Home Page | Skip to Navigation | Skip to Content | Skip to Search | Skip to Footer

OPSEC Partners

PineApp Ltd.

Product Version Certified: IPRep-SeCure
Certified for use with: Check Point Next Generation with Application Intelligence

Product Description: In its defense against Spam and email borne Malware, PineApp’s IP Reputation System analyzes hundreds of millions of IPs in real-time. IPRep-SeCure determine whether an SMTP connection is originated from a high-risk IP – and blocks the connection.

IP Reputation is available as an additional layer in the Mail-SeCure system or as a stand-alone product.
 
Key Features and Benefits
OPSEC Integration		 Clear Arbor
 

Company Description: PineApp, a leader in securing networks and email systems, offers comprehensive appliance solutions for small, medium and large organizations.

In the past five years, PineApp has specialized in email and content security systems and already has significant presence in more than 50 countries. This specialty enabled PineApp to establish itself as a pioneer in developing unique and innovative engines to fight the different threats.

PineApp Mail-SeCure is an email perimeter security appliance that protects all sized organizations from both targeted and non-targeted email-related threats. This appliance also provides enforcement of the organization's management policy.
 
Key Features and Benefits
  • Increases Security: The majority of malicious mail is blocked at the perimeter, resulting increase of organization’s security.
  • Saves Bandwidth, Enhancing Performance: Bandwidth requirements are significantly reduced, guaranteeing better quality of service.
  • Reduces System Resources: Eliminates the need for additional hardware and software, due to mail traffic growth.
  • Eliminates False Positives: by using a wide range of techniques such as temporary failures, false positives are virtually eliminated.
  • Improves Detection Rate: by using in conjunction with other Anti-Spam technologies a higher detection rate is achieved.
  • Global Email Coverage: Billions of messages are classified across global networks and geographies.
  • Global Rate Limiting: Fights distributed Zombie attacks. Each individual Zombie attacks thousands of targets, but sends just a few messages to each individual location.
  • Accurate Risk Level Classification of Email Senders: Advanced techniques are implemented to provide highly accurate spam risk and classification levels.
  • Protect your users: Eliminate the risk of your users receiving web-based Malware by blocking them from surfing to Zombie based web-sites.
  • Seamless Integration: PineApp IP Reputation system can be easily integrated FireWall-1® using SAM. When an SMTP session is created, FireWall-1® validates the IP against PineApp’s IP Reputation system and applies the policy given by the IP Reputation System. All logs are written on FireWall-1® thus preventing additional TCO.
  • Support for High-Scalability Scenarios: Reduced network load enables performance incensement.
  • Risk-based Dynamic Policy: Commtouch has classified over 50 million IP addresses in its database, identifying the majority of Zombies and other generators of high risk email and http traffic. PineApp IP Reputation uses various flow control policies in order to allow or reject high risk IP addresses, saving organizations from unwanted traffic
  • Availability: PineApp IP Reputation service is available on PineApp Mail-SeCure products or as a stand-alone product.
OPSEC Integration

When an SMTP connection arrives to the Checkpoint Firewall, Mail-SeCure securely receive quarries from the firewall and VPN systems through the use of the LEA (Log Export API) protocol. Then, based on the reputation of the IP of the SMTP sender, the Mail-SeCure uses the SAM commands to order the Firewall to accept or reject the SMTP connection

Finally, for each SMTP connection, The Mail-SeCure sends the Firewall, using the ELA protocol, the appropriate log (whether the connection was accepted or rejected).

All Check Point events are collected in real time, for use in Security Manager for analysis, alerting, and reporting so that security teams can identify threats and attacks, as well as audit approved activities, within their environment.

The system is capable in handling large amounts of SMTP and is highly reliable.

The following diagram describes the process:

PineApp