Engate
Preemption — the Best OffenseGlobalRules™ - Network Profiling
Technology For OEM Partners
OEMs Differentiate with Unique Network Profiling Technology
Engate‘s GlobalRules™ delivers an extra layer of threat intelligence and empowers OEM partners to achieve an additional 5-10% unique catches on top of their existing reputation and content filters -- improving the performance, effectiveness and accuracy of their products. Engate‘s proprietary GlobalRules rules engine and patented network profiling technique does not overlap with an OEM partner‘s technology and database. Engate delivers incremental value with a preemptive security solution that is aware of the functions of every computer on the subnet and has real-time visibility into known and unknown threat sources.
GlobalRules™ Enhances Reputation and Real-time Blocking Lists
Engate’s GlobalRules™ enhances the performance, effectiveness and accuracy of reputation systems or Real-time Black Lists (RBLs) and is differentiated in the following ways:
- Engate’s network profiling technology delivers real-time visibility into malicious sources from around the world. GlobalRules uniquely profiles every host within an entire network, segregates legitimate mail servers from all other network hosts, and establishes proprietary ’smart rules‘ that have the unique ability to identify compromised computers, detect protocol fraud, and intelligently reject illicit connections at the connection level.
- GlobalRules provides a detailed analysis of every network that propagates unwanted commercial email (UCE) such as botnet attacks, phish, spam, email-borne viruses and blended threats. Unlike reputation systems that only store bad IP addresses, Engate performs a variety of proprietary techniques which include profiling all hosts in a subnet, examining the source data from the header envelope, associating the IP address and the Mail Transfer Agent (MTA) with its subnet, observing IP ranges and domain names, segregating illicit MTAs from legitimate MTAs to validate which hosts are permitted to send direct-to-MX email, as well as a myriad of other criteria and human analysis to establish a profile for the entire network.
- Using proprietary techniques, automated tools and expert human analysis, Engate provides an accurate assessment of IP ranges and DNS patterns. Culminating from 7 years of profiling networks, Engate‘s network profiling engineers have taken the time and effort to profile networks worldwide, enabling Engate the ability to understand the function of every computer on a subnet, interpret the behavior of the networks and identify their intent.
- Engate does not store and rely on IP addresses that have historically sent spam; therefore, Engate‘s accuracy levels are not thwarted by new sources that don't yet have a reputation. Engate analytically profiles all hosts on a subnet, enabling GlobalRules to proactively ensure protection from new infected hosts, evolving UCE tactics and botnet-based attacks. The benefit of this is that Engate can prevent UCE from clean hosts and networks that have never sent UCE before.
- Engate does not store or recycle IP addresses. Engate uses a unique technique that efficiently profiles whole networks with a small set of "smart rules". These rules are permanent and rarely need to be updated.
- Engate‘s GlobalRules is very efficient and less than 16,000 rules. Due to the innovation and small footprint of GlobalRules™, it is stored locally on the partner‘s hardware or software, eliminating Internet queries which delay processing.
GlobalRules™ Delivers Incremental Value to OEMs
Engate‘s GlobalRules empowers OEM partners to improve the performance, effectiveness and accuracy of their products. Engate‘s network profiling technology enables OEM partners to achieve industry-leading 99% accuracy with the lowest rate of false positives – improving customer renewals and competitive conversions. Engate delivers incremental value to partnering solutions as follows:
ü Enhances 3rd party scoring systems with an additional layer of network profiling analysis.
ü Improves the efficiency of security products by radically reducing the large volume of unwanted traffic from reaching a customer‘s email gateway.
ü Improves multi-layer security strategy with an additional 5-10% unique catch rate from known and unknown threats.
This empowers OEM vendors with monumental differentiation -- customers lower capital and operating costs as a result of reduced bandwidth, storage and processing power; customers improve messaging system throughput as much as ten-fold; and customers significantly improve user and IT productivity by eliminating the time wasted dealing with threats.
