CronLab Pro 2000 Anti-Spam

 

Product Information

Vendor:CronLab
Price:£5,555 for 1,000 users, unlimited mail domains, one-year subscription (exc VAT)

Product Rating

Features star star star star
Ease of Use star star star star star
Performance star star star star star
Documentation star star star star star
Support star star star star star
Value for Money star star star star
Overall Rating star star star star star
For:Easy ten-minute deployment, minimal administration as most processes are predefined and automated, excellent anti-spam
Against:The appliance hardware could be improved
Verdict:Spam protection doesn't get any easier. CronLab's Pro 2000 is swift to deploy and delivers a superb detection performance straight from the box

Many businesses still consider anti-spam appliances too complex to deploy, but the Pro 2000 from UK-based CronLab claims a ten-minute installation. Furthermore, it avoids the complexity inherent in many solutions, as it requires no additional configuration of mail servers or clients.

It targets businesses of up to 1,000 users and is supplied as a low-profile 1U rack server. Our only criticism is the high noise levels from its blower fan, which won't be an issue in a server room but be very irritating in an office.

To test the appliance, we inserted it into a live environment, where it would filter email coming into a number of real accounts. This allows IP reputation filters to work properly and shows how well it deals with the latest threats.

A local connection to the CLI is required for initial installation and then you move over to the appliance's intuitive web interface. All we needed to provide were details of the mail domains to be filtered, along with basic information about our mail server.

Our last task was to go to our ISP's mail server settings and change the DNS MX record to point at the appliance. The entire deployment process is very simple and can, indeed, be completed inside of ten minutes.

CronLab's defences include anti-spam and anti-virus, plus protection against phishing, spoofing and spyware. Along with some proprietary techniques, it uses the SpamAssassin mail filter, which is preconfigured with a complete set of policies.

ClamAV handles anti-virus scanning and CronLab can also provide BitDefender, if dual scanning engines are required. Administrators have no access to the policies or spam scoring system used by the appliance, as this is all handled by CronLab.

When messages come in, the appliance automatically updates its internal list of valid email addresses as new ones are detected and sets up user accounts. No administration is required; the first time users log in, it generates a password and emails it to them.

Users can securely view their personal quarantine area. The deletion process allows it to learn about new spam messages, so it can update its own rulesets.

Footers are added to inbound and outbound email, but users can log in to their personal area and turn this off for either direction. For phishing protection, the appliance inserts warning messages into suspicious emails, while users can report sites declared as suspect but deemed to be safe.

The web interface home page provides a clear overview of mail activity. A pie chart shows a breakdown of all messages and a table can be set to show numbers for the past month or week.

No further configuration was necessary to provide full anti-spam protection. Users continued to receive their email as normal.

During a three-week test period, the appliance recorded a total of 4,041 inbound messages. Of these, 2,039 messages were found by the Pro 2000 to have no valid recipient and were blocked, reducing the load on the mail server.

It recorded a total of 1,644 clean messages; detected spam totalled 354, with a further 32 placed in quarantine for inspection. In total, only 22 spam messages were not picked up by the appliance, giving an impressive overall detection rate of 99.1 per cent.

Spam detection performance is extremely good, with our live tests showing very little slipping past CronLab's defences and minimal false positives. The automated message centre configuration and user password generation also significantly reduced support overheads, allowing us to easily delegate many tasks to our users.

Other initial tasks that will require intervention are primarily based around CronLab's reporting facilities. It can email reports to multiple email addresses.

These can be generated at different intervals per recipient, so you could have some receiving a daily report and others fortnightly. A PDF report is produced, which contains a table and a simple bar graph of the month's activity.

The quarantine area is enabled by default, as are spam digests, sent to each user every day. Some intervention is possible as quarantining can be disabled and the digests sent at different times.

A close competitor to CronLab is Barracuda's Spam and Virus Firewall 300, which does look better value. However, from our experiences, the Pro 2000 is easier to deploy and manage and CronLab also allows customer branding across all of its products.

An optional feature offered by CronLab is its Email Attachment Saver, which tackles the problems of sending or receiving large files.

Live test results show clearly that CronLab delivers on its promises. It is easy to install and deploy, while ongoing admin is kept to an absolute minimum. As a high-performance, plug-and-go anti-spam solution, CronLab Pro 2000 succeeds admirably.
Dave Mitchell

 
 
 

SC Featured Webcast

Employee file sharing: the good, the bad and the ugly

Streaming live on 4th June 2013 at 3pm GMT

This new webcast is set to unveil the full results from the latest data security survey, where it was revealed that 50 per cent of the information security professionals asked said that they had 'no real visibility' of how data is being sent within and outside the company. Guest speakers include the director of information security from Monster.co.uk and the ISO from Atos. To secure your free place, please click here.

SC Webcasts

Security beyond the (fire)wall

Streaming live on 6th June at 3pm BST

This webcast addresses the technological challenges of maintaining full control of your most sensitive information - even once it goes beyond the firewall - while maintaining the freedom and flexibility necessary to allow your staff and other stakeholders to work as efficiently as possible. Tune in for free to hear from our regular and popular guest speaker, Bola Rotibi from (ISC)2 application security advisory board. To secure your place, please click here.


2013's invisible network threats: Identify and respond

Streaming live on 11th June at 3pm BST

In a recent SC survey, when asked 'Do you think your current network is secure?' 43 per cent of IS professionals said they were not sure. Technology developments such as multi-point cloud solutions, consumerisation, BYOD uptake and even Windows 8 are a major headache in network security for IT leaders. So what can be done? SC's latest webcast shares practical advice from industry experts. To secure your free place, please click here.

SC Whitepapers

Java security: Balancing existing testing platforms with open source solutions

In a rush to get new products out to market quickly, companies expose themselves to the risk of software failure. Java developers often turn to open source solutions to help protect themselves from risk. This new whitepaper explains how you can use your existing testing platforms alongside open source solutions to fix those issues related to both security and quality within your Java code. To download the paper for free, please click here.


DDoS and downtime: Considerations for risk management

The purpose of this paper is to start a conversation about the often overlooked risk of downtime caused by DDoS attacks and to provide sufficient content for risk managers to account for the DDoS threat as they evaluate risks to their day-to-day operations and long-term mission. To read the paper in full, please download it for free here.


Ponemon 2012 Global Encryption Trends Study

In Ponemon's recent Global Encryption Study, the organisation surveyed 4,205 information security professionals across seven countries to examine how encryption has evolved over the last eight years. The study focused on data protection priorities, budgeted expenditures for encryption and the types of encryption technologies involved, with the findings revealing some interesting insight into the relationship between encryption and its impact on the security position of organisations. To read the full report for free, please download it here.


Advanced spear phishing: The rise of industrial phishing attacks

With phishing still the most common form of attack, hackers are now engaging in industrial-scale phishing attacks that leverage sophisticated customisation and delivery techniques. Borrowing tactics from cloud computing and database marketing, this study looks at longline phishing - an advanced form of spear phishing, which has higher clickthrough and penetration rates than traditional attacks, potentially causing a higher risk to IT security departments across the world. To read the study for free, please click here.


Home | News | Products | Whitepapers | Jobs | Subscribe | Contact Us | About Us | Advertising | Sitemap | Editorial | Subscribe to our RSS feeds RSS

This material may not be published, broadcast, rewritten or redistributed in any form without prior authorization.

Your use of this website constitutes acceptance of Haymarket Media's Privacy Policy and Terms & Conditions