Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 0 subscribers
  • Views 12968 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Pure Message VS ES4000?? Are they the same?

JaffNSX

Hi,

Basically we have the ES4000 appliance but we also have Sophos Enterprise console.

Pure Message is also available on our subscription which we have never installed but we are seeing a hug increase in spam emails getting through the ES4000.

I was wondering if Pure message is the same software running on the ES4000 Appliance?

Or does it work in a different way?

What I am trying to establish is.. Is it worth also installing Pure Message as well as having the ES4000 at the Gateway?

If they both work in the exact same way in theory any spam will be caught at the gateway and pure message will be doing nothing which makes it pointless installing it creating another process when email enters the building.

If it works different and there is a chance it will catch additional spam that the ES4000 unit has not caught then it would be worthwhile installing.

Then my final question is the ES4000 hardly ever picks up false positives hence why it is letting through spam how accurate is pure message? Does it pick up many false positives?

Thanks.

:23231


This thread was automatically locked due to age.
  • 0

    The two products use the same Anti-Spam and Anti-Virus engines as well as data.  The email appliance has the added feature of data content and control lists which help protect and company from leaking any sensitive data.

    PureMessage for UNIX on the other hand allows for administrative configuration and fine tuning of policy and actions.  If you are noticing large false positives I recommend you contact our support team and they will assist in investigating why this is occuring.

    -Jason

    :23361
  • 0

    Jaff Have you talked to Sophos Support on this? I would like to know the outcome.

    We have ES100 ( I know it’’’’s old) and pursemessage on our Exchange 2010 box. In the past we had Email appliance was configured to detect anti-spam, anti-virus, content filtering etc. same way Purmessage was configured for anti-spam, anti-virus, content filtering. Few months ago we had done a Haalthcheck with Sophos tech and they suggested to turn of everything in Purmessage except Anti-virus.

     Since then what I am noticing is that 1-2 spams are passing thru email appliance and going to users inbox. However the flip side is that before the configuration change end users would get 1 daily digest from email appliance and instate of 1-2 spams they would get 1-2 notification from Puremessage (which most users consider spam any way). In the past whenever a message was quarantine our helpdesk had to check both ( appliance and purmessage) now they have to check only one.

     My big things is , if I can run less services in exchange box the better it is.

    :25019
  • 0

    Hi BopBop,

    Purely in terms of Anti-Virus and Anti-Spam the Email Appliance uses much the same technology as PureMessage Exchange.

    However, one additional feature in PureMessage Exchange is that it can run 'Exchange Store Scanning' to detect malware that has already arrived in users' Inbox.  This offers an additional layer of security in case a threat isn't detected at time of arrival but we later release an update to catch it.

    Many customers choose to run the Email Appliance (including it's DLP and SPX encryption features), but back it up with PureMessage to scan the Exchange Store for malware too.

    Thanks,

    Tom.

    :25201
  • 0

    Tom

    Here is our current configuration

    Email Appliance – Anti –virus, Anti-spam,  content filtering and DLP turned on.   

    Pure message – only Anti-Virus turned on.

    Are you suggesting that we turn on Anti-Spam in puremessage? Or  keep it as it is?

    I am noticing few internal email is going to junk mail folder, but I think it has nothing to do with Email Appliance or Purmessage but  how the exchange filtering is configured.

    :25205
  • 0

    Hi BopBop,

    That setup sounds fine.  By turning on Anti-Spam in PureMessage Exchange I wouldn't expect you to see an increased catch rate, unless there is a problem with the ESA.

    The Junk mail folder will be populated by Exchange/Outlook rules outside of Sophos software.  It doesn't sound like you need to change anything unless you are getting a large amount of Junk mail that should have been caught by the appliance.

    Thanks,
    Tom.

    :25263