SonicWall Comprehensive Anti-Spam Service (CASS) Version 2 - (FAQ)

03/26/2020 21 People found this article helpful 99,781 Views

Description

Resolution

Product Question:	Answer:
1. Can I configure customizable aggressiveness settings like in your dedicated products?	This feature is available in the dedicated Email Security appliance and server software solutions from SonicWall.
2. Can I configure whitelists / blacklists?	Yes, whitelists & blacklists are available by IP address, email address, domain names or list names.
3. How do I configure outbound protection?	This feature is available in the dedicated Email Security appliance and server software solutions from SonicWall.
4. What does outbound protection mean?	Outbound protection provides outbound threat prevention (against viruses, spam, & bots) and outbound compliance management for regulatory compliance and data leakage prevention. This feature is available in the dedicated Email Security appliance and server software solutions from SonicWall. See SonicWall Email Security product page for more details.
5. What happens when the service goes down? Do you store / spool email messages?	SonicWall has built in multiple levels of physical, hardware, and virtual redundancy into our cloud-based systems for guaranteed uptime. In the very rare event of the cloud-based service being unavailable, the system behavior is configurable by the administrator from within the product. In the event that the recipient mail server goes down, SonicWall leverages the standards-based SMTP delivery protocol to automatically resend messages when the destination mail server is unavailable.
6. What do I do about false positives?	False positives are extremely rare for the Comprehensive Anti-Spam Service. In the event that you experience a false positive: If the sender is a business partner, vendor, or organization that you frequently receive email from, you can add their IP address or domain name to the whitelist to ensure delivery of their mail traffic. If an individual email is caught as a false positive, you can add that sender's email address to the whitelist. If the problem persists, then please open a case with SonicWall Support. Support can analyze the message and provide feedback to the customer. Please see the SonicWall Support webpage for your local contact details.
7. What should I do if too much spam is getting through?	SonicWall has tuned the Comprehensive Anti-Spam Service to specifically prevent spam. However in the event of a rapid new Spam outbreak, SonicWall's GRID Network takes input from millions of sensors worldwide and will quickly learn the new Spam pattern. It makes updates to the GRID Network in real-time. These updates are immediately available to the Comprehensive Anti-Spam Service to mitigate a new spam threat.
8. What about GEN 4?	There are no plans to release the service on GEN 4 platforms at this time.
9. What about POP3?	There are no plans for POP3 support at this time. POP3 support is available via SonicWall's Anti-Spam Desktop product.
10. When will you add defense against DHA?	This feature is available in the dedicated Email Security appliance and server software solutions from SonicWall.
11. Is there an option for a junk store on something other than the mail server?	Yes, junk store can be stored in any SMTP box in windows platform including Microsoft Exchange.
12. How does this compare to what Postini does?	If you can click a box, you can set it up Postini involves at least 25 steps, including changing MX records, and could take days Enable SonicWall Comprehensive Anti-Spam Service with literally one mouse click As email moves from an annoyance to a security threat Our firewall can filter email, but anti-spam products can't filter security threats We scan EVERY protocol and EVERY packet How protected do you want to be? SonicWall offers Day Zero Antivirus Postini has a lapse of a few hours between a new threat and the antidote Ever receive large mail? Postini maximum size defaults to 200MB (300MB max) over that limit? REJECTED! SonicWall can scan ANY message size Technical support? Postini offers small businesses online support only How much spam do you want? SonicWall's 98% vs. Postini 95% effectiveness Value your time? Like simplicity? ONE user interface to manage, ONE place to get reports, ONE place to get alerts
13. How does this compare to what Fortinet / WatchGuard does?	Comprehensive Anti-Spam Service is a full featured service with an over 98% effectiveness rate, built on the same technology as our Enterprise-class solutions. This cannot be compared to a basic Real Time Blacklist (RBL) based service.
14. Why don't you just do a fully-hosted service?	SonicWall has a fully-hosted solution please follow this link that shows you the functions it has. https://www.sonicwall.com/us/en/products/Hosted-Email-Security.html
15. How does it work?	1. SMTP traffic arrives at the SonicWall network security appliance 2. Junk email is rejected based on Sender IP reputation using Advanced Reputation Management (ARM) service. 3. Remaining email is evaluated using cloud-based Advanced Content Management (ACM) service to determine if it is good or junk 4. Good email is delivered to the email server 5. Optionally, junk email can be delivered to SonicWall Junk Boxes on the email server and Junk Box Summaries can be delivered as emails to each user.
16. Why is the RBL disabled during the anti-spam configuration?	RBLs are just one of many inputs to the Comprehensive Anti-Spam Service. Therefore, it would be redundant to apply this filtering twice.
17. How is the SonicWall IP Reputation different from the traditional RBLs?	Comprehensive Anti-Spam Service is a full featured service with over a 98% effectiveness rate, built on the same technology as our Enterprise-class solutions. This cannot be compared to a basic Real Time Blacklist (RBL) based service. RBL filtering is not always effective, can be slow to update, and can often be out of date.
18. How and where can I check whether an IP address is bad (spammy) or not and also its rating?	The CASS now provides IP reputation check functionality on the interface.
19. How is SonicWall IP reputation compared to IronPort?	IronPort only stops 93% to 95% of Spam using IP reputation. SonicWall stops over 98% of all Spam, using multiple techniques, including IP reputation. IronPort provides no visibility into messages that were blocked using their IP Reputation service. SonicWall provides much greater visibility. SonicWall always logs any connections that were blocked by IP reputation, providing transparency for administrators.
20. The anti-spam data sheet shows the IP reputation will block up to 80% of spam how can I validate this number?	SonicWall provides detailed stats and reporting via the UTM management console. These statistics are readily available for the Comprehensive Anti-Spam Service.
21. Will using the cloud-based service for email increase my traffic?	Only slightly. Email traffic makes up only a small percentage of total traffic (usually less that 10%). For the typical customer, they would only see a 2% increase in this email traffic relative to total traffic.
22. Will enabling the anti-spam service reduce the performance of my other services?	No, it will not have any effect on any other services.
23. What is the total performance hit by enabling the anti-spam service?	No impact. There will only be a slight increase in the number of concurrent connections on the UTM. For the vast majority of customers, the impact is negligible.
24. After enabling the anti-spam service, my UTM appliance shows more connections, why?	A: Yes, the anti-spam service uses connections to connect to the cloud-based service. This will result in a slight increase in the number of connections on the UTM.
25. What is the impact on the UTM with this and other services all enabled?	A: Almost no performance hit for Comprehensive Anti-Spam Service on the UTM, since it is mostly cloud-based.
26. I'm not receiving some emails and the logs don't show any emails dropped, how can I troubleshoot this issue?	The Anti-Spam service can be configured to tag spam traffic, rather than deleting or moving to the junk store. This is the recommended first step to troubleshoot issues.
27. Is there any limit to the size of the email attachments that can be scanned?	There are no file size restrictions.

Not Finding Your Answers?

ASK THE COMMUNITY

Was This Article Helpful?

YES NO

Capture Cloud Platform

Federal

Partner Portal

Support Portal

Capture Cloud Platform

Federal

Partner Portal

Support Portal

SonicWall Comprehensive Anti-Spam Service (CASS) Version 2 - (FAQ)

Description

Resolution

Related Articles

Categories

Not Finding Your Answers?

Was This Article Helpful?

Article Helpful Form

Article Not Helpful Form

Stay In Touch