FortiMail垃圾邮件案例

目录第一章邮件系统的安全现状 (2)第二章总体安全解决方案 (3)2.1解决方案的拓扑 (3)2.2功能介绍 (4)2.2.1 多种强大的垃圾邮件过滤技术 (5)2.2.2 网关、透明和服务器三种模式部署灵活 (7)2.2.3 域和Access List两种方式简化配置 (9)2.2.4 策略结合保护内容表方式部署 (10)2.2.5 直观的邮件队列 (11)2.2.6 多种垃圾邮件处理方式 (12)2.2.7 即时的垃圾邮件统计与分析 (14)2.2.8 强大而且详尽的报告 (15)2.2.9 邮件存档 (17)2.3技术参数 (17)第三章FORTINET及产品介绍 (18)3.1公司介绍 (18)3.2认证证书 (19)第四章总结 (23)地址：广州市越秀区寺右新马路111-115号五羊新城广场1421室第一章邮件系统的安全现状(此处客户网络情况介绍)对于****的管理团队来说，邮件已经成为商务活动和政务活动的关键网络应用。

垃圾邮件制造者和攻击者使用邮件作为最普遍的攻击工具轰炸用户，发送无用的邮件和用感染病毒、蠕虫、木马的邮件攻击企业资源，盗窃信息。

这些攻击包含有新一代有害的应用攻击，比如钓鱼和间谍软件等。

随着2006年每天全球的垃圾邮件流量达到300亿封，企业的邮件服务器和用户的邮箱很快就被压垮了，浪费了企业的资源和降低了员工的工作效率。

打击垃圾邮件和保障邮件的完整性和干净变得比以往更为重要。

地址：广州市越秀区寺右新马路111-115号五羊新城广场1421室地址：广州市越秀区寺右新马路111-115号五羊新城广场1421室第二章 总体安全解决方案2.1 解决方案的拓扑反垃圾邮件网关的部署图部署说明：我们推荐采用Fortinet 公司的Fortimail400产品，它是业内唯一一款能够以透明模式部署的反垃圾邮件产品，将其部署与邮件服务器前可以实现以下功能：1、 实现反垃圾邮件功能，FortiMail 的反垃圾邮件库是由分布于全球各地的专家团队共同予以维护的，对处理各种语言的垃圾邮件具有很好的效果。

一个在瑞信银行工作的白领给所有的朋友群发邮件，怒斥丈夫和小三背叛自己的各种行为；丈夫和小三分别回信，让此女停止纠缠速速离婚……本来是一桩常见的斗小三狗血事件，但是重点在于，三位主角均是金融业高级白领，来往信件皆为英文，各种优雅的语法被用作三角恋斗法，让网友大开眼界，将此称为“瑞信女斗小三”事件，也叫渣打邮件门。

以下为渣打邮件门全文,首先是女主角给所有人群发的：Dear friends,After 13 years and 2 beautiful children together, Yale and I haveparted our ways. Yale moved out last week.接下来是女主角给小三写的：Dear Diane/Tao Dan Yang,Over the past couple of years, you knew everything about my family.You knew when my kids had their soccer tournaments, you knew when they had their swimming practices. You even knew their baby nicknames. On December 18th, 2009, on a noon flight, I took my children to the U.S. for Christmas vacation. On the very same day, December 18th, 2009, on an afternoon flight, you and Yale took off for the beaches of Phuket and shopping streets of Bangkok for Christmas vacation. Diane, as a fellow woman, I often wondered if the level of ecstasy this vacation had brought you equates to the level of devastation this vacation had brought to my children and me. Diane, I often asked myself what was it like for you to sleep in the arms of another woman's husband, other children's father? I wondered if you ever thought about us, the children and the wife, that we are made of flesh and blood, that we have feelings, that we could get hurt, very hurt, devastatingly hurt.I pondered if you knew you were destroying a family, if you knew your joy would bring endless tears to us.We went to Beijing last week for Chinese New Year. Your clothes were in our Beijing home. My son screamed:" Mommy, don't touch those, they are disgusting! Set them on fire, burn them to hell. They are the devil's cloth!" My children are hurt. My daughter, 9 years old, now says "Mommy, I don't ever want to get married." My s on, 8 years old, says "Diane is our Voldemort!" The psychological damage this affair has done to my children is catastrophic. They are forever emotionally damaged. With this, I announce you the winner.How do I feel, Diane? This affair is like 10 thousand knives stabbing and chopping my heart all at once. This affair has left me in so much pain that I don't know how to heal myself. This affair has taught me tear supply can actually be infinite. This affair has crushed me, leaving me a corpse walking around with no heart. I don't know how to deal with this kind of pain. I don't know how to move on. But I have children. I must move on.Diane, I pray to God that you will never have to experience this kind of betrayal and hurt. I wish you and Yale a happy life together because, after all, we are all women and we all deserve to be happy.With sincere regards,Lily渣打邮件门小三的精彩回复：Dear Lily,I understand that you are going through a difficult time in your personal life, and I sincerely hope that you will find a way to deal with it that is the best for you and your children.I do understand how you feel. I also understand, however, that a marriage can only break apart from the inside. I do not appreciate your attempt to smear my reputation and paint me as the home wrecker. You know as well as Yale does that your marriage fell apart long before Yale and I even met. Whether or not I am in Yale's life has nothing to do with the eventual outcome of your marriage. I am sure you understand this as well, but you nonetheless sought to burn me on the cross as the scapegoat for your failed marriage, which I do not believe is a mature thing to do.Your description of the emotional damage your children have suffered is disturbing indeed.I cannot help but wondering what you have been telling them. I would think that a mother's first and foremost priority is to protect her children from any emotional damage, rather than using them as bargaining chips or as props to win public sympathy. Yale is the children's father and will always be. I am sure he will always love them and be the best father he can be to them. Wouldn't it make more sense, for the sake of the children's wellbeing, to emphasize to them that both their parents will always love them even though one parent will not be living with them all the time? I do not see what benefit there could possibly be to teach the children to hate their own father.You asked me how it was like to sleep in Yale's arms. I also wanted to ask you, Lily, why would you want to hang on to someone who clearly does not want to be with you at all? Lily, you are intelligent, highly-educated and you have a high-paying and well-respected job. So why did you spend so much time and energy trying to force someone who does not care about you to stay with you? As a fellow woman I want to ask you this, don't you think you deserve better? If there's anything that is worse than sleeping in the arms of another woman's husband, it is sleeping in the arms of someone who resents you, cannot stand you and wants to run away from you whenever he gets a chance. So Lily, why would you want to put yourself in that situation? Once again, don't you think you deserve better?I sincerely hope that the pain you are currently feeling will subside soon and you can turna new leaf in your life. Please remember, you can lose a job, you can lose a spouse, but you should never lose yourself. And please, do not vent your negative feelings on your children. They are innocent. Please always keep in mind their best interests rather than your own. You deserve true happiness, and I hope that you will find it soon.Best regards,Diane。

Securing Your Enterprise Office 365 with FortiMailThe appeal for Office 365 from Microsoft is readily apparent: nn A full suite of mission-critical business applicationsnn A “no operations” modelnn Always-on cloud distributionnn Disaster recovery and data security built inPlus many others. And Microsoft has done a first-rate job of making Office 365 both a complete solution and one that is easy to adopt. Microsoft has even built in layers of security—starting with physical security at their world-class data centers with layers on top for DDoS, encryption, anti-malware, and other critical security capabilities.While Microsoft has delivered a full-suite solution in Office 365, many organizations have a need for a “next-generation” level of security for their Office deployment. With the release of FortiMail in Azure (https:///en-us/marketplace/partners/ fortinet/fortinet-fortimail/) joining Forti M ail Cloud, not only is this level of security available but it is ready to deploy from directly within Microsoft’s Cloud environment.FortiMail Complements Office 365 Security in Microsoft’s CloudOne of the driving use cases for FortiMail has been added protection of Microsoft Office and Office 365. For customers looking for advanced threat protection a nd compliance, there’s a proven partnership with FortiMail + Microsoft Office solutions. What FortiMail brings to your Office 365 environment is:nn Top VBSpam + an ti-spam and anti-phishingnn NSS Labs Recommended detection and preventionnn Granular-level details on threats—including notifications on emails/docs that have been cleansednn Identity-based encryptionnn Predefined dictionaries that are customizableFortiMail is an integrated component of the Fortinet Security Fabric which ensures that not only can advanced email attacks be stopped at an early stage, but intelligence about the full attack lifecycle can be dynamically generated and distributed throughout the organization. And, because it’s delivered by Fortinet, FortiMail is backed by Fortinet’s industry-leading FortiGuard threat research, so you can rest easy knowing your mission-critical business applications are protected.Why FortiMail and Office 365?When Fortinet embarked on designing and developing FortiMail, the foundational design point was to ensure that communication and documents reach their destinations in a timely manner. Once this was established as the foundation, Fortinet went about building a security solution that fully protected customer communication without compromising the speed of business needed. The end result is an enterprise-class email security solution built with a“Low-Impact Scanning” approach: 1SOLUTION BRIEF: SECURING YOUR ENTERPRISE OFFICE 365 WITH FORTIMAILWhat’s the Catch—Must Be Difficult to Set Up, Right?Answer: No—the FortiMail + Office 365 setup is easy and straightforward. FortiMail has been working with Microsoft Office products for years, and FortiMail can be easily added either during the initial Office 365 setup or as an add-on later. Below is one reference architecture for the FortiMail + Office 365 solution. As you can see, not only is the next-generation protection available but all of the near-instantaneous processing takes place within Microsoft Cloud.Copyright © 2018 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.GLOBAL HEADQUARTERS Fortinet Inc.899 Kifer RoadSunnyvale, CA 94086United StatesTel: +/salesEMEA SALES OFFICE 905 rue Albert Einstein Valbonne06560, Alpes-Maritimes, FranceTel +33 4 8987 0500APAC SALES OFFICE 300 Beach Road 20-01The Concourse Singapore 199555Tel: +65.6513.3730LATIN AMERICA SALES OFFICE Paseo de la Reforma 412 piso 16Col. Juarez C.P . 06600 México D.F.Tel: 011-52-(55) 5524-8428December 12, 2018Microsoft runs their software as a service (SaaS—Office 365 is a SaaS service) and their infrastructure as a service (IaaS—Microsoft Azure delivers both IaaS and platform as a service) on logically and physically separated infrastructure. However, all of Microsoft’s Cloud operates within a single autonomous system (AS). With this design, your information is secure, is delivered rapidly, and never has to leave Microsoft’s world-class network. Our FortiMail + Office 365 Cookbook can be found here: /how-to-integrate-fortimail-into-office-365/.You can find our FortiMail in A zure here: https://azure. /en-us/marketplace/partners/fortinet/fortinet-fortimail/.For more information on our Microsoft Azure program @Fortinet, please visit our Azure site: https:///azure .FortiMail Excels with Independent TestingFortinet is committed to rigorous independent testing and FortiMail is the most validated email security in the industry. It routinely earns top marks in Virus Bulletin VBSpam testing, ICSA ATD Email Certification, NSS Labs Breach Prevention Group Tests and SE Labs Email Security Services Testing. For more detail visit our certifications page: https:///corporate/about-us/product-certifications.htmlAbout Fortinet FortiMailFortiMail is provided by Fortinet, Inc., ( ),a recognized global security leader. Fortinet’s FortiMail Secure Email Gateway provides protection to organizations against message-born threats, and it provides a turnkey approach to secure and clean corporate email. FortiMail provid es high-performance mail routing and security by utilizing a range of high-accuracy, anti-spam filters coupled with FortiGuard’sindustry-leading antimalware and advanced threat protection s . This is complement by a full range of data controls- includingDLP, email encryption and more.。

Fortinet技术白皮书Version 5.02006.03目录1．公司介绍 (5)2．产品定位 (5)2.1产品理念 (5)2.2产品概述 (6)2.3系统结构 (6)3．功能列表 (7)4．FORTIGATE系列性能 (9)4.1F ORTI G A TE-50A (9)4.2F ORTI G A TE-60 (9)4.3F ORTI W I F I-60 (10)4.4F ORTI G A TE-100 (10)4.5F ORTI G A TE-100A (10)4.6F ORTI G A TE-200 (11)4.7F ORTI G A TE-200A (11)4.8F ORTI G A TE-300 (11)4.9F ORTI G A TE-300A (12)4.10F ORTI G ATE-400 (12)4.11F ORTI G ATE-400A (13)4.12F ORTI G ATE-500 (13)4.13F ORTI G ATE-500A (13)4.14F ORTI G ATE-800 (14)4.15F ORTI G ATE-800F (14)4.16F ORTI G ATE-1000A/FA2 (15)4.17F ORTI G ATE-3000 (15)4.18F ORTI G ATE-3600 (16)4.19F ORTI G ATE-5020 (16)4.20F ORTI G ATE-5050 (17)4.21F ORTI G ATE-5140 (17)4．其他产品 (19)4.1F ORTI M ANAGER－集中安全管理平台 (19)4.2F ORTI C LIENT－主机安全软件 (19)4.3F ORTI A NALYZER－集中日志报告系统 (19)4.4F ROTI R EPORTER －安全分析报告软件 (19)4.5F ORTI M AIL －高性能邮件安全平台 (19)5．FORTIGUARD 安全服务系统 (21)5.1F ORTI P ROTECT －全球安全防护服务体系 (21)5.3F ORTI G UARD入侵检测和防御服务 (21)5.4F ORTI G UARD W EB内容过滤服务 (21)5.5F ORTI G UARD反垃圾邮件服务 (21)6. FORTINET产品特色 (21)6.1F ORTINET提供了网络安全的整体解决方案 (21)6.2F ORTINET产品技术领先 (22)6.3F ORTINET产品功能齐全 (22)6.4F ORTINET产品线完善 (22)6.5F ORTI G A TE产品应用面广适合各种领域 (22)6.6F ORTINET设计的ASIC独特 (22)6.7F ORTI G A TE作为防病毒网关产品支持多种I NTERNET协议 (22)6.8F ORTI G A TE支持中文管理界面 (22)6.9F ORTINET有高端产品适合运营服务供应商应用 (23)6.10F ORTINET服务体系完善 (23)6.11F ORTI G ATE产品性价比高 (23)6.12F ORTINET产品可以为企业带来良好的投资回报率 (23)6.13F ORTINET产品在中国得到广泛应用 (23)6.14F ORTINET获得多项国家权威机构论证证书和销售许可证 (23)6.15F ORTINET产品在中国业界获得多项奖项 (23)7．竞争分析 (25)1.F ORTI G ATE作为防火墙产品与其它同类产品相比优势突出 (25)2.F ORTINET在网络安全市场上竞争对手甚少 (25)3．F ORTINET公司引领统一威胁管理市场潮流 (25)4．市场需要UTM的理由 (25)8. 销售许可 (26)9．典型应用 (27)9.1中小型企业防火墙应用 (27)9.2中大型企业防火墙应用 (28)9.3分布型企业防火墙应用 (28)9.4校园网络安全部署应用 (29)10．成功案例 (30)10.1应用案例1 (30)10.2应用案例2 (30)10.3应用案例3 (31)10.4应用案例4 (32)10.5应用案例5 (32)10.6应用案例6 (33)10.7应用案例7 (34)11．核心技术 (37)11.1技术要点 (37)11.2病毒防火墙新理念 (37)11.3基于网络的IDP功能 (37)11.4集成VPN的安全网关 (37)11.5ASIC加速和实时操作系统 (37)11.6独特的内容过滤 (38)11.7动态威胁防御系统 (38)11.8分区域安全管理 (38)12．技术支持 (39)1．公司介绍美国Fortinet(飞塔)公司是新一代网络安全防御技术的前锋，引导着网络信息安全发展的潮流。

梭子鱼垃圾邮件防火墙应用案例梭子鱼垃圾邮件防火墙应用案例TCL集团概况:TCL集团股份有限公司创办于1981年，是一家从事家电、信息、通讯、电工产品研发、生产及销售，集技、工、贸为一体的特大型国有控股企业。

经过20年的发展，TCL集团现已形成了以王牌彩电为代表的家电、通讯、信息、电工四大产品系列。

并开始实施以王牌彩电为龙头的音视频产品和以手机为代表的移动通信终端产品的发展来拉动企业增长的战略。

二十年来，TCL发展的步伐迅速而稳健，特别是进入九十年代后，连续十二年以年均50%的速度增长，是全国增长最快的工业制造企业之一。

公司一直以“研制最好的产品，提供最好的服务，创建最好的品牌”三个最好作为竞争策略，业务上不留空白。

用户需求:TCL集团公司拥有员工3万余人，活跃邮箱2万6千个。

TCL在工业制造企业中是信息化建设的领军人，公司早在九十年代就建立了较为完整的网络安全系统，并设立专门的部门负责整个集团的网络设备的安全运行。

在坚持企业信息化管理过程中，垃圾邮件一直是网络管理员和集团领导头疼的问题。

据统计，集团中每个邮箱每天收到百余封垃圾邮件，整个集团每天收到的垃圾邮件有近200万封。

数量之大，增加了网络负载。

集团对于病毒黑客程序进行严密防护，防火墙，防毒网关等一应俱全，大部分的病毒和恶意程序都被挡在了局域网之外，但仍有相当多的病毒夹杂在邮件中进入企业内部，造成安全隐患。

防火墙之类的网关设备对于邮件扫描的能力有限。

部署防垃圾邮件解决方案成为目前TCL急待解决的安全问题。

集团曾试用过很多产品，但在集团中的实施效果并不理想。

且公司在使用软件还是硬件解决方案的问题上还犹豫不决。

解决途径:博威特公司是专为大企业提供垃圾邮件解决方案的厂商，虽说是国内的反垃圾邮件市场近期出现的黑马，但在世界范围，已经是拥有20，000用户的业界领袖。

其反垃圾邮件技术更获得美国专利许可。

梭子鱼垃圾邮件防火墙产品有多达五个型号，可以供各种规模的企业选用。

反垃圾邮件网关-FortiMailSE Hunk垃圾邮件分类●恶意垃圾邮件邮件包括恶意网站链接, 色情、暴力、安全威胁等电子邮件●欺诈邮件邮件包括钓鱼网页, 虚假网站信息,引导客户输入个人信息●广告性质的垃圾邮件由不同组织大量寄送的广告邮件,营销邮件●社会性垃圾邮件社交性邮件容包含笑话、网站链接甚至色情●垃圾图片邮件图片形式的垃圾信息2003年，美国国会通过了CAN-SPAM(Controlling the Assault of Non-Solicited Pornography and Marketing，控制硬推式色情图片和营销手段)法案，正式开始监控失控的垃圾邮件行业。

法案要求个人和公司在大量发送邮件时遵守一些要求，而且必须让用户能够退订。

垃圾邮件的危害-硬推式电子邮件●Anti-spamsingle post to all messagebase●降低生产力员工需要浪费时间来阅读和删除垃圾邮件●不必要的资源消耗⏹垃圾邮件加重Email服务器的负担⏹硬盘空间、CPU利用率⏹垃圾邮件拥塞导致更长的响应时间●消耗带宽影响关键商业应用(VoIP, 视频会议)●成为安全威胁的传播媒质病毒, 蠕虫, 木马, 间谍软件, 网络欺诈……●Email地址簿被垃圾邮件强占利用垃圾邮件已经不再仅仅是一个令人厌烦的东西，它已经成为一个危险的传播威胁的安全隐患，而目的往往是经济利益驱动的…Fortinet 公司概况全球领先的专业安全ASIC 技术提供商Array全球最大的专业网络安全厂商1000+名员工/ 超过500+工程技术人员2000年成立发展最快的专业安全公司全球化的销售服务体系( 美国，欧洲，亚洲)全球30+分支机构全球5000+渠道全球75,000+ 最终客户(including the majority of the Fortune Global 100)IPO Nov 2009 -FTNT2008 sales of ~$212MM (36% YoY growth)4FortiGuard全球安全响应中心100+ 安全响应工程师提供24X7安全特征库更新⏹美国⏹加拿大⏹英国⏹法国⏹中国⏹马来西亚⏹新加坡⏹日本•SLA 3小时攻击库特征更新•24X7全球安全实验室•中国天津病毒安全中心Anti-SpamAnti-Virus21%9%9%7%7%2%2%2%2%1%38%1 W32/Bagle.DW-mm2 W32/Netsky!similar3 W32/Grew.A!wm4 HTML/Iframe_CID!exploit5 W32/Bagle.DY-mm6 W32/Bagle.DX-mm7 W32/MyTob.fam-mm 8 W32/MyDoom.M-mm9 W32/Mytob!similar 10 W32/MyTob.BH.fam-mm. [Non Top 10]Application Attack Database Vulnerability Trackingedonkeybit_torrentgnutellaMicrosoft.IE.CreateTextRange.Remote.Code.Executionoverlong_uriSlammerMS.Windows.ASN.1.Bitstring.Heap.Overflow.HTTP.BMS.Exchange.XLINK2STATE.CHUNK.OverflowCyberKit.2.2Apache.CGI.Byterange.Request.DoS全球用户的选择财富500强前10名中的7家世界500强中EMEA区前10名中的5家世界500强中亚太区前10名中的7家世界500强中商业及储蓄银行前10名中的6家世界500强中航空航天及国防前10名中的7家世界500强中IT服务前5名中的2家可信赖的合作伙伴•公认的行业领袖•2000年至今，Fortinet已经获得超过100项公司及产品奖项•IDC：2008年全球UTM销量冠军•Frost & Sullivan：2008年全球UTM市场领导者•Frost & Sullivan：2008年全球安全竞争策略领导者•SC Magazine：2008年“最佳集成安全解决方案”读者信任奖•多项权威认证的安全方案•6项ICSA认证（防火墙、防病毒、IPS、IPSec、SSL、反垃圾邮件）•政府认证（FIPS-2、Common Criteria EAL4+）•ISO 9001Fortinet的安全理念•整体安全•实时更新•较低的TCO•更贴近客户的需求•适合于各种规模的用户：•中小企业(SMBs)•大型企业•服务提供商•主要优点：•全面防御各种与Email 相关的攻击和威胁•避免Email 系统的资源浪费•保护内网带宽•高级内容存档功能•提高生产力•单台设备实现保护、隔离、存档等全部功能FortiMail 高性能多层次Email 安全平台，最大程度地保护用户避免遭受Email 安全威胁，并顺应安全一致性要求。