• • Detect and block more threats with superior threat intelligence from Talos™.

  • Combat ransomware hidden in attachments.

  • Drop emails with risky links automatically.

  • Block access to newly infected sites with real-time URL analysis to protect against phishing and BEC.

  • Prevent brand abuse and sophisticated identity-based email attacks with Cisco Secure Email Domain Protection and Cisco Secure Email Phishing Defense services.

  • Protect sensitive content in outgoing emails with Data Loss Prevention (DLP) and Easy-to-use Email Encryption.

  • Provide user behavior training with Cisco Secure Awareness Training to help users work smarter and safer.

• Global threat intelligence : Talos.

• Reputation filtering : Block unwanted email with reputation filtering stops 90 percent of spam.

• Spam protection : Highest spam catch rate of greater than 99 percent, with a false-positive rate of a less than a one in one million.

• Forged email detection : Protects against BEC attacks focused on executives.

• Email Phishing Defense : Stops identity deception–based attacks such as social engineering, imposters, and BEC.

• Email Domain Protection : Prevent phishing emails from being sent using a customer domain(s).

• Virus defense : High-performance virus scanning solution.

• Graymail detection : Classifies and monitors graymail .

• Safe unsubscribe  :  Protection against malicious threats masquerading as unsubscribe links.

• Malware Defense & Threat Grid :  File reputation scoring, blocking & file sandboxing, and file retrospection for continuous analysis of threats.

• URL-related protection and control : Protect against malicious URLs with URL filtering, scanning of URLs in attachments, and shortened URLs. 

• Outbreak filter : Defend against emerging threats and blended attacks.

• Web interaction tracking : Track the end users who click on URLs 

• DLP : Protect outbound messages.

• Encryption : Give senders control of their content.

• System overview dashboard : Monitor and report on outbound messages from a centralized Dashboard

• Detailed message tracking : Track a message by  recipient,  sender, subject, attachments, and message events  DLP policy or IDs.

• Secure Awareness Training :  Phishing simulations and awareness training.

Secure Email Cloud Gateway 

[Formerly Cloud Email Security (CES)]

Cisco Secure Email is the Iron Port ESA, hosted by Cisco or on-prem. 

We point inbound MX records at it so it can process mail before it hits mailboxes.

Secure Email Cloud Gateway offers 

• inbound protection

• outbound control of email traffic. 

The following feature functionalities are available as part of the Service depending on the licensed features purchased:

• Anti-spam

• Intelligent Multi-Scan Anti-spam

• Anti-virus

• Outbreak Filters

• Advanced Malware Protection

• Safe Unsubscribe

• Image Analysis

• Email Encryption Service

• Data Loss Prevention 

DEPLOYMENT OPTIONS

1. ON-PREMISE (Secure Email Gateway)

Cisco Secure Email Gateway Virtual available for (KVM, AWS, VMware)

2. ON-CLOUD (Secure Email Cloud Gateway)

Is a Software-as-a-Service (SaaS) offering 

3. HYBRID (Secure Email Gateway)

Facilitates deployment of email security for on-premises and cloud. 

License comparison

Email Threat Defense 

[Formerly Cloud Mail Defense (CMD)]

Email Threat defense offers protection (inbound+outbound+internal) by journaling method without pointing the MX records.  

Fully integrated with Microsoft Office 365, provides complete visibility and comprehensive protection for

• inbound, 

• outbound, 

• internal emails. 

The following feature functionalities are available

• Easy to use.

• Detect and block threats with superior threat intelligence from Cisco Talos

• Leverage API-driven remediation of messages with malicious content

• Blocking advanced attacks Phishing, Ransomware, BEC, Spoofing, and Spam

• Integrated Dashboard for search, reporting and tracking, including conversation view and message trajectory

License comparison

Free 30-Day trial

L-CES-AMP

Cloud Email Security - Advanced Malware Protection (AMP)

AMP is a comprehensive malware-defeating solution that enables enhanced file reputation capabilities, detailed file behavior analysis (Sandboxing) and reporting, continuous file analysis, and retrospective verdict alerting.

L-CES-GSU

Cloud Email Security - Graymail Safe-Unsubscribe

Offers industry-leading technology that provides the end users with a safe and easy way to unsubscribe from unwanted mails, while at the same time shielding them from being compromised by threats or phishing attacks through illegitimate unsubscribe links

L-CES-MFE

Cloud Email Security - McAfee AV

Offers McAfee Anti-virus scanning technology

L-CES-IA

Cloud Email Security - Image Analyzer Detects illicit content in incoming and outgoing email, allowing customers to identify, monitor, and educate offending users

L-CES-IMS

Cloud Email Security - Intelligent Multiscan Provides multiple combined anti-spam technologies to take advantage of Cisco Anti-spam for high levels of accuracy

• https://cisco.sharepoint.com/sites/SecureEmail Cisco's Sharepoint Page

• https://www.cisco.com/c/en/us/td/docs/security/esa/esa16-0/user_guide/b_ESA_Admin_Guide_16-0/b_ESA_Admin_Guide_12_1_chapter_010010.html Data loss prevention User Guide

Sender Policy Framework (SPF) - Tells other servers which servers are allowed to send emails using your business’s domain name. So when you send an email from name@yourbusiness. com, the receiving server can confirm that the sending server is on an approved list. 

Domain Keys Identified Mail (DKIM) - Puts a digital signature on outgoing mail so servers can verify that an email from your domain actually was sent from your organization’s servers and hasn’t been tampered with in transit.

Domain-based Message Authentication, Reporting & Conformance (DMARC) - SPF and DKIM verify the address the server uses “behind the scenes.” DMARC verifies that this address matches the “from” address you see. It also lets you tell other servers what to do when they get an email that looks like it came from your domain, but the receiving server has reason to be suspicious (based on SPF or DKIM). You can have other servers reject the email, flag it as spam, or take no action. You also can set up DMARC so that you’re notified when this happens.