Protect against today’s attacks with AsyncOS 10.0 for Cisco Email Security

New email security release adds spoofing protection, auto-remediation of malware for Office 365 customers, AMP Private Cloud, and more.

There’s been a spike in ransomware and spear-phishing attacks in the last several months. Read any news outlet and you’ll find examples of health records and other valuable data being locked up, employees duped into releasing sensitive information or wire-transferring funds, and more. In fact, in April the FBI released a warning to businesses about a dramatic increase in email scams. It’s no surprise that a recent customer survey revealed that protecting against these types of threats is top of mind. At the same time, given the global shortage of skilled IT security professionals, every organization must do more with less.

At Cisco, we understand that you need effective security – simple, open and automated. Our new Cisco Email Security AsyncOS 10.0 release demonstrates how we’re innovating to meet this need with new threat-focused security capabilities designed to defeat increasingly sophisticated and targeted attacks, along with enhancements to increase operational agility.

Threat-focused Security

Protect Against Spoofing Attacks

From October 2013 to August 2015, the FBI estimated that Business Email Compromise (BEC) had cost companies $1.2B globally. This number was updated to $2.3B through February 2016. Spoofing attacks, a type of BEC, have focused particularly on executives considered high-value targets. AsyncOS 10.0 includes Forged Email Detection to help block these targeted attacks and provides detailed logs on all attempts and actions taken.

Office 365 Customers Can Automate Malware Remediation

When malware does infiltrate the network you need to remediate breaches fast. Office 365 customers can now automatically remediate malware with Cisco Advanced Malware Protection (AMP) retrospective security. The manual process of cleaning up infected mailboxes one by one and submitting tickets is now automated, freeing up resources to focus on running the business. Email administrators can simply set their email security solution to take automatic actions on those infected emails, for example deleting them, and access audit logs to track all actions taken on mailboxes.

AMP Private Cloud for Stringent Privacy Requirements

For customers in industries, markets or regions with stringent privacy mandates, Cisco Email Security now offers a new Advanced Malware Protection private cloud allowing customers to host their AMP file reputation cloud on-premises. This, along with the AMP Threat Grid appliance, brings the entire AMP offering completely on-premise. Simultaneously, customers still benefit from AMP public cloud updates.

Track specific URLs in an email for improved visibility

URL logging and message tracking helps pinpoint the specific URL within an email that caused it to be identified as malicious. This allows email administrators to understand their threat posture specific to malicious URLs and potentially tune their systems to thwart future attacks and remediate possible exposure.

Increased Efficiency and Ease-of-use

Improved AMP reporting

Administrators and management need greater visibility into malware and suspicious files, in a way that is quick to understand. Cisco Email Security now provides more informative AMP reporting providing clearer insight into the threats, the intended recipients of messages, and the files’ disposition.

Language detection

AsyncOS 10.0 detects the language of the email message and enables administrators to set policies and actions based on the detected language. They can then determine which configured content filter action to apply for each language; for example, add a specific disclaimer or bounce message.

Single sign-on to access centralized end-user spam quarantines

Keeping track of multiple user names and passwords takes time and effort. AsyncOS 10.0 eliminates the hassle, allowing Cloud Email Security customers to authenticate end users to their spam quarantine using their corporate credentials with Security Assertion Markup Language, or SAML-based authentication.