External mail scan services and technologies used by Kaspersky Secure Mail Gateway

 

Kaspersky Secure Mail Gateway

 
 
 

External mail scan services and technologies used by Kaspersky Secure Mail Gateway

Back to "General Info"
Latest update: August 04, 2020 ID: 12314
 
 
 
 
The article concerns Kaspersky Secure Mail Gateway 1.1 Service Pack 1 Maintenance Release 2 (version 1.1.2.12).
 
 
 
 

Kaspersky Secure Mail Gateway uses the following external services for anti-virus and anti-spam scanning:

Global level only

  • Kaspersky Security Network (KSN) — an infrastructure of cloud services that provides access to Kaspersky's knowledge databases about the reputation of files, online resources, and software. The use of data from Kaspersky Security Network enables Kaspersky applications to respond faster to unknown threats, improves the effectiveness of some protection components, and reduces the likelihood of false positives.
  • Advanced Update Services — an auxiliary method of distributing anti-spam databases using a push updates technology. When the option is enabled, the application maintains a permanent connection with Kaspersky servers and receives the most recent spam signatures identified by spam analysts, which accelerates the response to new spam.

On both global and rule levels

  • DKIM — verification of the digital signature added to messages.
  • DMARC — a scan that determines the policy and actions taken on messages based on the results of SPF and DKIM Mail Sender Authentication.
  • SPF — a comparison of IP addresses of mail senders with the list of possible message sources that has been created by the mail server administrator.

Rule level only

  • DNS block list (DNSBL) — a custom list of DNSBL servers used to improve the accuracy of spam detection DNSBL servers store lists of IP addresses that were previously detected as sources of spam and to which the Anti-Spam module assigns a spam rating and one of the Anti-Spam message scan status labels. The list is provided on a global level. 
  • Spam URI Realtime Block Lists (SURBL) — custom lists of SURBL servers used to improve the accuracy of spam detection. SURBL servers store lists of web addresses that were previously detected in the subject or body of messages recognized as spam and to which the Anti-Spam module assigns a spam rating and one of the Anti-Spam message scan status labels. The list is provided on a global level.
 
 
 
 
Was this information helpful?
Yes No
Thank you
 

 
 

How can we improve this article?

Your feedback will be used for content improvement purposes only. If you need assistance, please contact technical support.

Submit Submit

Thank you for your feedback!

Your suggestions will help improve this article.

OK