1．What is Mail-SeCure.?
Mail-SeCure. is a product line of user-friendly appliances that offer a range of solutions for a wide range of security threats. These systems are designed to deal with all aspects of information security: 1. Email Viruses, Worms and Trojan horses 2. Spam 3. Policy management 4. Firewall with VPN capabilities (optional) 5. Mail Server (optional) 6. URL Filtering (optional) 7. HTTP and FTP content filtering The products range from the SOHO market (1000 series), through the SME market (2000 series) to the Enterprise marker (5000 series)

2．Why do I need a Mail-SeCure. system?
Mail-SeCure. offers your organization a complete solution for an affordable price. Whether you have a mail server or firewall currently in place, PineApp can offer a complementary solution for all Email and Network threats.

3． What size organization can benefit from using Mail-SeCure. help?
PineApp's line of Mail-SeCure. products offers viable solutions for all businesses. Whether you are a small company with up to 10 mail users, a SME, or an enterprise organization with thousands of users, we have a solution that fits you.

4. How does it work?
Mail-SeCure. (located in the DMZ or in the network), can act as a mail relay or as a mail server. If the Firewall module is activated, the system would be located just after the router. All incoming and outgoing mail is scanned and checked for policy violations, viruses, worms, Spam, Trojan horses and malicious codes. With the 1000 or 2000 series, Mail-SeCure. can act as a Mail server and a Firewall (With VPN clients and IPSec site-to-site) as well as a content filtering appliance.

5．What Email Protocols does Mail-SeCure. support?
POP3, SMTP and IMAP4 both incoming and outgoing traffic.

6．How does the license program work?
Mail-SeCure. features an unlimited user licensing program. For the 2000 and 5000 series, there are no limits for the number of users using the system. The price for each unit is fixed and does not depend on the number of users The 1000 series (SOHO) is divided in to three models: SOHO 1005 - for organizations with up to 10 mail box users, SOHO 1010 - for organizations with up to 25 mail box users, SOHO 1020 - for organizations with up to 50 mail box users.

7．How do I know which appliance is right for my organization?
Matching a suitable system to your organization is a very important step. Please contact your local reseller who will assist you with finding the right model that fits your organizational needs.

8． Can my system be upgraded?
Yes. Once you purchase a unit, modules can be added or removed. But performance issues must always be taken in consideration. Please consult you local reseller before performing any upgrades.

9．How do I control and manage my Mail-SeCure. system?
Mail-SeCure. has extensive administrative capabilities via a web interface. The secured web interface allows you to manage and control your unit from any location.

10．I have Lotus Notes as my mail server; will Mail-SeCure. support it?
Yes. Mail-SeCure. supports all SMTP mail servers regardless of type.

11．Will Mail-SeCure. procedures slow down my system?
Mail that is sent from your mail server to Mail-SeCure. will result in better performance for your mail server. Messages may be delayed on Mail-SeCure. until scanned for an estimated time of up to one minute per large message and several seconds for an average one. Overall your performance should be optimal.

12． I would like to try Mail-SeCure., are demo units available?
Yes, please contact your local reseller to schedule a demo unit evaluation.

Models, modules and licensing questions
1． What models are currently available?
The 1000 Series (SOHO) for small businesses: SOHO 1005 - for organizations with up to 10 mail box users SOHO 1010 - for organizations with up to 25 mail box users SOHO 1020 - for organizations with up to 50 mail box users The 2000 Series for the SME market (unlimited users) The 5000 Series for the enterprise market and large businesses (unlimited users).

2． What models come in a rack mount configuration?
The 2000 and 5000 series are Rack mounted (1U)

3． What is the difference between the 20XX, 50XX, 21XX and 51XX models?
All models from the 2000 and 5000 series are available in one of two main configurations: Without an embedded mail server (2040, 2060, 5060 and 5070) With an embedded mail server (2140, 2160, 5160 and 5170).

4. In the 1000 series, what do the different suffixes mean?
These letters represent different modules activated in each unit. S - Advanced Anti Spam Module F - Content Filtering, mail server, Firewall M - Content Filtering, Mail Relay MF - Content Filtering, Mail Relay, Firewall V - VPN U - URL Filtering.

5. What is the difference between the 2000 and 5000 series?
1. The 2000 series have an option to add a Firewall and VPN module 2. The 5000 series have the ability to process a larger volume of messages. 3. The 5000 series are more redundant (Double CPU and/or Disks) 4. The 5000 series have larger disk capacity 5. The 5000 series can support a larger volume of users (with or without embedded mail Server).

6. What is the comparison of PineApp's Anti-Spam module to other Anti-Spam modules currently available in the market place?
Mail-SeCure. uses a propriety module that completes the protection that RBL (Real-time Black Lists) provides, while most of the other devices use only RBL to protect against Spam. The advantages of using Mail-SeCure.'s Anti-SPAM module are: 1. The SPAM module knows how to block spammers that can bypass RBL. 2. You can create White lists, to choose and define who you want to receive mail from. 3. You have full control of the Spam you receive and are not dependent on third party management. 4. You do not need to manage and maintain a database of words, phrases or domains. This is all done automatically by the system. 5. Our system is updated regularly.

7. How does the advanced Anti-Spam module work?
Mail-SeCure. features three Anti-Spam Engines. 1. External RBL's (Real time Black Lists). The system checks whether the sender's domain is listed on known external lists. If it is, the mail will not be received 2. Internal RBL. Each Mail-SeCure. system comes with an internal RBL database. This database is updated regularly with new lists. 3. PineApp's advanced Anti Spam module . Each incoming mail passes up to one thousand statistical tests. The system checks known key words in the subject and body of the message, checks usernames, domains and other factors. Each factor contributes to the final score of the mail. If the score is higher than the threshold you defined in the system . the mail will be sent to the quarantine tagged as Spam (the threshold score is configurable). 4. Advanced Zombie detection Module The combination of these modules guaranties at least a 98% reduction of all Spam sent to the organization.

8. Does the system have false positives?
There are currently no systems that can guaranty 0% false positive spam protection. Our tests have shown less than 0.5% of false positives are quarantined.

9. Can I retrieve legitimate mail from the Mail-SeCure.?
All blocked mail is kept in the quarantine for as long as defined by the administrator. It is possible to review an email, download it, release it or add the sender to your white list.

10. Are there any license limitations on the Firewall or VPN module?
No. The system does not count users or IP connections.

11. Are there any limitations on the VPN module?
There are no limits to the number of concurrent VPN connections. However, for performance reasons, we recommend no more than 20 connections at one time.

Virus detection questions
1. What type of Anti-virus engine runs on the Mail-SeCure. appliance?
PineApp Mail-SeCure. features two main Anti-virus engines: The first is F-Secure's (http://www.f-secure.com) Anti-virus Software suite which includes three embedded engines: F-Secure, F-Prot and Kaspersky Labs. The second main engine is PineApp's propriety Anti-virus software. This heuristic engine provides protection from newborn viruses. The engine identifies suspicious mail behavior and suspicious code that are common to all viruses, worms and malicious code. Having both engines embedded in the Mail-SeCure., provides full coverage and protection from all known and unknown viruses, worms and Trojan horse threats.

2. Can I use other Anti-virus software in my Mail-SeCure. appliance?
Yes. It is possible to customize a requested Anti Virus in the unit. Contact your local reseller to find out what customization features are available.

3. How often does the Anti-virus check for new updates?
The default setting for all units is evry hour. You can configure your unit to check for new updates every half an hour.

4. What happens if a new virus threat occurs before the Anti-virus definitions are updated?
In addition to F-Secure's Anti virus, we have added a second heuristic Anti Virus engine. This propriety engine provides protection from newborn viruses by identifying suspicious mail behavior and suspicious code that are common to all viruses, worms, Trojan horses and malicious code. This second engine provides full protection from all newborn viruses, worms and Trojan horses.

5. What happens when an infected mail is found?
When the system identifies an infected mail it sends the infected mail to the quarantine for 30 days (configurable). There, the system administrator can view, delete or simply leave the mail alone. In addition, a message about the detected virus will be sent to the sender, recipient and the postmaster (configurable).

Blocking system questions
1. Can I prevent users from sending and receiving certain attachments?
Yes. You can manage a policy which describes which files are allowed or denied in your company. You can decide to block attachment by type, size or subject. You can also prevent file types with changed names from entering the system. For example, if a file has been renamed from file.exe to file.xxx, the system will know to block the file.

2. Can I define various Email policies for different users and groups?
Yes. Version 3.0 provides the administrator with a range of management tools. Your system administrator can define groups and user policies.

3. I was sent an illegal attachment but I still need the file, Can I retrieve it from Mail-SeCure.?
Yes, the system administrator can retrieve it from the quarantine mailbox by entering the quarantine and releasing the mail or downloading the attachment.

4. Can the system scan blocked attachments in archives?
Yes. By default, all systems are configured to scan blocked attachments in archives.

5. What happens if a sender renames a file in order to bypass my mail policy?
Mail-SeCure. has a smart detection system which treats a file by its header regardless of its extension (configurable).

6. What happens if there are two attachments - one "legal" and the other "Illegal"?
Mail-SeCure. will remove only attachments which violate the defined policy. It will block the "illegal" file and let the legal file pass.

7. I was sent an illegal attachment but I still need the file, Can I retrieve it from the Mail-SeCure?
Yes, the system administrator can retrieve it from the quarantine mailbox by entering the quarantine and releasing the mail or downloading the attachment.

8. My workers are sending and receiving huge attachments and clogging the mail server and bandwidth. Can PineApp Mail-SeCure. help me?
Yes! You can limit the size of mail entering or exiting the network. You can also change your mail policy settings to block heavy attachments (like video files).

9. Can I send large mail without blocking the bandwidth?
All Mail-SeCure. products have a mail parking feature. This feature allows you to send heavy mail (configurable) at low peak hours, when the bandwidth needs are low (such as night times). The system will "park" mail, until a time when it can be released without using up much needed bandwidth.

10. Can the system scan blocked attachments in archives?
Yes. By default, all systems are configured to scan blocked attachments in archives.

11. Can the system scan encrypted archives?
Yes. By default, all systems are configured to scan encrypted archived.

12. Does the system Block executable files within archives?
Yes. By default, all systems are configured to block executable files within archives.

13. Can the system strip IFRAME, ActiveX and script language from html messages?
Yes. By default, all systems are configured to strip IFRAME, ActiveX and script language from html messages. In any case, the original version of the mail can be found in the quarantine for viewing or releasing.

Spam, DoS and other fetures questions
1. I am receiving a lot of Spam. What can I do?
As explained in the Models, modules and licensing FAQ section, when the advanced Anti Spam module is activated, each incoming mail passes a statistical analysis. If the final score of the result is higher than the threshold defined by the system administrator, the mail is then blocked (or tagged) as Spam. If you feel too much Spam is entering the organization, the threshold defined may be too high. Decreasing the threshold will decrease the amount of incoming Spam.

2. Too much legitimate mail is being quarantined.
This situation may be caused by a low threshold score. Increasing the threshold score will decrease your false positives.

3. I am listed in mailing lists that the Mail-SeCure. identifies as Spam . What Can I do?
You can add the sender to the White list. This confirms to the system that mail received from a defined domain should not be considered as Spam.

4. How much Spam can Mail-SeCure. stop?
Mail-SeCure. can stop up to 98% of all incoming Spam.

5. Can Mail-SeCure. accidentally stop mail that is not Spam?
Yes it can. However, to prevent this, you can configure the threshold as you wish. The higher the threshold, the more Spam can enter the system, but less chance of the system blocking wanted mail.

6. The system blocked wanted mail, how can I retrieve it?
The system administrator can retrieve all blocked mail from the quarantine. All mail in the quarantine can be deleted, released, downloaded for examination or the sender added to the White lists.

7. I am receiving so many emails my bandwidth is clogged. Can PineApp Mail-SeCure. help me?
YES! Mail-SeCure. has a built-in advanced DoS (Denial of Service) system. The system will not allow more than 8 concurrent connection per IP. Policy Management allows you to block senders by name, IP or domain. The system also prevents open-relay.

8. I have installed the system on my network but viruses are still able to enter it. Why?
Mail-SeCure. can block all known and unknown email viruses that are released on the Internet. If infected mail still enters your network, contact your system administrator. It is possible that employees are downloading infected mail from private accounts directly to their desktops.

9. I have users with personal accounts. I want their mail to be secured also. What can I do?
Mail-SeCure. has two methods for handling private POP3 accounts: 1. Transparent POP3 Proxy. This will allow users to download mail from their private account without changing any of their local settings. 2. Mail account retriever. Each POP3 account should be configured in the Mail-SeCure.. The system will retrieve the personal mail, check it and scan it, and only then sent to the recipients. Choosing one of these methods will guaranty that private POP3 mail will be scanned and delivered to the recipient without the worries from viruses and other threats.

10. What do I need to configure in order to activate the transparent POP3 proxy?
First, you need to configure your firewall so that all incoming POP3 (110) traffic will routed through the Mail-SeCure.. After this, activate the feature from within the Mail-SeCure. administration console. If Mail-SeCure. is acting as your Firewall, as soon as you activate the transparent POP3 proxy feature, the changes in the firewall will be made automatically. No configuration is needed on the clients desktops.

Miscellaneous question
1. Is the Mail-SeCure's. price dependant on the number of users?
In the 1000 series (SOHO), the price of the unit is determined by the model purchased. Determining the required model is done by the number of mail boxes in the organization. In the 2000 and 5000 series the Mail-SeCure has an unlimited licensing node program. The price of the system does not depend on the number of users using the system.

2. I purchased Mail-SeCure. six months ago and a new version has been released. What do I do?
During the first year warranty you are entitled to free version upgrades. These version upgrades are uploaded automatically to your PineApp Mail-SeCure appliance.

3. A year has passed since I purchased my system. Should I purchase an extended warranty?
We recommend that you purchase an extended warranty. In doing so, you will receive continued software updates, anti-virus/ virus definition updates and a complete hardware warranty.

4. What do I do if I have a hardware problem?
Contact your distributor or reseller immediately and a time will be scheduled to install a new unit. Installation time typically takes less than thirty minutes depending on unit model and your configuration requirements.

5. Can my configuration be backed-up?
Yes. Mail-SeCure. can automatically or manually (depending on your configuration) backup the system's configuration and all mail installed in the unit (in quarantine and in mailboxes). This is done on a daily basis.

6. Will I lose my configuration after replacing a faulty unit?
No. Make sure you back up your configuration before replacing a unit. After installing a new unit, your administrator can reload the configuration.