CORE NEWS FACTS
-- Between May 1 and September 25, 2006, eWEEK Labs performed independent testing of IronPort Virus Outbreak Filters(TM) - staging rigorous live feed ongoing test and measurement. This is the first comprehensive, independent third party review of preventive AV filters -- Lab test managers maintained real-time traffic for rigorous testing by establishing a public domain, publishing an email address publicly and pointing several live email feeds to the address. -- eWEEK labs configured the IronPort C600(TM) email security appliance to enable Sophos anti-virus and IronPort Anti-Spam(TM) with IronPort Virus Outbreak Filters. To determine relevant accuracy and timeliness, the labs routinely checked the Virus Outbreak Filters Quarantine and examined quarantined emails.
Results:
In the five months of eWEEK Labs' testing, the following results were observed:
-- 1217 virus positive messages were caught by IronPort Virus Outbreak Filters. These were all messages that the Sophos AV engine had initially scanned as AV negative. -- Zero false positives were quarantined. Automated quarantining decisions were 100% accurate. -- 48 separate outbreaks were stopped with IronPort Virus Outbreak Filters, including: -- Four variants of the "Stration" virus - a dangerous worm that sends emails, claiming to be from the recipients' IT department. These messages inform them that a new virus outbreak had appeared and that they should download the attached file to protect their computer. -- Six variants of the "Clagger" virus - a dangerous Trojan that installs a backdoor for remote hackers to take over infected PCs. This backdoor also installs software that allows it to evade detection by Windows firewall. -- Two variants of the "Harnig" virus - a dangerous Trojan that allows hackers to take over the infected PC and communicate with it via HTTP (a protocol that makes it difficult to detect malicious communications). -- Assuming only 10 percent of these messages would have been opened, and a $200 per desktop clean up cost, IronPort® estimates that if eWEEK Labs had been running a production network, they would have saved more than $24,000.00 in clean-up costs in the five month period, or 57% over a year, using IronPort Virus Outbreak Filters. This estimate doesn't include the effects of the near-certain data loss and possible theft due to virus attacks.
QUOTES AND COMMENTS
According to Michael Caton, eWEEK Labs technical analyst:
-- "We never saw a false positive, and administrators aren't likely to have to manage the queue to look for expected messages." -- "We particularly appreciated the administrative interface that allowed us to look at messages in the quarantine to determine the reason a filter had been written." -- "We liked the way Virus Outbreak Filters worked in our tests. The filters jump into action after the Sophos Anti-Virus filter, so Virus Outbreak Filters doesn't have to do the initial anti-virus scan." -- "In fact, Virus Outbreak Filters is very threat-specific: We saw the IronPort C600 run only a couple of filters at a time, and, once Sophos wrote a signature for a specific virus, that filter was removed." -- A leading research hospital and university (which has been an IronPort customer since 2004) reports that, in the last nine months, IronPort Virus Outbreak Filters stopped more than 24,000 virus positive messages - estimating a savings of $2.4M. -- "Since installing IronPort Virus Outbreak Filters we haven't had a single virus enter our network. The management savings are huge. We've saved $550,000 in the last six months. We also have Sophos, McAfee and Kaspersky deployed and IronPort is faster than these and any other AV engines we've seen." -Network Manager of a leading international airline company.
SUPPORTING FACTS
IronPort Virus Outbreak Filters begin quarantining suspicious email at the earliest sign of viruses. From October 2005 through June 2006, IronPort Virus Outbreak Filters identified and stopped 325,000 viral messages - saving an estimated $32M for IronPort customers.
-- MyTob-HJ, Outbreak April 19, 2006 - IronPort Outbreak Filters provide 32 hours and 57 minutes warning -- Bagle-GT, Outbreak April 21, 2006 - IronPort Outbreak Filters provide 18 hours and 28 minutes warning -- FeebsDI-Q, Outbreak June 7, 2006 - IronPort Outbreak Filters provide 21 hours and 59 minutes warning -- Kukudro-A, Outbreak June 27, 2006 - IronPort Outbreak Filters provide 3 hours and 38 minutes warning
About Virus Outbreak Filters A proven preventive solution, IronPort Virus Outbreak Filters provide a critical first layer of defense against new outbreaks -- hours before signatures used by traditional anti-virus solutions are in place. Real world results show an average lead time (over reactive anti-virus solutions) of over 13 hours -- along with an extremely high catch rate and near-zero misclassifications. Integrated into the IronPort C-Series(TM) email security appliances, IronPort Virus Outbreak Filters perform a threat assessment of inbound and outbound messages, and then quarantine suspicious messages temporarily. Once signatures from traditional anti-virus vendors are deployed, messages are automatically released. IronPort Virus Outbreak Filters: -- Have demonstrated average lead times exceeding 13 hours prior to traditional AV solutions -- Have saved IronPort customers an estimated $320M in cleanup costs -- Have stopped over 175 outbreaks and approximately 16 million infected messages in the last twelve months alone.
Tags: Spyware Doctor, Spyware Removers, downloads, software, trial, free, free Spyware Doctor download, computer doctor, secure pc, spyware protection