Content Security for NotesMail

MIMEsweeper for Domino resides on the Domino server, automatically scanning internal and external Notes mail to detect and remove content security threats.

• identifies and cleans viruses in internal and external Notes mail
• detects malicious mail & button bombs, trojans, hotspots & Lotus Scripts
• breaks down Notes mail into raw data to detect viruses hidden in embedded objects or compressed files
• supports multiple concurrent virus scanners
• scans Notes mail for key words to prevent junk email and potential confidentiality breaches
• stops unauthorized email users and recipients
• allows addition of legal disclaimers by user, group or domain
• quarantines specified file types e.g. executable or oversized files

Content Security for Databases

MIMEsweeper for Domino scans databases for viruses hidden in Notes documents.

• checks databases on local and remote servers
• checks new and modified documents for viruses including replications
• detects and cleans viruses hidden in compressed files and embedded objects
• supports multiple concurrent virus scanners
• quarantines specified file types
• offers flexible disposal of documents e.g. quarantining, deletion or access denial

How Does it Work?

MIMEsweeper for Domino is a security solution that analyzes Domino e-mail and static databases for Content Security threats.

It analyzes the contents of Domino e-mail and validates against an organization’s policy, before allowing it to pass, cleaning it of any threat or blocking it. Databases are checked for viruses, banned file types and file names and if any threats are found they can be removed, cleaned or the file can be archived.

Email Scanning

MIMEsweeper for Domino analyzes e-mail according to an organizations policy.

MIMEsweeper for Domino analyzes e-mail through four key stages:

Stage 1: Policy Identification

Recognition of policy rules as defined by user:

• Message sender and recipient determine policy to be applied
• Application of security operation to each message

Stage 2: Content Disassembly

Identification of content by:

• Recognition of compression, encoding and file types including:
  document, executables, image, sound and video formats
• Detection of custom formats using flexible binary pattern matching
• Recognition of content by file name and extension

Stage 3: Content Analysis

Analysis of e-mail according to policy:

• Scanning by a choice of third party industry virus scanners, and support for multiple concurrent virus scanners
• Cleaning of infected messages
• Text analysis of keywords and phrases in messages
• Management of messages dependant upon attachment types
• Conditional actions based on message size and attachments
• Attachment of customizable text to e-mails in text or RTF e.g. legal disclaimers
• Anti-spam and mail-flood detection
• Detection of malicious code such as Java, VBscript, Notes script
• Full customizable message management using Rules defined by Notes script or executables

Stage 4: Classification

Selection of disposal path for each message

• Unwanted attachment removal
• Archiving and rules-based e-mail storage
• Notification to administrator and/or sender
• Block or deliver e-mail

Database Scanning

MIMEsweeper for Domino analyzes databases on an event or scheduled basis.

Databases are analyzed in three key stages:

Stage 1: Content Disassembly

Identification of content by

• Recognition of key data formats (same formats as e-mail scanning)
• Detection of custom formats using flexible binary pattern matching
• Recognition of content by file name and extension

Stage 2: Content Analysis

Analysis of database according to policy

• Scanning by a choice of major third party industry virus scanners, and support for multiple concurrent virus scanners
• Management of database files by attachment types, file names and extension

Stage3: Classification

Selection of disposal path for each message

• Cleaning of infected messages
• Unwanted attachment removal
• Archiving and rules-based e-mail storage
• Notification to administrator

System Management & Deployment

MIMEsweeper for Domino needs to be deployed on your Domino server. For full content security checking in environments with multiple Domino Mail Servers MIMEsweeper for Domino needs to be deployed on each mail server

• MIMEsweeper for Domino has a fully scalable architecture
• Policies and system configuration can be managed remotely
• Policy databases can be copied to other servers to ensure consistency of policy across the network
• Increased scalability and resilience achieved through multi-threading architecture

Technical Requirement & Recommendations

• Domino Mail Server running Domino R5 (5.02b) or Domino R4 (4.51 to 4.6)
• Hardware specification: As set out by Lotus and is dependent on configuration and number of users
• Requires 500 MB hard disk space
• Microsoft Windows™ NT Workstation or Server version 4.0 Service Pack 5
• Access to CD-ROM or network for installation

MIMEsweeper is a trademark of Clearswift Plc.