 janusSEAL for Outlook Safe Domain Extension
janusSEAL for Outlook's SafeDomain Extension (FREE for janusSEAL customers) provides users with a security policy safety net when sending messages from Microsoft Outlook. This safety net:
- can warn them when sending sensitive messages to a large number of recipients
- can prevent them from sending sensitive messages to a large number of recipients
- can remove recipients from sensitive messages if there is no secure network to send it safely to them
- can correct (promote) email addresses when the sender accidentally uses a recipient's public email address for a sensitive message when they should have used their private network address
- See the Datasheet
SafeDomain for GCSX / CoCo / GC Mail / NHS / PNN use.
Government Connect Secure Extranet (GCSX) is a secure, private, Wide Area Network (WAN) which enables secure interactions between connected local authorities and other GSi connected organisations.
The GCSX Code of Connection (CoCo) is a list of security controls with which ALL local authorities must be compliant before their GCSX circuit can be activated.
To assist with CoCo compliance, janusSEAL for Outlook Safe Domain extension warns and/or prohibits users from sending messages to domains where the delivery channel does not have a high enough security rating for the message.
SafeDomain is also useful for Police Forces in the United Kingdom who are connected to the Police National Network (PNN).
Such security policies are generally only able to be enforced (if at all) at the email gateway. However with janusSEAL SafeDomain the user is warned immediately if there is a failure to adhere to policy, instead of needing to wait for a failure notification from the mail system. Improves security, as messages leaving the desktop are compliant with policy.
Read World Use Example:
In this scenario, Alice at MyCouncil wants to exchange emails with Carol at OtherCouncil (who is also connected to the GCSX). Using the GC Mail system, Carol has two valid email addresses that Alice could use to send her information:
-
carol@othercoucil.gov.uk is used to send emails of no sensitivity (Not Protectively Marked or UNCLASSIFIED) as this address is reached via the Internet.
- carol@othercoucil.gcsx.gov.uk is used to send emails of PROTECT or RESTRICTED sensitivity a they go via the GCSX network which is rated up to RESTRICTED.
Without janusSEAL SafeDomain Extension, Alice has to be very careful she does not use the incorrect email address for Carol, particularly when sending her sensitive information. The likelihood of this happening is increased by Outlook's 'feature' of autocompleting email addresses as the sender types in the address.
With janusSEAL SafeDomain Extension it doesn't matter if she gets it wrong as SafeDomain will fix it for her by 'promoting' the email address when sending sensitive information. It will also detect if she has included other recipients in the message for which the message cannot be safely sent to them. When janusSEAL SafeDomain Extension detects either of these things happening it will show the sender an extra dialog telling them it is going to modify the recipients of the message. An example of this is shown below for Alice sending to Carol2 and Ed2 (where Ed2 is a user with an Internet based email address).
Once Alice clicks the Send button the recipient list is corrected to ensure the necessary security for the message over its journey. If Alice clicks the Cancel button she can go back to the message and edit it herself.
Once Alice clicks the Send button the recipient list is corrected to ensure the necessary security for the message over its journey. If Alice clicks the Cancel button she can go back to the message and edit it herself.
Key Features:
- Configurable list of SMTP safe domains, to which the organisation has secure delivery channels, such as a Virtual Private Network link.
- Each safe domain may have a different security rating; security ratings correspond to the security classifications used by your organisation.
- One button click for senders to promote email addresses of unsafe recipients to their equivalent addresses in the safe domains.
- One button click for users to remove unsafe recipients, where no safe domain exists.
- Warns senders and/or blocks transmission if there is a high number of recipients for the message. The thresholds can be set on a per message classification basis, so warning/blocking can be triggered on a lower number of recipients for more sensitive messages.
- Can set an appropriate Reply-To address for sent messages based on the security classification to ensure return messages are delivered by a sufficiently secure channel.
- Expands (mailing) groups to their member recipients to a configurable number of levels (local user's contact groups, Exchange mailing groups, Exchange dynamic groups).
- Works with sender's local contacts, Active Directory users and contacts or explicit SMTP addresses.
- Audit trail of user warning and acceptance to Event Log or file.
- Enable/Disable the Extension depending on message type (message, meeting request, assigned task, post).
|
