Encryption often creates other problems. For example, it can frustrate virus scanning and content filtering at the email gateway because unencrypted content is not available at the gateway for examination. However, this is not a problem with TFS Secure Messaging Server because all these functions are integrated in the server, which itself has control of encryption, rather than allowing the clients to encrypt content. One disadvantage to this approach is that traffic on the LAN is not encrypted, although remote teleworkers can use client-based S/MIME or OpenPGP to secure their sessions with their corporate email servers. Also, two or more TFS Secure Messaging Servers can be used to set up a virtual private network (VPN) between multiple sites.

TFS does not supply anti-virus software – rather it allows the integration of a third-party anti-virus package that is then used to scan email and attachments. It works with all the well-known DOS and Windows anti-virus packages. Multiple anti-virus packages from different vendors may be used at the same time. Virus scanning works on both inbound and outbound messages to prevent users from inadvertently sending viruses as well as protecting them from email-borne viruses and attachments.

Messages can also be controlled based on size. For example, a maximum message size may be configured on a per user, per group or per organization basis, giving maximum flexibility to allow some users to send and receive large files while preventing others from hogging the bandwidth. You can also limit overall message flow in megabytes per hour based on the same user, group or organization criteria, to prevent abuse of bandwidth by bulk emailings. The TFS Secure Message Server can itself act as a list server to send out bulk emails if required.

There is an auto-reply facility that replies to incoming messages with a message of your choice to confirm to the sender that the message has been received. Also, signature files can be created for each user giving a standard message for that user, and this can be combined with a standard company disclaimer at the end of each outgoing email.

There are comprehensive logging and archiving facilities. All messages can be archived centrally to comply with legal requirements and also to make it easy to find messages. Both the archive and the activity log can be organized by sender, receiver or content.

The TFS Secure Messaging Server is supplied as a license pack containing serial numbers and alphanumeric codes only. Instead of shipping a CD-ROM, TFS allows you to download the latest version of the program from its web site using these codes as a password. Installation is then straightforward using the 17Mb file you have downloaded. All the documentation is also downloadable as Adobe Acrobat files.

Minimum system requirements for the server are a 233MHz Pentium II processor with 128Mb RAM, a 2Gb hard disk and Windows NT4 Workstation or Server with SP5. Supported email systems include any based on SMTP, POP3 or UUCP. It has been specifically tested by TFS and confirmed compatible with Microsoft Exchange, Microsoft Mail, Lotus Notes, Lotus cc:Mail, Novell GroupWise, Novell MHS and FirstClass.

Administration is carried out using a web browser interface and thus can be done remotely across the Internet. You can import users from your existing email system and this makes it quite easy to set up a large number of users quickly. This directory synchronizing feature can also export user data to your email servers to provide an easy way to maintain user profiles consistent across multiple email servers.
The TFS Secure Messaging Server must be located between the mail server and the firewall. One TFS Secure Messaging Server can service multiple email servers, and can even act as a mail relay between those internal email servers. In this way, it can provide a server-based email encryption solution that requires no end-user education or administration. Neither does it require any special client software, and it does not impose any processing overhead on the client.
 

SC On-Line
SC Magazine
www.scmagazine.com