cloud URL inspection analyzes every URL at the connection level to determine risk. Compromised URLs are blocked at the perimeter for faster, safer web surfing. • T raffic enhancements include web caching, large file downloads, and streaming media support to reduce bandwidth consumption, server loads, and latency for web traffic. The WatchGuard® XCS Story Enterprise-Grade Reliability web networks. XCS products are backed by LiveSecurity® Service, a high-value support and maintenance program. The WatchGuard • F ully redundant system, including message-level, logical, geographic, and hardware redundancy*. • P atented XCS queue replication ensures no communication is ever lost. • D ynamic on-demand clustering allows you to replicate configuration settings and messaging queues across multiple systems in minutes. commitment to performance and value gives our customers enterprise-grade protection in a cost-effective, extensible solution. Protection from Email-Borne Threats • Z ero-hour threat outbreak response delivers proactive defense against the latest threats. • Advanced content filtering and malware prevention scans inbound and outbound email for malicious content delivered by blended threats. Data Loss Prevention (DLP) Centralized Management and Reporting • P re-defined compliance dictionaries can be used for compliance with GBL, HIPAA, PCI and more and are customizable to support efficient policy creation. • XCS DLP Wizard further streamlines policy configuration. Then once policies are determined, the system automatically configures the XCS without any other user action required. • Automatically block, quarantine, reroute, blind copy, encrypt, or allow messages based on policy requirements. • Protect known confidential files from data loss and train the system on what to look for and the actions to take. • A pply a single policy to control traffic so you spend less time defending your borders and more time focusing on higher business value IT projects. • P rovides one-click administration for customizable reports in varying file formats. Meet audit requirements with time-, feature-, and group-based reports. anagement reporting tools provide a holistic view of • M web security. Includes user-based reporting and a web dashboard for monitoring web usage and web threats. Watchguard Quarantine Management Server (QMS) Email Encryption with XCS Securemail • Auto-encryption ensures consistent policy application, taking the decision-making out of the hands of users. Users can also manually trigger encryption. • Encrypted messages can be opened by any browser and on any mobile device. • Message encryption policies can be extremely granular and, once defined, applied automatically at the gateway. • Subscription-based, XCS Securemail does away with the need for a dedicated server, avoiding the costs associated with most encryption technology. • O ff-load spam & suspect email efficiently and effectively into a dedicated holding area. • F rees email servers to process only legitimate email traffic. • S upports multiple domains, organizations, and users. • A vailable as a hardware appliance or as a free virtual appliance as part of your LiveSecurity support subscription. *Hardware redundancy available on 770R, 970, 1170 models. Address: 505 Fifth Avenue South, Suite 500, Seattle, WA 98104 • Web: www.watchguard.com • U.S. Sales: 1.800.734.9905 • International Sales: 1.206.613.0895 No express or implied warranties are provided for herein. All specifications are subject to change and expected future products, features or functionality will be provided on an if and when available basis. ®2012 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard logo, and LiveSecurity are registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other tradenames are the property of their respective owners. Part No. WGCE66671_121012 Since 1996, WatchGuard Technologies has provided more than 600,000 security appliances to hundreds of thousands of customers worldwide. Our Extensible Content Security (XCS and XCSv) solutions offer the industry’s best defense-in-depth for email, web, and data loss prevention. With six physical appliances and four virtual editions to choose from, XCS and XCSv meet the messaging security requirements of businesses of all sizes, including solutions to protect the world’s most demanding email and Eliminate Spam and Email-borne Threats The dangers carried by spam have never been greater. Highly sophisticated email scams are luring users to web sites where malicious code awaits. Data is stolen, malware propagated, and networks infected with spyware and botnets. WatchGuard XCS utilizes breakthrough innovations in email security to stop today’s spam threats. An “in the cloud” reputation lookup service blocks up to 98% of spam at the connection level, then the powerful anti-spam engine conducts a rigorous analysis of messages and attachments on the remaining email. The result is industry-leading spam protection, with huge savings in email processing overhead. Extend Protection to Web Traffic Adding a Web Security subscription to your XCS appliance will extend that same powerful protection to all your web traffic as well. The cloud-based web reputation service determines the risk level of each web page to stop threats at the perimeter. URL filtering analyzes and blocks access to web sites based on pre-defined policies to reduce risks, prevent legal liabilities from inappropriate web surfing, and protect bandwidth. Stop the Loss of Sensitive Data Confidential information can leave the network, accidentally or maliciously, in many ways. Email is the primary threat vector for data loss, yet web communications over popmail services such as Hotmail and Gmail, business collaboration tools, and social networking sites like LinkedIn and Facebook have become just as common egress points for sensitive data. The data loss prevention (DLP) capabilities of WatchGuard XCS enable tight control over all outbound traffic no matter what the communication tool to keep sensitive, regulated, and classified information from exiting the network without authorization. Encrypt Emails for Privacy and Compliance Given the volume of sensitive data that must pass between business networks, the decision isn’t if you should encrypt confidential email messages, but how. WatchGuard XCS SecureMail provides policy-driven, transparent encryption that is easy to deploy and manage. Messages can be opened by any browser and on any mobile device, Keys are issued dynamically, minimizing the risk of key corruption or unauthorized data recovery. And because it’s a fully integrated subscription, it beats the high cost and administrative burden of standalone encryption products. Effectively Define Your Relationship with the Internet CS solutions are rich in tools that support policy creation, X management, and enforcement. The XCS DLP Wizard guides administrators through DLP configuration controls quickly and simply. Built-in compliance dictionaries streamline policy-creation to meet a wide range of regulatory mandates. Granular controls provide enhanced visibility into data leaving the network. All email and web security can be managed across protocols from one centralized management console, using one set of corporate acceptable use and compliance policies for maximum efficiency and protection. ©2009 WatchGuard Technologies, Inc. WatchGuard® XCS Products at a glance XCS 280 XCS 580 XCS 770R XCS 970 XCS 1170 Small Business Mid-Size Business Mid-Size to Large Enterprise Large Enterprise Large Enterprise and ISPs 1U Shallow, Rack-Mountable 1U Shallow, Rack-Mountable 1U Mid, Rack-Mountable 1U Deep, Rack-Mountable 1U Deep, Rack-Mountable Product Dimensions 11.5” x 17” x 1.75” (29.2 x 43.2 x 4.5 cm) 11.5” x 17” x 1.75” (29.2 x 43.2 x 4.5 cm) 28” x 19” x 1.75” (71 x 48 x 4.5 cm) 28” x 19” x 1.75” (71 x 48 x 4.5 cm) 28” x 19” x 1.75” (71 x 48 x 4.5 cm) Shipping Dimensions 18” x 21” x 5” (45.7 x 53.3 x 12.7 cm) 18” x 21” x 5” (45.7 x 53.3 x 12.7 cm) 33” x 24” x 8” (84 x 61 x 20 cm) 33” x 24” x 8” (84 x 61 x 20 cm) 33” x 24” x 8” (84 x 61 x 20 cm) 16 lbs. (7.3 kg) 16 lbs. (7.3 kg) 49 lbs. (22 kg) 49 lbs. (22 kg) 49 lbs. (22 kg) Intel E5300 2.6Ghz Intel E5300 2.6Ghz Intel Xeon Quad-Core Processor Intel Xeon Quad-Core Processor 2 Intel Xeon Quad-Core Processor Fixed, 600W, universal 100/240V Fixed, 600W, universal 100/240V Fixed, 600W, universal 100/240V 2 hot-swap power supplies 650W, universal 100/240V 2 hot-swap power supplies 650W, universal 100/240V − − RAID 1, Hot-Swappable RAID 1, Hot-Swappable RAID 10, Hot-Swappable 4GB (1 x 4GB) DDR3 1333MHz 4GB (1 x 4GB) DDR3 1333MHz 4GB (2 x 2GB) DDR3 1066 MHz 4GB (2 x 2GB) DDR3 1066MHz 4GB (2 x 2GB) DDR3 1066MHz 320GB SATA-II, 7.2K RPM 320GB SATA-II, 7.2K RPM 2 500GB SATA-II, 7.2K RPM 2 160GB SATA-II, 7.2K RPM 4 146GB SAS, 15K RPM 3 Intel Gigabit Ethernet / 1 RS-232 (DB-9) Serial Port 3 Intel Gigabit Ethernet / 1 RS-232 (DB-9) Serial Port 4 Intel Gigabit Ethernet / 1 RS-232 (DB-9) Serial Port 4 Intel Gigabit Ethernet / 1 RS-232 (DB-9) Serial Port 4 Intel Gigabit Ethernet / 1 RS-232 (DB-9) Serial Port Anti-Spam / Anti-Virus / Anti-Malware Blended Threat Prevention Reputation Enabled Defense Spam Dictionaries Pattern-based Message Filters Message Quarantine Inbound Attachment Control URL Filtering* Cloud-based Web Reputation Services* Uncategorized Web Content Filtering* Acceptable Web Usage* Web Application Control* CHASSIS/PROCESSOR Form Factor Shipping Weight CPU Power STORAGE RAID Memory Hard Disk Drives PORTS Ethernet / Serial THREAT PROTECTION WEB SECURITY (subscription-based) Web Traffic Enhancements* Web caching / large file downloads with rapid scan / streaming media control / traffic management and clustering DATA LOSS PREVENTION Pattern-based Content Rules TLS / Message-level encryption** TLS / Message-level encryption** TLS / Message-level encryption** TLS / Message-level encryption** TLS / Message-level encryption** Compliance Dictionaries Objectionable-Content Filtering Transparent Remediation Encryption Additional Capabilities MANAGEMENT & REPORTING REDUNDANCY SUPPORT AND MAINTENANCE *Available for all XCS models with a WatchGuard XCS Web Security Subscription. DLP Wizard / Outbound content and attachment scanning / outbound attachment control / document fingerprinting and data classification Centralized management / archiving (third party) / on-box reporting / user-based reporting / messaging logs / customizable granular policies, including time-based web access policies and IP-based policies / customizable granular reports Message-level redundancy / on-demand clustering / geographical redundancy / queue replication (hardware redundancy available on 770R, 970, and 1170 models only) All XCS models include LiveSecurity Plus for 24/7 technical support, hardware warranty, and software updates **Available for all XCS models with a WatchGuard XCS SecureMail Email Encryption Subscription. ©2012 WatchGuard Technologies, Inc.