FortiMail垃圾邮件案例
飞塔防火墙04-部署反垃圾邮件
• 引言 • 飞塔防火墙04概述 • 反垃圾邮件技术 • 飞塔防火墙04部署反垃圾邮件方案 • 部署效果评估 • 总结与展望
01
引言
背景介绍
随着互联网的普及，电子邮件已成为 人们日常交流和工作的重要工具。然 而，垃圾邮件也日益泛滥，给用户带 来了不必要的困扰和安全隐患。
通过测试结果可以看出，部署飞塔防火墙04后， 反垃圾邮件功能表现优异，有效地提高了企业的 网络安全防护能力。
误判率较低
正常邮件误判率较低，说明防火墙的算法和规则 库较为完善，能够准确地区分正常邮件和垃圾邮 件。
性能稳定
防火墙在处理大量邮件时表现出稳定的性能表现， 能够满足企业对于网络安全的需求。
06
配置流程
准备工作
确保硬件和软件环境满足要求， 包括防火墙设备、网络环境等。
登录配置界面
通过Web浏览器登录飞塔防火墙 04的管理界面。
启用反垃圾邮件功能
在系统设置菜单中，找到反垃圾 邮件功能并启用。
监控与日志分析
定期查看防火墙日志，分析垃圾 邮件过滤情况，以便及时调整配
置。
测试与验证
对配置进行测试，确保反垃圾邮 件功能正常工作。
定期审查
定期审查反垃圾邮件功能的效果，以便及时 调整配置或采取其他措施。
05
部署效果评估
测试方法
模拟垃圾邮件攻击
通过模拟各种垃圾邮件攻击，如恶意 软件、钓鱼网站、欺诈信息等，测试 防火墙的识别和拦截能力。
正常邮件识别
性能测试
评估防火墙在处理大量邮件时的性能 表现，包括吞吐量、延迟等指标。
测试正常邮件是否能正常通过防火墙， 确保正常邮件的识别率。
垃圾邮件不仅占用了大量的网络资源 ，还可能携带恶意软件、病毒等，对 用户的计算机和网络安全构成威胁。
飞塔邮件安全解决方案(template)
目录第一章邮件系统的安全现状 (2)第二章总体安全解决方案 (3)2.1解决方案的拓扑 (3)2.2功能介绍 (4)2.2.1 多种强大的垃圾邮件过滤技术 (5)2.2.2 网关、透明和服务器三种模式部署灵活 (7)2.2.3 域和Access List两种方式简化配置 (9)2.2.4 策略结合保护内容表方式部署 (10)2.2.5 直观的邮件队列 (11)2.2.6 多种垃圾邮件处理方式 (12)2.2.7 即时的垃圾邮件统计与分析 (14)2.2.8 强大而且详尽的报告 (15)2.2.9 邮件存档 (17)2.3技术参数 (17)第三章FORTINET及产品介绍 (18)3.1公司介绍 (18)3.2认证证书 (19)第四章总结 (23)地址：广州市越秀区寺右新马路111-115号五羊新城广场1421室第一章邮件系统的安全现状(此处客户网络情况介绍)对于****的管理团队来说，邮件已经成为商务活动和政务活动的关键网络应用。
垃圾邮件制造者和攻击者使用邮件作为最普遍的攻击工具轰炸用户，发送无用的邮件和用感染病毒、蠕虫、木马的邮件攻击企业资源，盗窃信息。
这些攻击包含有新一代有害的应用攻击，比如钓鱼和间谍软件等。
随着2006年每天全球的垃圾邮件流量达到300亿封，企业的邮件服务器和用户的邮箱很快就被压垮了，浪费了企业的资源和降低了员工的工作效率。
打击垃圾邮件和保障邮件的完整性和干净变得比以往更为重要。
地址：广州市越秀区寺右新马路111-115号五羊新城广场1421室地址：广州市越秀区寺右新马路111-115号五羊新城广场1421室第二章 总体安全解决方案2.1 解决方案的拓扑反垃圾邮件网关的部署图部署说明：我们推荐采用Fortinet 公司的Fortimail400产品，它是业内唯一一款能够以透明模式部署的反垃圾邮件产品，将其部署与邮件服务器前可以实现以下功能：1、 实现反垃圾邮件功能，FortiMail 的反垃圾邮件库是由分布于全球各地的专家团队共同予以维护的，对处理各种语言的垃圾邮件具有很好的效果。
垃圾邮件
预防措施
垃圾邮件的发送者不断采用高级的新方法来发送他们的邮件，以下几种方法可以用来减少系统被攻击的危险：
1、不轻易留下电子邮件地址
每次给某个人留下电子邮件地址时，被列入垃圾邮件发送者的发信清单中的机会就会增加一些。大多数网上 购物站点都要求消费者留下电子邮箱地址。有些实体商店提供一些打折或免费商品，需要顾客留下电子邮箱地址。 消费者应该了解到虽然留下电子邮箱地址会获得一点好处，但也可能使电子邮箱地址被垃圾邮件的制造者获得。
(2)泛滥成灾的商业性垃圾信件，每5个月数量翻倍，国外专家预计每封垃圾邮件所抵消的生产力成本为1美 元左右。我国开始被其他国家视为垃圾邮件的温床，许多IP地址有遭受封杀的危险，长期下去可能会使我国成为 “信息孤岛”。
(3)垃圾邮件以其数量多、反复性、强制性、欺骗性、不健康性和传播速度快等特点，严重干扰用户的正常 生活，侵犯收件人的隐私权和信箱空间，并耗费收件人的时间、精力和金钱。
(2)2002年5月20日，中国教育和科研计算机网公布了《关于制止垃圾邮件的管理规定》，其中对垃圾邮件的 定义为：凡是未经用户请求强行发到用户信箱中的任何广告、宣传资料、病毒等内容的电子邮件，一般具有批量 发送的特征。
(3)2003年2月26日，中国互联网协会颁布的《中国互联网协会反垃圾邮件规范》中的第三条明确指出，包括 下述属性的电子邮件称为垃圾邮件：①收件人事先没有提出要求或者同意接收的广告、电子刊物、各种形式的宣 传品等宣传性的电子邮件；②收件人无法拒收的电子邮件；③隐藏发件人身份、地址、标题等信息的电子邮件； ④含有虚假的信息源、发件人、路由等信息的电子邮件。
2、使用电子邮件的过滤功能
大多数电子邮件应用程序都有过滤功能，使用者能够封锁指定地址的邮件。如果收件人经常从同一个因特网 域中收取垃圾邮件，就可以封锁来自这个用户的所有邮件。然而，封锁一个因特网域可能会导致这个域中的所有 邮件都无法进入收件人的邮箱，即使是想要的邮件。所以只有在确定来自这个域的所有邮件都是垃圾邮件时才应 使用这个特性。垃圾邮件产生的影响在物理上可能不会造成破坏性，但在经济上却具有破坏性。垃圾邮件使用系 统资源，降低了员工的工作效率。雇员花费时间从垃圾邮件中进行筛选，降低了工作效率。有些雇员可能会阅读 垃圾邮件，并点击信件中所包含的恶意URL或恶意附件，感染病毒并进一步产生连锁反应。垃圾邮件利用众多的 业务使服务器超载，降低了服务器发送、接收与业务相关的信件的能力。过多的业务量减缓了系统运行，甚至造 成邮件服务器的瘫痪。
英语材料——渣打邮件门
一个在瑞信银行工作的白领给所有的朋友群发邮件，怒斥丈夫和小三背叛自己的各种行为；丈夫和小三分别回信，让此女停止纠缠速速离婚……本来是一桩常见的斗小三狗血事件，但是重点在于，三位主角均是金融业高级白领，来往信件皆为英文，各种优雅的语法被用作三角恋斗法，让网友大开眼界，将此称为“瑞信女斗小三”事件，也叫渣打邮件门。
以下为渣打邮件门全文,首先是女主角给所有人群发的：Dear friends,After 13 years and 2 beautiful children together, Yale and I haveparted our ways. Yale moved out last week.接下来是女主角给小三写的：Dear Diane/Tao Dan Yang,Over the past couple of years, you knew everything about my family.You knew when my kids had their soccer tournaments, you knew when they had their swimming practices. You even knew their baby nicknames. On December 18th, 2009, on a noon flight, I took my children to the U.S. for Christmas vacation. On the very same day, December 18th, 2009, on an afternoon flight, you and Yale took off for the beaches of Phuket and shopping streets of Bangkok for Christmas vacation. Diane, as a fellow woman, I often wondered if the level of ecstasy this vacation had brought you equates to the level of devastation this vacation had brought to my children and me. Diane, I often asked myself what was it like for you to sleep in the arms of another woman's husband, other children's father? I wondered if you ever thought about us, the children and the wife, that we are made of flesh and blood, that we have feelings, that we could get hurt, very hurt, devastatingly hurt.I pondered if you knew you were destroying a family, if you knew your joy would bring endless tears to us.We went to Beijing last week for Chinese New Year. Your clothes were in our Beijing home. My son screamed:" Mommy, don't touch those, they are disgusting! Set them on fire, burn them to hell. They are the devil's cloth!" My children are hurt. My daughter, 9 years old, now says "Mommy, I don't ever want to get married." My s on, 8 years old, says "Diane is our Voldemort!" The psychological damage this affair has done to my children is catastrophic. They are forever emotionally damaged. With this, I announce you the winner.How do I feel, Diane? This affair is like 10 thousand knives stabbing and chopping my heart all at once. This affair has left me in so much pain that I don't know how to heal myself. This affair has taught me tear supply can actually be infinite. This affair has crushed me, leaving me a corpse walking around with no heart. I don't know how to deal with this kind of pain. I don't know how to move on. But I have children. I must move on.Diane, I pray to God that you will never have to experience this kind of betrayal and hurt. I wish you and Yale a happy life together because, after all, we are all women and we all deserve to be happy.With sincere regards,Lily渣打邮件门小三的精彩回复：Dear Lily,I understand that you are going through a difficult time in your personal life, and I sincerely hope that you will find a way to deal with it that is the best for you and your children.I do understand how you feel. I also understand, however, that a marriage can only break apart from the inside. I do not appreciate your attempt to smear my reputation and paint me as the home wrecker. You know as well as Yale does that your marriage fell apart long before Yale and I even met. Whether or not I am in Yale's life has nothing to do with the eventual outcome of your marriage. I am sure you understand this as well, but you nonetheless sought to burn me on the cross as the scapegoat for your failed marriage, which I do not believe is a mature thing to do.Your description of the emotional damage your children have suffered is disturbing indeed.I cannot help but wondering what you have been telling them. I would think that a mother's first and foremost priority is to protect her children from any emotional damage, rather than using them as bargaining chips or as props to win public sympathy. Yale is the children's father and will always be. I am sure he will always love them and be the best father he can be to them. Wouldn't it make more sense, for the sake of the children's wellbeing, to emphasize to them that both their parents will always love them even though one parent will not be living with them all the time? I do not see what benefit there could possibly be to teach the children to hate their own father.You asked me how it was like to sleep in Yale's arms. I also wanted to ask you, Lily, why would you want to hang on to someone who clearly does not want to be with you at all? Lily, you are intelligent, highly-educated and you have a high-paying and well-respected job. So why did you spend so much time and energy trying to force someone who does not care about you to stay with you? As a fellow woman I want to ask you this, don't you think you deserve better? If there's anything that is worse than sleeping in the arms of another woman's husband, it is sleeping in the arms of someone who resents you, cannot stand you and wants to run away from you whenever he gets a chance. So Lily, why would you want to put yourself in that situation? Once again, don't you think you deserve better?I sincerely hope that the pain you are currently feeling will subside soon and you can turna new leaf in your life. Please remember, you can lose a job, you can lose a spouse, but you should never lose yourself. And please, do not vent your negative feelings on your children. They are innocent. Please always keep in mind their best interests rather than your own. You deserve true happiness, and I hope that you will find it soon.Best regards,Diane。
Fortinet FortiMail安全入门指南说明书
Securing Your Enterprise Office 365 with FortiMailThe appeal for Office 365 from Microsoft is readily apparent: nn A full suite of mission-critical business applicationsnn A “no operations” modelnn Always-on cloud distributionnn Disaster recovery and data security built inPlus many others. And Microsoft has done a first-rate job of making Office 365 both a complete solution and one that is easy to adopt. Microsoft has even built in layers of security—starting with physical security at their world-class data centers with layers on top for DDoS, encryption, anti-malware, and other critical security capabilities.While Microsoft has delivered a full-suite solution in Office 365, many organizations have a need for a “next-generation” level of security for their Office deployment. With the release of FortiMail in Azure (https:///en-us/marketplace/partners/ fortinet/fortinet-fortimail/) joining Forti M ail Cloud, not only is this level of security available but it is ready to deploy from directly within Microsoft’s Cloud environment.FortiMail Complements Office 365 Security in Microsoft’s CloudOne of the driving use cases for FortiMail has been added protection of Microsoft Office and Office 365. For customers looking for advanced threat protection a nd compliance, there’s a proven partnership with FortiMail + Microsoft Office solutions. What FortiMail brings to your Office 365 environment is:nn Top VBSpam + an ti-spam and anti-phishingnn NSS Labs Recommended detection and preventionnn Granular-level details on threats—including notifications on emails/docs that have been cleansednn Identity-based encryptionnn Predefined dictionaries that are customizableFortiMail is an integrated component of the Fortinet Security Fabric which ensures that not only can advanced email attacks be stopped at an early stage, but intelligence about the full attack lifecycle can be dynamically generated and distributed throughout the organization. And, because it’s delivered by Fortinet, FortiMail is backed by Fortinet’s industry-leading FortiGuard threat research, so you can rest easy knowing your mission-critical business applications are protected.Why FortiMail and Office 365?When Fortinet embarked on designing and developing FortiMail, the foundational design point was to ensure that communication and documents reach their destinations in a timely manner. Once this was established as the foundation, Fortinet went about building a security solution that fully protected customer communication without compromising the speed of business needed. The end result is an enterprise-class email security solution built with a“Low-Impact Scanning” approach: 1SOLUTION BRIEF: SECURING YOUR ENTERPRISE OFFICE 365 WITH FORTIMAILWhat’s the Catch—Must Be Difficult to Set Up, Right?Answer: No—the FortiMail + Office 365 setup is easy and straightforward. FortiMail has been working with Microsoft Office products for years, and FortiMail can be easily added either during the initial Office 365 setup or as an add-on later. Below is one reference architecture for the FortiMail + Office 365 solution. As you can see, not only is the next-generation protection available but all of the near-instantaneous processing takes place within Microsoft Cloud.Copyright © 2018 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.GLOBAL HEADQUARTERS Fortinet Inc.899 Kifer RoadSunnyvale, CA 94086United StatesTel: +/salesEMEA SALES OFFICE 905 rue Albert Einstein Valbonne06560, Alpes-Maritimes, FranceTel +33 4 8987 0500APAC SALES OFFICE 300 Beach Road 20-01The Concourse Singapore 199555Tel: +65.6513.3730LATIN AMERICA SALES OFFICE Paseo de la Reforma 412 piso 16Col. Juarez C.P . 06600 México D.F.Tel: 011-52-(55) 5524-8428December 12, 2018Microsoft runs their software as a service (SaaS—Office 365 is a SaaS service) and their infrastructure as a service (IaaS—Microsoft Azure delivers both IaaS and platform as a service) on logically and physically separated infrastructure. However, all of Microsoft’s Cloud operates within a single autonomous system (AS). With this design, your information is secure, is delivered rapidly, and never has to leave Microsoft’s world-class network. Our FortiMail + Office 365 Cookbook can be found here: /how-to-integrate-fortimail-into-office-365/.You can find our FortiMail in A zure here: https://azure. /en-us/marketplace/partners/fortinet/fortinet-fortimail/.For more information on our Microsoft Azure program @Fortinet, please visit our Azure site: https:///azure .FortiMail Excels with Independent TestingFortinet is committed to rigorous independent testing and FortiMail is the most validated email security in the industry. It routinely earns top marks in Virus Bulletin VBSpam testing, ICSA ATD Email Certification, NSS Labs Breach Prevention Group Tests and SE Labs Email Security Services Testing. For more detail visit our certifications page: https:///corporate/about-us/product-certifications.htmlAbout Fortinet FortiMailFortiMail is provided by Fortinet, Inc., ( ),a recognized global security leader. Fortinet’s FortiMail Secure Email Gateway provides protection to organizations against message-born threats, and it provides a turnkey approach to secure and clean corporate email. FortiMail provid es high-performance mail routing and security by utilizing a range of high-accuracy, anti-spam filters coupled with FortiGuard’sindustry-leading antimalware and advanced threat protection s . This is complement by a full range of data controls- includingDLP, email encryption and more.。
Fortinet技术白皮书
Fortinet技术白皮书Version 5.02006.03目录1．公司介绍 (5)2．产品定位 (5)2.1产品理念 (5)2.2产品概述 (6)2.3系统结构 (6)3．功能列表 (7)4．FORTIGATE系列性能 (9)4.1F ORTI G A TE-50A (9)4.2F ORTI G A TE-60 (9)4.3F ORTI W I F I-60 (10)4.4F ORTI G A TE-100 (10)4.5F ORTI G A TE-100A (10)4.6F ORTI G A TE-200 (11)4.7F ORTI G A TE-200A (11)4.8F ORTI G A TE-300 (11)4.9F ORTI G A TE-300A (12)4.10F ORTI G ATE-400 (12)4.11F ORTI G ATE-400A (13)4.12F ORTI G ATE-500 (13)4.13F ORTI G ATE-500A (13)4.14F ORTI G ATE-800 (14)4.15F ORTI G ATE-800F (14)4.16F ORTI G ATE-1000A/FA2 (15)4.17F ORTI G ATE-3000 (15)4.18F ORTI G ATE-3600 (16)4.19F ORTI G ATE-5020 (16)4.20F ORTI G ATE-5050 (17)4.21F ORTI G ATE-5140 (17)4．其他产品 (19)4.1F ORTI M ANAGER－集中安全管理平台 (19)4.2F ORTI C LIENT－主机安全软件 (19)4.3F ORTI A NALYZER－集中日志报告系统 (19)4.4F ROTI R EPORTER －安全分析报告软件 (19)4.5F ORTI M AIL －高性能邮件安全平台 (19)5．FORTIGUARD 安全服务系统 (21)5.1F ORTI P ROTECT －全球安全防护服务体系 (21)5.3F ORTI G UARD入侵检测和防御服务 (21)5.4F ORTI G UARD W EB内容过滤服务 (21)5.5F ORTI G UARD反垃圾邮件服务 (21)6. FORTINET产品特色 (21)6.1F ORTINET提供了网络安全的整体解决方案 (21)6.2F ORTINET产品技术领先 (22)6.3F ORTINET产品功能齐全 (22)6.4F ORTINET产品线完善 (22)6.5F ORTI G A TE产品应用面广适合各种领域 (22)6.6F ORTINET设计的ASIC独特 (22)6.7F ORTI G A TE作为防病毒网关产品支持多种I NTERNET协议 (22)6.8F ORTI G A TE支持中文管理界面 (22)6.9F ORTINET有高端产品适合运营服务供应商应用 (23)6.10F ORTINET服务体系完善 (23)6.11F ORTI G ATE产品性价比高 (23)6.12F ORTINET产品可以为企业带来良好的投资回报率 (23)6.13F ORTINET产品在中国得到广泛应用 (23)6.14F ORTINET获得多项国家权威机构论证证书和销售许可证 (23)6.15F ORTINET产品在中国业界获得多项奖项 (23)7．竞争分析 (25)1.F ORTI G ATE作为防火墙产品与其它同类产品相比优势突出 (25)2.F ORTINET在网络安全市场上竞争对手甚少 (25)3．F ORTINET公司引领统一威胁管理市场潮流 (25)4．市场需要UTM的理由 (25)8. 销售许可 (26)9．典型应用 (27)9.1中小型企业防火墙应用 (27)9.2中大型企业防火墙应用 (28)9.3分布型企业防火墙应用 (28)9.4校园网络安全部署应用 (29)10．成功案例 (30)10.1应用案例1 (30)10.2应用案例2 (30)10.3应用案例3 (31)10.4应用案例4 (32)10.5应用案例5 (32)10.6应用案例6 (33)10.7应用案例7 (34)11．核心技术 (37)11.1技术要点 (37)11.2病毒防火墙新理念 (37)11.3基于网络的IDP功能 (37)11.4集成VPN的安全网关 (37)11.5ASIC加速和实时操作系统 (37)11.6独特的内容过滤 (38)11.7动态威胁防御系统 (38)11.8分区域安全管理 (38)12．技术支持 (39)1．公司介绍美国Fortinet(飞塔)公司是新一代网络安全防御技术的前锋，引导着网络信息安全发展的潮流。
Fortinet
腾蒙成都
地址：成都市人民南路二段18号川 信大厦16楼B-2（610016）
电话：（028）86200501 传真：（028）86200504
公司产品简介
美国Fortinet (飞塔)公司是新一代的网络 安全技术引领厂家，成功地推出基于ASIC加 速的网络安全平台FortiGateTM。公司创始 人、总裁兼CEO Ken Xie（谢青）是网络与信 息安全的杰出专家，著名高科技创业家。公司 创始人、付总裁兼首席技术长官Michael Xie（ 谢华）是网络与信息安全的杰出专家，具有十 五年网络安全工业的经验。Fortinet公司成立 于2000年，总部位于美国加州硅谷Sunnyvale 市，在加拿大、法国、英国、德国、瑞典、瑞 士、意大利、澳洲、墨西哥、日本、韩国、新 加坡、泰国、印度、菲律宾、马来西亚、中国 大陆、台湾、香港等十多个国家和地区均设有 分支机构。Fortinet在中国北京和天津投资建 立了全资独资公司。
索日志记录。
管理 易于使用的、安全的图形化和命令行界面。 快速配置模版：根据配置模版，逐步配置。 图形配置界面：通过IE浏览器进行管理。 多语言支持：支持英文、中文（简体、繁体）、日文、法语和韩语。 安全远程管理：通过浏览器界面，使用HTTPS，HTTP远程登录管理；
还可以通过命令行界面，使用SSH,Telnet远程管理。 LCD配置管理：使用前面板简单的按键和LCD对接口地址快速设置。 命令行界面：提供Console口或安全远程连接。
为了对付最新的安全威胁，Fortinet创造了一系列新的算法和检测技术： 完全内容保护（Complete Content Protection,简称CCP）技术能
够扫描和检测整个OSI堆栈模型中最新的威胁。 动态威胁防御系统（Dynamic Threat Prevention System,简称
梭子鱼垃圾邮件防火墙应用案例
梭子鱼垃圾邮件防火墙应用案例梭子鱼垃圾邮件防火墙应用案例TCL集团概况:TCL集团股份有限公司创办于1981年，是一家从事家电、信息、通讯、电工产品研发、生产及销售，集技、工、贸为一体的特大型国有控股企业。
经过20年的发展，TCL集团现已形成了以王牌彩电为代表的家电、通讯、信息、电工四大产品系列。
并开始实施以王牌彩电为龙头的音视频产品和以手机为代表的移动通信终端产品的发展来拉动企业增长的战略。
二十年来，TCL发展的步伐迅速而稳健，特别是进入九十年代后，连续十二年以年均50%的速度增长，是全国增长最快的工业制造企业之一。
公司一直以“研制最好的产品，提供最好的服务，创建最好的品牌”三个最好作为竞争策略，业务上不留空白。
用户需求:TCL集团公司拥有员工3万余人，活跃邮箱2万6千个。
TCL在工业制造企业中是信息化建设的领军人，公司早在九十年代就建立了较为完整的网络安全系统，并设立专门的部门负责整个集团的网络设备的安全运行。
在坚持企业信息化管理过程中，垃圾邮件一直是网络管理员和集团领导头疼的问题。
据统计，集团中每个邮箱每天收到百余封垃圾邮件，整个集团每天收到的垃圾邮件有近200万封。
数量之大，增加了网络负载。
集团对于病毒黑客程序进行严密防护，防火墙，防毒网关等一应俱全，大部分的病毒和恶意程序都被挡在了局域网之外，但仍有相当多的病毒夹杂在邮件中进入企业内部，造成安全隐患。
防火墙之类的网关设备对于邮件扫描的能力有限。
部署防垃圾邮件解决方案成为目前TCL急待解决的安全问题。
集团曾试用过很多产品，但在集团中的实施效果并不理想。
且公司在使用软件还是硬件解决方案的问题上还犹豫不决。
解决途径:博威特公司是专为大企业提供垃圾邮件解决方案的厂商，虽说是国内的反垃圾邮件市场近期出现的黑马，但在世界范围，已经是拥有20，000用户的业界领袖。
其反垃圾邮件技术更获得美国专利许可。
梭子鱼垃圾邮件防火墙产品有多达五个型号，可以供各种规模的企业选用。
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
Orascom电信使用FortiMail垃圾邮件解决方案
Orascom电信是国际电信市场的领先运营商，最近它宣布将使用Fortinet 的统一威胁管理解决方案(Unified threat management，简称UTM)阻挡垃圾邮件。
FORTINET是市场领先的网络安全提供商和全球解决方案的领先者。
Orascom电信部署Fortinet的FortiMail是多层电子邮件安全平台，可保护企业电子邮件服务器和250万个用户不受垃圾邮件和病毒的侵害。
Orascom电信用户早在09年3月底就超过了8000万，同时，它又是中东，非洲和亚洲最大和综合性最强的运营商。
所有企业总部和Orascom电信分支机构和制造商间的信息交换都是通过电子邮件，电子邮件是最大和重要的商业应用，企业所有人都要使用它。
过去，公司安装在交换服务器上的第三方软件，无法解决大量的垃圾邮件问题。
为了解决上述面临的问题，Orascom经过对主要的电子邮件安全解决方案进行竞争性评估，决定选择Fortinet的FortiMail平台，因为这一解决方案的高精确性评分为99.8%。
此外Orascom电信选择FortiMail解决方案还考虑到它的独一无二的架构选择，包括高使用率和透明模式的共享等。
飞塔长庆油田成功案例
一、用户概况描述
长庆石油公司隶属于中国石油天然气集团公司，总部设在中国西安。
下设二级单位42个，职工总人数3.7万多人。
下设的通信公司为长庆集团各公司办公及住宅区提供各种方式的网络服务及互联网接入业务。
长庆石油勘探局通信公司主要担负着长庆通信专网、长庆互联网的建设、运营、维护和管理。
其管理的专用网是中国石油企业专用网内覆盖范围最大、业务种类最全的专用网之一，拥有近一亿元人民币的固定资产和近八万电话、计算机网络用户。
长庆互联网是以西安网控中心为核心，由西安园区网、庆阳园区网、银川园区网、延安园区网组成的通过100Mbps-1000Mbps带宽互联的计算机广域网。
长庆互联网分别在西安以（400Mbps）、银川、庆阳以100Mbps带宽接入因特网，同时它与中国石油计算机专用网保持直联，是中国石油计算机专用网的重要组成部分。
二、用户安全需求
长庆油田的网络基本上可以划分为家属区接入，各园区办公网接入等。
主要的安全需求是这样的：
1、整个网络所面临的问题是大量P2P、迅雷占据了网络的主要带宽，极大地降低了网络的使用率。
2、网络中的公网IP不是很多，需要防火墙作NAT转换和根据IP地址段和服务做大量的访问控制策略。
3、整个网络所面临着最为严重问题是，面临着来自Internet的各种网络层和应用层的安全威胁，如：
a. 外网流窜进来的病毒、木马、蠕虫、间谍软件；
b. 各种网络攻击和入侵；
c. P2P、迅雷类的软件消耗了网络的可用资源。
d.垃圾邮件在内网肆虐，影响工作效率
三、推荐解决方案
由于不同的区域的安全需求不同，所以针对这两个区域各自进行了针对性的安全部署。
1．在长庆油田的接入出口采用使用FortiGate-3600A的防火墙功能实现访问控制，根据不同的IP网段和服务设置不同的访问控制策略；
2．使用FortiGate-3600A的入侵防御功能，保护内部网络和服务器群，防御来自于系统外部的攻击和入侵；
3．开启FortiGate-3600A的TCP、UDP源IP地址会话限制，不仅限制P2P的大量会话，从而保障正常流量的带宽。
4. 开启Fortimail 垃圾邮件防护功能，提高工作效率
四、已购产品列表
设备名称
数量
FortiGate 5020（FortiGate-5001）2台（已迁移到其他区域）
FortiGate 3600A 2台
FortiGate 800 2台
Fortimail 1000C 2台
35互联使用FortiMail垃圾邮件解决方案
35互联是中国互联网托管服务公司的佼佼者，它宣布将使用Fortinet的Fortimail 垃圾邮件网关阻挡垃圾邮件。
FORTINET作为市场领先的网络安全提供商和全球解
决方案的领先者。
部署Fortinet的FortiMail是多层电子邮件安全平台，可保护企业电子邮件服务器和1100万个用户不受垃圾邮件和病毒的侵害。
三五互联是一家依靠自主研发的应用软件系统，重点面向中国中小企业客户，提供企业邮箱、电子商务网站建设、网络域名、办公自动化系统（OA）、客户关系管理系统（CRM）等软件产品及服务的专业提供商。
作为中国领先SaaS品牌，三
五互联自2004年成立以来，通过技术和商业模式的创新，业务实现了快速增长，
目前已发展成为国内通过SaaS模式为中小企业信息化建设提供软件应用及服务最
主要的提供商之一。
为了解决上述面临的问题，35互联经过对主要的电子邮件安全解决方案进行
竞争性评估，决定选择Fortinet的FortiMail平台，因为这一解决方案的高精确性评分为99.8%。
此外35互联选择FortiMail解决方案还考虑到它的独一无二的架构选择，包括高使用率和透明模式的共享等。