FrontBridge Business & Technology: Secure Email Services and Message Archiving

1. FrontBridge Business & Technology James HamiltonGM FrontBridge TechnologiesJamesRH@microsoft.com

2. Agenda • FrontBridge Overview • Customers & Business model • Global, Load-Balanced Network • FrontBridge Service Offerings • Email Security • Inbound: Anti-Virus, Anti-Spam, Content & Policy Filtering • Outbound: Anti-Virus & Information Leak Protection • Business-to-Customer email encryption • Message Archiving • Archiving & AMC Demo • Active Message Continuity

3. FrontBridge Snapshot • Overview • Founded 1999 • 160 employees in US, Canada and Europe • 80 in R&D, Client Support & Operations • Moved HQ team from LA to Redmond • Winnipeg team stays in place • Microsoft Acquired Aug 31, 2005 • Global Customers • 3,200 customers world-wide • Coverage in leading verticals • Financial services, life sciences, manufacturing, legal, healthcare • Global Network • Nine globally-distributed data centers • Processing over 6 billion messages per month • 100% historic uptime • Eight global partners & direct sales force • Global Recognition • Analyst, press endorsement as market visionary • Leader category in Gartner magic quadrant Customers… Global Distribution… Awards…

4. Business Environment E-mail Retention is Becoming a Primary Concern • Compliance: Need a complete, tamper-proof archive • e-Discovery: Need to store, find & produce information in a complete & timely manner Security Vulnerabilities Still Exist • Spam, viruses and phishing still plague inboxes • Closer relationship between viruses and spam • Companies ill-equipped to stay ahead of threats Intense Pressure on IT to Improve Productivity • Focus on projects that provide competitive advantage • Make mission-critical systems more reliable • Deploy Secure, Reliable, Manageable, & Cost-Effective

5. Meeting Messaging Challenges Manage cost and complexity Secure, protect and comply Inbox value and access No HW/SW to install and manage Outsource routine IT management Predictable subscription based service Scalable at no additional cost Eliminate threats before they reach the network Policy-compliant infrastructure Service-based e-mail archiving for rapid deployment Eliminate spam and viruses from the e-mail stream to boost productivity Reliable e-mail availability and continuity systems Recover from unplanned outages or disasters

6. FrontBridge Business • Focus: Total Message Management • Partner & direct sales model • 2 to 3 year subscriptions with monthly payment • Channel: Direct, white label with Telcos, & resellers • Typical customer • 1000-2000 seats for Filtering, 400-500 seats for Archive • Some customers >100k seats • Filtering is largest part of revenue • Archiving is fastest growing.

7. Agenda • FrontBridge Overview • Customers & Business model • Global, Load-Balanced Network • FrontBridge Service Offerings • Email Security • Inbound: Anti-Virus, Anti-Spam, Content & Policy Filtering • Outbound: Anti-Virus & Information Leak Protection • Business-to-Customer email encryption • Message Archiving • Archiving & AMC Demo • Active Message Continuity

8. FrontBridge Global Network • 99.999% uptime SLA • 100% historical uptime made possible by global, load-balanced network • Eight data centers • 537 servers • Over 200 million message recipients processed/day • Over 350 million at peak • Store & forward system ensures no legitimate mail is lost • Automatic deferral, retry every 20 min for up to 5 days

9. Agenda • FrontBridge Overview • Customers & Business model • Global, Load-Balanced Network • FrontBridge Service Offerings • Email Security • Inbound: Anti-Virus, Anti-Spam, Content & Policy Filtering • Outbound: Anti-Virus & Information Leak Protection • Business-to-Customer email encryption • Message Archiving • Archiving & AMC Demo • Active Message Continuity

10. Active Message Continuity E-mail Filtering Message Archive Secure E-mail Primary FrontBridge Service Offerings • Layered anti-spam • Multi-engine anti-virus • Corporate Policy Enforcement • Real-time attack prevention Interception-based message archiving Customized report generation for demonstrating compliance Fully-indexed, searchable archive Rapid deployment to meet deadlines or immediate needs Full e-mail encryption B-to-C focused No public and private key management Gateway, policy-based e-mail encryption Uninterrupted e-mail accessibility Rapid recovery from unplanned disasters and network outages 30-day historical e-mail store

11. Agenda • FrontBridge Overview • Customers & Business model • Global, Load-Balanced Network • FrontBridge Service Offerings • Email Security • Inbound: Anti-Virus, Anti-Spam, Content & Policy Filtering • Outbound: Anti-Virus & Information Leak Protection • Business-to-Customer email encryption • Message Archiving • Archiving & AMC Demo • Active Message Continuity

12. FrontBridge: Email Security • Anti-Virus, Anti-Spam, & Corporate Policy Enforcement • Network TLS Enabled • Web-based management & reporting • Highly customizable filtering environment • Easy customer on-boarding • Only requires MX record change • No disruption in mail flow • One month free trial • Four Anti-Virus engines integrated • Symantec, Trend Micro, Sophos, & Kaspersky • Updates pushed every 10 minutes • FrontBridge Anti-Spam Engine • Blocks 95%+ Spam • Low false positive rate • 1 in 250,000 false positive (bulk email) • 1 in 1,000,000 false critical (direct business-to-business messages)

13. FrontBridge: Filtering Flow Diagram MTA 1 MTA 2 MessageSwitch, DeliverHosts, Quarantine

14. Spam Filtering: On the Edge • SMTP Validation • Some easy to detect & common spammer mistakes • Sender Policy Framework • Points for later spam scoring • Optional CSFM (Custom Spam Filter Management) • Blacklists / Reputation Services • Blacklists internally maintained by spam analysts team • Seed pool generated from daily reports of top IPs hitting network • IPs are then investigated by SA and added to list • Directory Services • Administration center upload or automated SFTP dump • Updated every 15 minutes

15. Spam Filtering: Fingerprinting • Message Fingerprinting • Messages fingerprinted via modified MD5 hash • Adapt to avoid most hash breakers • Fingerprints are compared with a per-Message Switch cache • Cache synchronized with central DB • Moving to real time central DB update • Gray list: SMTP 450 on significant traffic changes • Database tracks all messages moving through system • Spam Analyst acts on real-time patterns detected • Spam matches signatures in DB • Honeypots • Accounts set up to gather spam • Honeypot messages automatically fingerprinted for blocking

16. Spam Filtering: Rule Engine • FrontBridge Anti-Spam Engine • Spam Analyst on duty 16x7 • Regular expression-based rules • Four new rule pushes each day • Spam Analyst input: • Honeypots: Known Spam • Customer spam submissions • Spam Rule Analyzer DB • Spam Rule Analyzer • Over 61k rules in DB of which ~16k are active • Each message that triggers a rule also updates usage DB • False positives update the DB

17. Corporate Policy Enforcement • Rules used to enforce customer-specific policy • Create rules based on multiple message parameters • Domain • IP or IP Range • Sender • Recipient • Subject • Body • Character set • Filename • File Size • File Extension • Executable content • Simple wildcard & pattern matching capabilities • /d/d/d-/d/d-/d/d/d/d matches any SSN • Per rule customizations (notification, comments) • Supported both inbound and outboud (ILP) • Actions: reject, allow, deliver w/BCC, quarantine, test, encrypt

18. Mail Traffic Reports • Web based reports in Admin Center • Most can span up to 2 months of data at a time • Exportable to Microsoft Excel • Organization, domain, or domain-group reporting • Total messages • Inbound messages • Outbound messages • Policy filtered messages • Message Level detail down to sender, recipient and policy rule applied • Content filtered messages • Message Level detail down to sender, recipient & content rule applied • Virus Filtered messages • Message Level detail down to sender, recipient and virus name

19. FrontBridge Secure E-mail • User sends an e-mail to FrontBridge • E-mail is automatically encrypted at the gateway according to rules created and managed within the Policy Enforcement module • The public key is based on the message recipient’s e-mail address to encrypt the E-mail • The private key is dynamically generated for the message recipient when they decrypt their message

20. Agenda • FrontBridge Overview • Customers & Business model • Global, Load-Balanced Network • FrontBridge Service Offerings • Email Security • Inbound: Anti-Virus, Anti-Spam, Content & Policy Filtering • Outbound: Anti-Virus & Information Leak Protection • Business-to-Customer email encryption • Message Archiving • Archiving & AMC Demo • Active Message Continuity

21. Message Archive Overview • Hosted service • Low cost of storage & administration • Captures Email, IM, Bloomberg & archives documents • Multiple Business Drivers including • Meets regulatory compliance requirements • Offers corporate surveillance functionality • Provides Knowledge management capabilities • Easy on-boarding of service • Requires MX record change for external email • Envelope Journaling for internal email • Web-based supervisory, auditing & reporting tools

22. FrontBridge Message Archive Inbound E-mail scrubbed for unwanted content Messages captured and copied “in stream” Message store holds e-mail, IM, Bloomberg & uploaded documents End users have full E-mail functionality via web-based OWA clone Supervisors can have access to archive for message monitoring Auditors and outside counsel can access archive and/or reports

23. Compliance Managers & Supervisors • SEC 17a-4 – Physical Retention requirements • Mail stored for 3 years (1-7 years retention available) • Each message assigned a unique contiguous serial number • Two online copies of each message stored in 2 discreet locations • Messages available online 24 x 7 • Can be exported as EML files in ZIP • FrontBridge will provide letter of attestation to the SEC • Act on customer’s behalf for SEC queries • External Auditor role permits outside access for auditors • Mail destroyed on expiration date; Destruction report included • NASD 3010 – Communications Review requirements • Keyword list and message sampling support • Whitelist trusted senders from random sample • Random sampling support of int/ext mail, int/ext IM • Message harvest process built in • Review classification categories, with escalation capability included

24. Corporate HR & Legal • Advanced Search • Search across message headers, bodies and 200 attachment types • Regex, Soundex, Stemming search supported • Tag messages for others; add notes to messages • Case Management • Return search results to custom folders • Share folders with others • Destruction Hold • Stall message destruction by user, by organization • Attorney/Client Privilege protection

25. Message Archive: Reporting • Compliance Reports & system Reports • 23 predefined reports available • Web-based report-generation engine • Available 24x7 • Data harvested & parsed in real time • Reports can be scheduled for regular delivery • PDF or XLS format

26. Archiving Competition • More than 50 companies in the space • Big divide between service provider & on-premise • Major competitors • Zantaz • Iron Mountain • iLumin (Assentor) • KVS • EMC/Legato/OTG • Other notable competitors • AdvisorMail

27. Message Archiving & AMC Demo Kevin Merritt, Architect

28. Agenda • FrontBridge Overview • Customers & Business model • Global, Load-Balanced Network • FrontBridge Service Offerings • Email Security • Inbound: Anti-Virus, Anti-Spam, Content & Policy Filtering • Outbound: Anti-Virus & Information Leak Protection • Business-to-Customer email encryption • Message Archiving • Archiving & AMC Demo • Active Message Continuity

29. FrontBridge Active Message Continuity • Fully functioning supplementary email system – can send new messages and reply to and forward previously received messages • Easy point in time as well as ad hoc restoration of messages • 100% shared code base with Message Archive (including the OWA clone web-based front end) with some minor tweaks: • 30-day perpetually rolling archive • Compliance features and reports concealed

30. Active Message Continuity • Shared code base & infrastructure with Message Archiving • Targeted as a continuity solution, not retention • Only differences between AMC and MA are: • 30 day rolling archive instead of 3, 5 or 7 years • Attachments and bodies not searchable • Compliance workflow tools removed • Fewer reports • Easier to use • Less expensive MRR • Limited Competition – MessageOne

31. Summary • E-mail is a mission critical application • Customer benefits from software as a service model: • Enable companies to tackle complex e-mail tasks with minimal IT staff • No upfront capital investment • Predictable recurring costs • Allow IT staff to focus on more strategic projects offering real competitive advantage • FrontBridge, a Microsoft subsidiary, is the leading services provider for e-mail security, protection, and compliance • We’re hiring • Developers, Testers, Program Managers, System Administrators, DBAs, and Client Support • Help drive Microsoft success in non-consumer hosted services