Access member only content, take part in discussions with comments on blogs, news and reviews and receive all the latest security industry news directly to your inbox. Join now for free.
A confirmation email has been sent to your email address - SUPPLIED EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @scmagazine.com.au to your white-listed senders.
Mimecast offers its technologies as an appliance and a managed service for smaller enterprises, run from three data centers. The service is almost wholly automated, with clients not expected to do much admin work at all beyond reporting.
The service starts by watching regular outbound mail for a few days to build up a whitelist of email senders known to be valid recipients. Incoming connections are compared to that whitelist so invalid recipients can be filtered, but this needs careful handling for those mail aliases and service accounts that do not generate outbound mail. Indeed, it is probably better served by just integrating with an LDAP server, which the service does support anyway.
Incoming mail is treated in a similar way — if the sender and recipient have not communicated before, it is briefly quarantined while checks ensure the sender is a real mail server rather than a bot. In practice, this should avoid false positives on spammy-looking valid mail-like newsletters.
With no intervention required from users, we were expecting a very simple management GUI, but were astonished at what is actually provided.
Mimecast offers an amazing degree of control over the operation of the service, with policy options on every aspect of mail delivery, handling and management. The array of controls is daunting, but presented in a very effective interface that even includes a fully fledged web mail client.
A massive array of controls can be enforced on message headers and attachments, but there is very little capability for actual filtering on message bodies. This alone lets the service down.
All access is logged, meaning that firms with concerns that mail administrators might access emails they should not can easily conduct audits to check that no inappropriate activity has occurred.
Mimecast deserves kudos for its extensive controls and features. It might be new to the scene, but it has built a product worthy of attention. Unlike many others, 24x7 support is included without extra charge, and long-term archival is part of the service.
To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.