 |
 |
|
|
|
|
|
|
View a white paper Reducing the Risk from E-mail within Microsoft Exchange / Outlook
|
 Exchange Security Risk Auditor (ESRA)
Mailbox and folder security. Who is reading your email? This theme has been ignored by many organizations up
until now, who have concentrated on securing their external boundaries. With the majority of company executives relying on Outlook as their main data store, security of access has to be an issue. The thought that e-mail access could be compromised is probably far from the minds of most company officers but these people are the most likely targets of mailbox hackers. Finance and Human Resources executives are most likely to be targeted. In your company a hacker can be anybody who
The consequences of their actions can be devastating. C2C has heard of employees finding they have access to a department's public folders, and changing permissions or even deleting whole trees of content, impacting months or even years of work. So how real is the threat to mailbox or public folder permissions? In reality, and particularly in medium to large organizations it's not uncommon to find errors in permissions granted at set-up or more likely during routine administration. Also, system and department configurations tend to change over time, so users may be inadvertently granted access when these alter, or users may carry historical permissions with them into different departments.
Why Choose ESRA? Exchange Security Risk Auditor (ESRA) provides you with an easy-to-use application for finding, auditing and changing folder and mailbox permissions. The objective of ESRA is to enhance the security of your Exchange System, by giving your Administrator the ability to review and change permissions quickly and accurately. How to find a needle in a haystack? How is an Exchange administrative team able to both guarantee and demonstrate that all permissions are appropriate to the security policy? There are generally a huge number of permissions and the small number of anticipated exceptions make the task impossible manually. ESRA enables an automated audit of all permissions associated with an Exchange mailbox or public folder, and performs relevant changes. Regain Control ESRA should be used both for
Features of ESRA
Who will benefit:
ESRA Technical Overview Exchange Security Risk Auditor (ESRA) allows the monitoring and controlling of permissions in an Exchange system. In most Exchange systems there can be at least tens of thousands of permissions. It is virtually impossible to ensure that all permissions are correct, giving you the appropriate security you require. Three permissions areas are checked by ESRA:
Security Auditing
The information store can be searched for specific permissions or roles, or for all the roles that are assigned to specific users or groups of users. This makes ESRA the ideal tool for an Exchange security audit. Who does have access to the board of directors' e-mail accounts? Are the secure public folders as secure as we need them to be? The application has been designed to be operated by professionals concerned with the security of corporate e-mail. Permission Maintenance Not only is ESRA an ideal tool for the security audit, it is also an invaluable tool for day to day permissions maintenance. For example, cleaning up the rights and permissions of deleted users is no longer a problem. With ESRA, the deleted user can be described and located anywhere in the Exchange public or private information stores. Other tasks such as reassigning rights is easy as you do not need to know where the original user had rights, only that the new users will have the same ones.
Once a permission is located it can be changed in a simple fashion. If you have chosen to alter permissions in any way then ESRA will highlight the changes before any update is performed, meaning that you are always in control of permissions updates. You will also be able to export the results of a permissions search directly to Excel. Deployment and support ESRA is a standalone application (not requiring a service) that is controlled using a standard MMC Snap-in. It is run on NT, 2000 and XP operating systems and supports both Exchange 5.5, 2000 and 2003. C2C Systems suggests that the application be installed on a desktop machine as opposed to being installed on the same machine as the Exchange Server. It uses Windows messaging (minimum Outlook 98 required on ESRA machine) to access the Exchange server and sufficient permissions will be needed by the user both installing and operating ESRA. The specific permissions that are needed are outlined in the ESRA manual.
Download 30 Day Free Evaluation Copy Before downloading the software, please fill in the small form below.
For the form to be accepted you
must complete the fields which are indicated in bold type. |
