M86 Security MailMarshal SendSecure

Overview:

Most emails are transmitted to their recipients in plain text, making it simple for an attacker to intercept and compromise data. To solve this, traditional email encryption products use standards like S/MIME or OpenPGP. However, these encryption methods can be difficult to implement and maintain because users must first exchange credentials with their intended recipients. Furthermore, both parties need special software installed and configured to send and receive encrypted messages. This can be a barrier for deployment in some organizations.

The M86 MailMarshal SendSecure email security tool solves this problem by hosting sensitive email messages on a secure Web portal, allowing employees to send secure messages to any email recipient in the world, without requiring the exchange of any keys or certificates. Plus no special software is required to receive these messages — only an Internet connection and a Web browser.

Secure Communication to Anyone—Without Additional Software

Sending confidential email securely is easier than ever with MailMarshal SendSecure. MailMarshal SendSecure is a hosted service that provides effortless secure email delivery for confidential or sensitive information to any email recipient in the world. Recipients do not require any special software or training to receive secure messages – just an Internet connection and web browser.

M86 Security has partnered with ZixCorp, an industry leader in providing easy-to-use email encryption services, to provide MailMarshal SendSecure. MailMarshal SendSecure is an optional service which allows customers to send sensitive emails or confidential documents to any recipient in the world securely, without requiring the recipient to download or install any software.

MailMarshal SendSecure is an optional service add-on for customers using MailMarshal SMTP. MailMarshal SMTP is used to intelligently scan email for confidential information, based on policies you control. When messages conforming to your encryption policies are sent, the message is automatically flagged for secure delivery by MailMarshal SMTP, and is sent over a TLS connection to the MailMarshal SendSecure service.

Once MailMarshal SendSecure has received the message, ZixCorp’s Best Method of Delivery™ technology is used to route the message securely to all recipients.

Solutions For All Types Of Organizations

MailMarshal SendSecure is appropriate for any organization with encryption needs, including needs relating to compliance with governmental regulations. Health care providers can use it to send confidential patient information between doctors and hospitals. Financial organizations can use the service to secure transaction records to their key business partners. Other commercial corporations can use MailMarshal SendSecure to guarantee private communications with their customers and suppliers, protecting sensitive data like customer lists, social security numbers, and credit card numbers.

Features and Benefits:

Features

• Allows users to send secure messages to any recipient in the world, without special software or pre-requisites
• Enables two-way communication through encrypted read, compose and reply capabilities for all message recipients
• Generates notifications and invitations automatically
• Provides support for Blackberry® and Windows Mobile® devices
• Works with M86 MailMarshal Secure Email Server or similar products
• Provides custom password policies tailored to your organization's requirements
• Conforms to corporate guidelines through customized branding of message portal

Benefits

• No software to install and maintain (hosted service delivery "in the cloud")
• Encryption is automatic and transparent to the sender; no user training required
• Reliable and cost effective

Key Benefits:

Secures Email to Anyone, Anywhere
MailMarshal SendSecure allows you to send messages securely to any recipient in the world, without the need to establish a relationship prior to exchanging encrypted messages. Furthermore, MailMarshal Secure requires no additional software to use; new recipients navigate to the MailMarshal SendSecure Portal to read their messages using a standard Web browser.

Secure Compose and Reply Functionality
After a recipient reads a message that has been securely transmitted to them, they can reply using the custom webmail client on the MailMarshal SendSecure Portal. For an added layer of security, you can choose to only allow your message recipients to reply to your own domains, ensuring privacy.

Compatible with Most Existing Email Encryption Products
If you already use MailMarshal Secure Email Server, or a similar product using the S/MIME or OpenPGP encryption standards, MailMarshal SendSecure can seamlessly complement your existing solution. Standard PKI encryption methods can be used for to send messages within a closed community, providing strong encryption and digital signing capabilities. MailMarshal SendSecure can be used to communicate securely with those outside of the traditional PKI community.

Custom Branding of MailMarshal SendSecure Portal
MailMarshal SendSecure’s message portal is modified to suit you corporate branding guidelines. Your corporate logo can be added to the site, colors can be changed to meet your company’s color scheme, and notifications can be customized to suit your tastes.

Message Delivery Using ZixCorp’s Best Method of Delivery
Using the Best Method of Delivery™ system, MailMarshal SendSecure sends secure email to any recipient in the most secure way possible. If an email is sent from one MailMarshal SendSecure customer to another, it will be sent using the secure TLS tunnels that have already been established. If messages are sent to an unknown recipient, a notification will be generated, and the recipient will be invited to read their secure message via the MailMarshal SendSecure web portal.

In addition, using MailMarshal SendSecure gives you the ability to send secure messages to anyone in the ZixDirectory, a directory comprised of over 14 million email users, including those in the healthcare, banking, insurance, and technology industries.

Support for Mobile Devices
MailMarshal SendSecure can be used to read and send messages from Blackberry® and Windows Mobile® devices. With MailMarshal SendSecure, you can send confidential messages and be sure that the recipient can read and reply securely, no matter what they are using

Reliable and Cost Effective
MailMarshal SendSecure is easy to set up and requires no maintenance from your internal IT department. MailMarshal SendSecure is hosted in a datacenter and has a 99.9% availability guaranteed to our customers through our service level agreements (SLAs).

The Sendsecure Portal Is Customized To Include Your Company’s Branding.

Technical:

How it Works

MailMarshal SendSecure is a hosted secure messaging service that works in conjunction with M86 MailMarshal Secure Email Gateway (SEG). Based on policies you control, M86 MailMarshal SEG is used to scan messages for sensitive content and route messages to the MailMarshal SendSecure servers in the cloud. An encrypted TLS tunnel is used to communicate between M86 MailMarshal SEG and M86 MailMarshal SendSecure. Once a message is received by SendSecure, it will be either be delivered to the receipient via a Web portal or delivered directly, depending on who the recipient is.

The diagram above shows how M86 MailMarshal SendSecure operates.

Step-by-Step

1. Confidential Email - An authorized user within your organization sends a confidential email to any email address.
   
   
2. M86 MailMarshal SEG - M86 MailMarshal SEG evaluates the message and automatically determines that based on your encryption policy must be transmitted securely. It routes the message to the MailMarshal SendSecure servers in the cloud for secure transmission. M86 MailMarshal SEG can evaluate messages for sensitive content using standard rules. For example, a message might need to be secured if:
   • it is sent to to specific recipients
   • it contains specific documents
   • it contains content such as Social Security numbers, medical records, or financial data
     
     
3. M86 MailMarshal SendSecure - The confidential email is accepted by M86 MailMarshal SendSecure, which then decides how it will be delivered to its recipient. If the recipient is not known, it will be delivered via the SendSecure Web Portal. If the recipient is known, it will be directly delivered to the recipient's email server.
   
   
4. Delivery by Web Portal - M86 MailMarshal SendSecure will send a plaintext notification message to the end user, informing them that someone at your organization has sent them a secure message. The notification contains a link which the customer may click on, which brings them to the SendSecure Web Portal. HTTPS is used when accessing the Web Portal, so the content of the message remains private. If the recipient has not received a secure message before, they must create an account, which requires them to register via a Web form. Once they have a username and password, the recipient uses his credentials to log into the portal, where the secure message is displayed.
   
   
5. Direct Delivery - If the user is also an M86 MailMarshal SendSecure customer, messages will be directly delivered from the SendSecure service to the recipient's M86 MailMarshal SEG installation using TLS, thus guaranteeing the email's privacy. The end recipient is not required to take any special action, and will recieve the message in their inbox as a normal message.

Documentation:

Download the M86 Security MailMarshal SendSecure Datasheet (PDF).