Kaspersky
Security for Mail Server
Building resilience against the number one attack vector
Email is the primary attack vector threatening business IT security. Attackers have increasingly sophisticatedways to infiltrate organizations through mail-based attacks, resulting in financial, operational and reputationallosses. To counter these developments, businesses need to think about resilience as well as protection.
By optimizing your resilience and minimizing your attack surface, you can make your business a less attractive
and even unfeasible target for attackers – regardless of whether your company operates an on-prem, cloud or
hybrid emailing infrastructure.

Build up your resilience at the number
one entry point for attacks

Primary vector for databreaches
In2019, we blocked• According to Verizon’s Data Breach
Investigation Report (DBIR), Social
Engineering is the most common
pattern resulting in a data breach.
• The report also states that“…phishing remains one of the top
Action varieties in breaches and has
done so for the past two years”

Kaspersky Security for Mail Server applications help build resilience to mail-based attacks by:nearly half a billionattempted phishingattacks

Identifying and ﬁltering out suspicious or unwanted
mail at gateway level
Most mail attacks only begin to activate at endpoint level – Kaspersky Security for Mail
Server sets out to stop them long before they get that far. Our award-winning protection
strengthens your resilience by detecting and intercepting attacks right at the beginning of
the killchain, before they can breach your perimeter and head for your endpoints and users.

Source: Verizon Data Breach

Investigation Report

Swiftly and accurately processing legitimate emails
The core role that email plays in business communications means that security
processing has to be fast, agile and accurate – without impeding legitimate
communications. Kaspersky Security for Mail Server offers the most effective
protection technologies in the industry against everything from phishing emails andspam to Business Email Compromise (BEC) attacks and ransomware, with near-zero
false positives, enabling legitimate emails to travel uninterrupted.

Protecting email beyond the gateway
Kaspersky Security for Mail Server detects malicious or undesirable content not only at
the gateway, but also at the level of individual Microsoft Exchange Server mailboxes –or/and Microsoft Exchange Online. Delayed phishing attacks designed to evade
gateway level countermeasures, BEC messages generated after account takeovers,and insider threat scenarios that need never pass through the gateway – all these canbe identified and eradicated, making server mailbox protection a ‘must-have’.
User visits emailed fraudulent/malicious URL

MAIL SERVER
INFRASTRUCTURE
Phishing
WebsiteUSER

Unwanted ormalicious email

Stolencredentials

EmailGateway / MTAHACKER

MailboxServerC&CServer!!!
InternetMail server
Email-borne infection results in a data theft

The email-based threat model

Restricted content
transmission

Key features
Kaspersky
Security Network
EXPERT
supervision

Al-assisted threatdata processing
Kaspersky
Security Awareness
HACKER

USER

Secure EmailGatewayInternet

Kaspersky
Endpoint Securityfor Business

Protected email
server!!!

Unwanted ormalicious email

Restricted content
transmission

Kaspersky
Anti Targeted Attack
Platform

Kaspersky
Security forMail Server

How Kaspersky Security for Mail Server counters email-borne cyberthreats

Multi-layered malware
protection

Breadth of scenarios:
one license for all

Multiple security layers are capable ofstopping the most complex email-borne
malware – including spyware, wipers,
miners and ransomware- all of which
are often spearheaded by targetedphishing. Reputational data from thecloud, precise detection, cloud andon-prem machine learning models,
globally acquired threat intelligenceand exclusive research data combine toensure one of the best detection-tofalse-positives ratios in the industry.

A single product license covers aunique variety of scenarios – including
boosting the protection of your preexisting emailing infrastructure orbuilding a new, secure one. A range ofemailing architectures encompassing
Linux- or Windows-based, comprisingon-prem, virtualized, cloud or a
combination of these, it is all covered ina single Kaspersky product

Countering Business
Email Compromise(BEC)

Sandboxing

A dedicated machine learning-based
detection system, with algorithmic
models updated regularly with new
scenarios, processes a number ofindirect indicators, enabling the system
to block even the most convincing
fake emails. Support for senderauthentication mechanisms such as
SPF / DKIM / DMARC helps protect
against source spoofing – especiallyhelpful for withstanding Business EmailCompromise (BEC) scenarios.

To protect against even the mostsophisticated, heavily obfuscatedmalware, attachments are executedin a safe emulated environment
where they’re analyzed to ensurethat dangerous samples aren’t let
through into the corporate system.
For Kaspersky Anti Targeted Attack
users, integration adds “detonation” ina lifelike external advanced sandbox
environment– providing much deeper
levels of assessment and dynamicanalysis.

Automated anti-spam(with content and source
address reputation)
Kaspersky’s anti-spam system
uses smart engines to minimize thepossibility of false positives as they
continuously adapt to changes inthe spammers’ techniques. Globallycollected reputation data is processedin the cloud and used to feed AI
aspects, providing a solid basis for
efficient spam detection.

Advanced anti-phishing
Kaspersky’s advanced anti-phishingsystem uses Neural Network based
analysis to create effective detection
models. With over 1,000 criteria used –including pictures, language checks,
specific scripting – this cloud-assisted
approach is supported by globallyacquired data about malicious andphishing URLs and IP addresses toprovide protection from both known
and unknown/zero-hour phishingemails.

Blocking unsafe
content transfers
Kaspersky’s configurable attachment
filtering system can detect filedisguises commonly used bycybercriminals, identifying potentially
dangerous attachments. DLP-likefunctionality allows the administrator toconfigure complex rules for preventing
data leakage, armed with the power ofRegular Expressions and benefittingfrom a plethora of best practices
accumulated by the community.

Scaling and resilience
The solution supports clusteredarchitectures in order to tackle growing
traffic loads and ensure the resilienceof the entire email security system incase of a disaster. To ensure that nocritical data is lost due to disinfection,
deletion or a technical mishap, original
messages can be backed up according
to admin-specified criteria, giving riskfree access.

Beyond the gateway –mailbox-level resilience
Mailbox-level technologies include:
Email rescanning – addressing
scenarios like delayed phishing URL
activation.
Anti-spam shadow quarantine –ideal for low-tolerance environments.
Borderline-suspicious emails canbe held in temporary quarantine
until sufficient evidence has been
accumulated by Kaspersky Security
Network for a judgement to be made onwhether delivery is definitely safe.

Flexible rules allow the administrator
to set up policies combining multiple
criteria and to track any violation
attempts. For an all-in-one Secure
Email Appliance, specialist instruments
to configure non-security aspects ofthe system are offered in the same
management console. Role-based
Access Control means separate
administrators can be allocated todifferent areas of the business or todifferent clients.

Mail Gateway

Killchain

Targeting

Delivery

Mailbox/endpoint• Contact is possible• Social engineering may work
• Blocked by Mailbox security or EPP• Business process may be affected

Deception& click

A clear user-friendly web-based
interface enables your administrator
to monitor levels of corporate mailprotection, with tools including:• Configurable dashboard.
• Convenient event viewer withpowerful Boolean event search.
• Event export to your SIEM system.
• In-console or emailed reports.
• System health monitor.

eXtended Detection &Response

Management andaccess control• No contact with the user or endpoint• No impact from social engineering• Business process not affected

Visibility

Execution

Integration with Kaspersky Anti
Targeted Attack gives you accessto a stack of expert-level detection
technologies comprising an advanced
sandbox, mobile threat analyzer, special
data feeds containing C&C data andmore. After successful detection,a targeted attack can be disrupted
by blocking its components throughfinding and isolating them acrossdifferent infrastructure layers, using
XDR cross-product scenarios.

Network/multi-source• Contact made• Impact from social engineering (if any) is confirmed• Threat’s 1st stage malware is not blocked• Threat is detected by advanced threat detection• Business process affected

Payload(optional)Act

Risk ofcompromiseCountermeasures:
Falls into the scope of email security
Relies on email security
Out of the scope of email security

Prevention on delivery
Reputation-based detection
Cloud blacklisting
Cached threat intelligence
Mail authentication mgmt.
Anti-spam, anti-phishing & BEC
Content filtering
Sandboxing

Prevention on exposure
Mailbox re-scanning
Anti-spam shadow quarantine
Security training
Endpoint behavioral detection
Endpoint URL reputationEndpoint web and app control

Post-execution detection
Account takeover detection
XDR (eXtended detection & response)
EDR & MDRIDSNetwork reconfiguration
Next-gen firewall

The role of Mail Security at different stages of the cyberattack killchain

Get on board with Kaspersky
Security for Mail Server
You may also want to consider…
Kaspersky Security for Internet
Gateway — complement your email
perimeter protection with equally powerful
web gateway security — also included in
Kaspersky Total Security for Business.
Kaspersky Endpoint Security forBusiness — our leading endpoint security
solution, delivering the most tested andmost awarded endpoint protection on themarket.
Kaspersky EDR Optimum — our new
flagship Kaspersky endpoint security
solution, offering enhanced visibility
and detailed information about malware
detections, supplemented with root cause
analysis and automated response options.

Kaspersky Security for Mail Server is just one of a range of products and solutions from
Kaspersky, developed in-house, drawing on 20+ years of focused expertise, built froma single code base and designed to intermesh seamlessly to provide a comprehensive
and unassailable security platform.
If you already use Kaspersky Endpoint Security for Business, installing Kaspersky
Security for Mail Server means you can rest assured that your mail gateway protection
will deliver the same high-performance standards as the rest of your security.
If you don’t, now could be a good time to strengthen your perimeter and build yourresilience by installing Kaspersky Security for Mail Server alongside, or instead of, yourcurrent email protection.

How to buy

Kaspersky Security for Mail Server is sold as astandalone targeted solution or as an add-on available
only to Kaspersky Endpoint Security for Businesscustomers.

Applications
inside• Kaspersky Security for Linux Mail Server• Kaspersky Secure Mail Gateway• Kaspersky Security for Microsoft Exchange Server• Kaspersky Security for Cloud Mail

Licensing

Kaspersky Security for Mail Server is available under:• Annual license• Monthly subscription

Try Before Buying
Explore Kaspersky
Security for Mail
Server now with our
free 30-day trial.

Cyber Threats News: www.securelist.com
IT Security News: business.kaspersky.com
Kaspersky technologies: kaspersky.com/technowiki
IT Security for SMB: kaspersky.com/business
IT Security for Enterprise: kaspersky.com/enterprisewww.kaspersky.com© 2022 AO Kaspersky Lab. Registered trademarks andservice marks are the property of their respective owners.

Request a Call

Still feel you need more
information? Please ask
us to call you!

We are proven. We are independent. We aretransparent. We are committed to building a safer
world, where technology improves our lives. Whichis why we secure it, so everyone everywhere has theendless opportunities it brings. Bring on cybersecurity
for a safer tommorow.
Know more at kaspersky.com/transparency

Buy From a TrustedPartner
Feel like you’re ready tobuy? Find a local reseller
to help you with yourpurchase.