February 01, 2006
ca. $2.20 per user per month for 5,000 users
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Amazing controls over every aspect of the operation.
- Weaknesses: Message body filtering is notably absent.
- Verdict: Very impressive debut with a lot of value to offer.
Mimecast offers its technologies as an appliance and a managed service for smaller enterprises, run from three data centers. The service is almost wholly automated, with clients not expected to do much admin work at all beyond reporting.
The service starts by watching regular outbound mail for a few days to build up a whitelist of email senders known to be valid recipients. Incoming connections are compared to that whitelist so invalid recipients can be filtered, but this needs careful handling for those mail aliases and service accounts that do not generate outbound mail. Indeed, it is probably better served by just integrating with an LDAP server, which the service does support anyway.
Incoming mail is treated in a similar way — if the sender and recipient have not communicated before, it is briefly quarantined while checks ensure the sender is a real mail server rather than a bot. In practice, this should avoid false positives on spammy-looking valid mail-like newsletters.
With no intervention required from users, we were expecting a very simple management GUI, but were astonished at what is actually provided.
Mimecast offers an amazing degree of control over the operation of the service, with policy options on every aspect of mail delivery, handling and management. The array of controls is daunting, but presented in a very effective interface that even includes a fully fledged web mail client.
A massive array of controls can be enforced on message headers and attachments, but there is very little capability for actual filtering on message bodies. This alone lets the service down.
All access is logged, meaning that firms with concerns that mail administrators might access emails they should not can easily conduct audits to check that no inappropriate activity has occurred.
Mimecast deserves kudos for its extensive controls and features. It might be new to the scene, but it has built a product worthy of attention. Unlike many others, 24x7 support is included without extra charge, and long-term archival is part of the service.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?
- 90% of ITDMs believe IAM is crucial to digital transformation success
- Research: Hacked companies could see customer exodus if breached
- Misconfigured drive exposes locations of explosives used by oil industry