- NMS PKI To Be Hosted By NCSA
- MMHS over SMTP Extended to Outlook
- Nexor and Boldon James Offer Combined MMHS
- Prototype MMHS over SMTP Clients
- Nexor Introduce Data Diode Product
- ACP123(B) Published
- NEDS procurement have issued amendment 11 and extended the bid submission date to 3rd March 2010
- Isode announce addition of new product, M-Link Edge, to R14.6 release
- ESS equivalentLabels mandatory in STANAG 4631
- Management Buy In Of Clearswift Specialist Products Division
Evaluated Mail Guards
Submitted by admin on Tue, 2007-05-01 08:03
If you are looking for a formally evaluated Mail Guard to protect messages from two different security domains, there are currently a number of productson the market:
- Clearswift Deepsecure R2.1 (EAL4)
- Nexor Sentinel (EAL4)
- Thales XOmail/Guard (TCSEC B1+ - equivalent to EAL4)
Clearswift DeepSecure is an EAL4 Mail Guard running under the EAL4 Bastion II in turn running on Trusted Solaris 8. This Guard was originally developed for the Australian e-Defence project but has been substantially enhanced since that initial version.
More details of the evaluation, including the associated security target, are available here.
Nexor Sentinel is a rebadging of the EAL4 evaluated "MMHS Filters" or "MMHS Trusted Guard" developed by BAe Systems. This Guard was originally developed to meet the requirements of the Canadian Government and was itself based upon the U.S. DMS DII Guard. Nexor Sentinel runs under the EAL5+ evaluated Secure Trusted Operating Program (STOP) operating system which provides the required network separation.
More details of the evaluation, including the associated security target, are available here.
The Thales XOmail/Guard is an older product that is widely deployed by NATO since 1997. It does however only support X.400(84), although Thales are believed to be working on a newer version.
It should be noted that just because two guards are evaluated to EAL4 does not necessarily mean they offer anything like the same evaluated functionality. Only by reading the security target can you understand what evaluated security enforcing functions are provided, and determine which Mail Guard fits your requirements.