Sophos SXL Anti-spam Technology

Sophos SXL Anti-spam Technology

 
     
 
 
 
 

 

 

 

SXL anti-spam technology

Instant access to the latest spam data from SophosLabs

 

Only Sophos Email Security and Control solutions provide real-time access to a broad range of the latest anti-spam intelligence.

 

Industry-leading anti-spam

 

Sophos’s award-winning anti-spam solutions already provide industry-leading protection using multiple detection techniques - including IP reputation, advanced heuristics, message and attachment fingerprinting, keyword analysis, URL detection and more.

 

Every installation receives updated intelligence from SophosLabs every 5 minutes, ensuring rapid response to emerging spam campaigns. Compare this to other solutions that update hourly or less.

 

Faster access to anti-spam data

 

SXL technology narrows the gap between detection and protection even further, by making the latest intelligence from SophosLabs available immediately, rather than waiting for the next update.

 

As soon as new data becomes available from our global network of automated and human analysts – sender IPs, message and attachment fingerprints, destination URLs, checksums – it can be accessed by every Sophos anti-spam engine during scanning.

 

If locally stored intelligence is inconclusive, a fast network check to the nearest SXL server for additional information will provide critical insight into the latest spam campaigns.

 

Better spam data storage

 

But that’s not all SXL does. In addition to providing instant access to intelligence on the latest spam campaigns, the SXL online database can also store an unlimited amount of older information that may not always be needed, yet which takes up valuable local storage resources.

 

For example, some sender or destination IP addresses are used for a very short period, but may reappear months later. This is typically true of today’s botnets, which are turned on for periods as short as 15 minutes, and then made dormant.

 

Tracking all this activation and deactivation of IP addresses puts a huge burden on local storage - but not with SXL. And this also helps reduce the size of updates to the local engine even further, saving you bandwidth.