Main Menu
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
SonicWall
  • Products
    • Network Security
      • Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
      • Security ServicesComprehensive security for your network security solution
      • Network Security ManagerModern Security Management for today’s security landscape
    • Advanced Threat Protection
      • Capture ATPMulti-engine advanced threat detection
      • Capture Security applianceAdvanced Threat Protection for modern threat landscape
    • Access Security
      • Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
      • Secure Mobile AccessRemote, best-in-class, secure access
      • Wireless Access PointsEasy to manage, fast and secure Wi-FI
      • SwitchesHigh-speed network switching for business connectivity
    • Email Security
      • Email SecurityProtect against today’s advanced email threats
    • Cloud Security
      • Cloud App SecurityVisibility and security for Cloud Apps
      • Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
    • Endpoint Security
      • Capture ClientStop advanced threats and rollback the damage caused by malware
      • Content Filtering ClientControl access to unwanted and unsecure web content
    • Product Widgets
      • Product Menu Right Image
      • Capture Cloud Platform
        Capture Cloud Platform

        A security ecosystem to harness the power of the cloud

    • Button Widgets
      • Products A-Z
        all products A–Z FREE TRIALS
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure WiFi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • English English English en
  • BLOG
  • CONTACT SALES
  • FREE TRIALS
  • English English English en
SonicWall
  • Products
    • Network Security
      • Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
      • Security ServicesComprehensive security for your network security solution
      • Network Security ManagerModern Security Management for today’s security landscape
    • Advanced Threat Protection
      • Capture ATPMulti-engine advanced threat detection
      • Capture Security applianceAdvanced Threat Protection for modern threat landscape
    • Access Security
      • Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
      • Secure Mobile AccessRemote, best-in-class, secure access
      • Wireless Access PointsEasy to manage, fast and secure Wi-FI
      • SwitchesHigh-speed network switching for business connectivity
    • Email Security
      • Email SecurityProtect against today’s advanced email threats
    • Cloud Security
      • Cloud App SecurityVisibility and security for Cloud Apps
      • Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
    • Endpoint Security
      • Capture ClientStop advanced threats and rollback the damage caused by malware
      • Content Filtering ClientControl access to unwanted and unsecure web content
    • Product Widgets
      • Product Menu Right Image
      • Capture Cloud Platform
        Capture Cloud Platform

        A security ecosystem to harness the power of the cloud

    • Button Widgets
      • Products A-Z
        all products A–Z FREE TRIALS
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure WiFi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • Menu

SonicWall Comprehensive Anti-Spam Service (CASS) Version 2 - (FAQ)

03/26/2020 21 People found this article helpful 99,781 Views

    Download
    Print
    Share
    • LinkedIn
    • Twitter
    • Facebook
    • Email
    • Copy URL The link has been copied to clipboard

    Description

    SonicWall Comprehensive Anti-Spam Service (CASS) Version 2 - (FAQ)

    Resolution

    Product Question: Answer:
    1.  Can I configure customizable aggressiveness settings like in your dedicated products? This feature is available in the dedicated Email Security appliance and server software solutions from SonicWall.
    2.  Can I configure whitelists / blacklists? Yes, whitelists & blacklists are available by IP address, email address, domain names or list names.
    3. How do I configure outbound protection? This feature is available in the dedicated Email Security appliance and server software solutions from SonicWall.
    4. What does outbound protection mean? Outbound protection provides outbound threat prevention (against viruses, spam, & bots) and outbound compliance management for regulatory compliance and data leakage prevention. This feature is available in the dedicated Email Security appliance and server software solutions from SonicWall. See SonicWall Email Security product page for more details.
    5. What happens when the service goes down?  Do you store / spool email messages? SonicWall has built in multiple levels of physical, hardware, and virtual redundancy into our cloud-based systems for guaranteed uptime.
     In the very rare event of the cloud-based service being unavailable, the system behavior is configurable by the administrator from within the product.
     In the event that the recipient mail server goes down, SonicWall leverages the standards-based SMTP delivery protocol to automatically resend messages when the destination mail server is unavailable.
    6. What do I do about false positives? False positives are extremely rare for the Comprehensive Anti-Spam Service. In the event that you experience a false positive:  If the sender is a business partner, vendor, or organization that you frequently receive email from, you can add their IP address or domain name to the whitelist to ensure delivery of their mail traffic.  If an individual email is caught as a false positive, you can add that sender's email address to the whitelist.
     If the problem persists, then please open a case with SonicWall Support. Support can analyze the message and provide feedback to the customer. Please see the SonicWall Support webpage for your local contact details.
    7. What should I do if too much spam is getting through? SonicWall has tuned the Comprehensive Anti-Spam Service to specifically prevent spam. However in the event of a rapid new Spam outbreak, SonicWall's GRID Network takes input from millions of sensors worldwide and will quickly learn the new Spam pattern. It makes updates to the GRID Network in real-time. These updates are immediately available to the Comprehensive Anti-Spam Service to mitigate a new spam threat.
    8. What about GEN 4? There are no plans to release the service on GEN 4 platforms at this time.
    9. What about POP3? There are no plans for POP3 support at this time. POP3 support is available via SonicWall's Anti-Spam Desktop product.
    10. When will you add defense against DHA? This feature is available in the dedicated Email Security appliance and server software solutions from SonicWall.
    11. Is there an option for a junk store on something other than the mail server? Yes, junk store can be stored in any SMTP box in windows platform including Microsoft Exchange.
    12. How does this compare to what Postini does? If you can click a box, you can set it up
    • Postini involves at least 25 steps, including changing MX records, and could take days
    • Enable SonicWall Comprehensive Anti-Spam Service with literally one mouse click
      As email moves from an annoyance to a security threat
    • Our firewall can filter email, but anti-spam products can't filter security threats
    • We scan EVERY protocol and EVERY packet
      How protected do you want to be?
    • SonicWall offers Day Zero Antivirus
    • Postini has a lapse of a few hours between a new threat and the antidote
      Ever receive large mail?
    • Postini maximum size defaults to 200MB (300MB max) over that limit? REJECTED!
    • SonicWall can scan ANY message size
      Technical support?
    • Postini offers small businesses online support only
      How much spam do you want?
    • SonicWall's 98% vs. Postini 95% effectiveness
      Value your time? Like simplicity?
    • ONE user interface to manage, ONE place to get reports, ONE place to get alerts
    13. How does this compare to what Fortinet / WatchGuard does? Comprehensive Anti-Spam Service is a full featured service with an over 98% effectiveness rate, built on the same technology as our Enterprise-class solutions. This cannot be compared to a basic Real Time Blacklist (RBL) based service.
    14. Why don't you just do a fully-hosted service?

    SonicWall has a fully-hosted solution please follow this link that shows you the functions it has.

    https://www.sonicwall.com/us/en/products/Hosted-Email-Security.html

     

    15. How does it work?

    1. SMTP traffic arrives at the SonicWall network security appliance

    2. Junk email is rejected based on Sender IP reputation using Advanced Reputation Management (ARM) service.

    3. Remaining email is evaluated using cloud-based Advanced Content Management (ACM) service to determine if it is good or junk

    4. Good email is delivered to the email server

    5. Optionally, junk email can be delivered to SonicWall Junk Boxes on the email server and Junk Box Summaries can be delivered as emails to each user.

    16. Why is the RBL disabled during the anti-spam configuration? RBLs are just one of many inputs to the Comprehensive Anti-Spam Service. Therefore, it would be redundant to apply this filtering twice.
    17. How is the SonicWall IP Reputation different from the traditional RBLs? Comprehensive Anti-Spam Service is a full featured service with over a 98% effectiveness rate, built on the same technology as our Enterprise-class solutions. This cannot be compared to a basic Real Time Blacklist (RBL) based service. RBL filtering is not always effective, can be slow to update, and can often be out of date.

     
    18. How and where can I check whether an IP address is bad (spammy) or not and also its rating? The CASS now provides IP reputation check functionality on the interface.  
    19. How is SonicWall IP reputation compared to IronPort?  IronPort only stops 93% to 95% of Spam using IP reputation. SonicWall stops over 98% of all Spam, using multiple techniques, including IP reputation.  IronPort provides no visibility into messages that were blocked using their IP Reputation service. SonicWall provides much greater visibility. SonicWall always logs any connections that were blocked by IP reputation, providing transparency for administrators.
    20. The anti-spam data sheet shows the IP reputation will block up to 80% of spam how can I validate this number? SonicWall provides detailed stats and reporting via the UTM management console. These statistics are readily available for the Comprehensive Anti-Spam Service.
    21. Will using the cloud-based service for email increase my traffic? Only slightly. Email traffic makes up only a small percentage of total traffic (usually less that 10%). For the typical customer, they would only see a 2% increase in this email traffic relative to total traffic.
    22. Will enabling the anti-spam service reduce the performance of my other services? No, it will not have any effect on any other services.
    23. What is the total performance hit by enabling the anti-spam service? No impact. There will only be a slight increase in the number of concurrent connections on the UTM. For the vast majority of customers, the impact is negligible.
    24. After enabling the anti-spam service, my UTM appliance shows more connections, why? A: Yes, the anti-spam service uses connections to connect to the cloud-based service. This will result in a slight increase in the number of connections on the UTM.
    25. What is the impact on the UTM with this and other services all enabled? A: Almost no performance hit for Comprehensive Anti-Spam Service on the UTM, since it is mostly cloud-based.
    26. I'm not receiving some emails and the logs don't show any emails dropped, how can I troubleshoot this issue? The Anti-Spam service can be configured to tag spam traffic, rather than deleting or moving to the junk store. This is the recommended first step to troubleshoot issues.  
    27. Is there any limit to the size of the email attachments that can be scanned? There are no file size restrictions.  

     

    Related Articles

    • Analyzing TCP reset(RST)packets
    • ‘Error sending one-time password’ encountered when connecting to NetExtender
    • Supported SonicWall and 3rd party SFP and SFP+ modules that can be used with SonicWall NSsp series

    Categories

    • Firewalls > TZ Series
    • Firewalls > SonicWall SuperMassive E10000 Series
    • Firewalls > SonicWall SuperMassive 9000 Series
    • Firewalls > SonicWall NSA Series

    Not Finding Your Answers?

    ASK THE COMMUNITY

    Was This Article Helpful?

    YESNO

    Article Helpful Form

    Article Not Helpful Form

    Company
    • Careers
    • News
    • Leadership
    • Awards
    • Press Kit
    • Contact Us
    Popular resources
    • Communities
    • Blog
    • SonicWall Capture Labs

    Stay In Touch

    • By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. You can unsubscribe at any time from the Preference Center.
    • This field is for validation purposes and should be left unchanged.
    • Facebook
    • Twitter
    • Linkedin
    • Youtube
    • Instagram

    © 2022 SonicWall. All Rights Reserved.

    • Legal
    • Privacy
    • English
    Scroll to top
    Trace:957d8e7b1ca3887eccd6a78a7ba67e6e-76