Gallaher Group Plc

MARSHAL CASE STUDY - Gallaher Group plc

Gallaher Group plc Tobacco Company Filters Spam with Marshal

Background Gallaher currently receives around 5.5 million incoming emails a year from Gallaher Group plc, the international partners and customers around the tobacco company, with headquarters in world. Working in close partnership with the UK, operates in around 80 countries Sysec, a specialist security consultancy, and employs over 12,000 people. Gallaher has consistently ensured that Gallaher’s strategic brand portfolio its email system is robust, and ahead of encompasses Benson & Hedges, LD, any emerging email threats that could Mayfair, Memphis, Ronson, Silk Cut, potentially compromise the integrity of Sobranie, Sovereign, Hamlet and Old its business. Holborn. The Group has manufacturing plants in Austria, Canary Islands, The Solution Kazakhstan, Poland, Romania, Russia, South Africa, Sweden, Ukraine and the The Gallaher Group’s Information UK. Security team has employed a layered approach to its email security, using Since 2003, the Gallaher Group has a managed email service to fi lter- benefi ted from Marshal’s email fi ltering out inappropriate content in the fi rst technology to combat the continual rise instance, and Marshal’s MailMarshal of unwanted spam and inappropriate 5.5 at the perimeter to provide an emails from entering the corporate additional layer of assurance. In this network. With four sites across the scenario, MailMarshal acts as a UK supporting 1600 users, Gallaher’s verifi cation platform and content fi lter Information Security team oversees for emails that have no business or the availability and security of the commercial benefi t. company’s UK email system. In early 2006 Gallaher’s Information Security team upgraded its MailMarshal 5.5 solution to MailMarshal SMTP 2006, which combines anti-spam, anti-virus and content security into a “Our long standing relationship highly scalable and easily manageable with Marshal has been further solution. The upgraded solution was deployed cemented by our upgrade to via a central console across four UK MailMarshal SMTP 2006” and some continental European sites, and was integrated with Microsoft’s Ian Speller, Information Security Manager , Gallaher

© 2006 Marshal Limited, all rights reserved. U.S. Government Restricted Rights: The software and the documentation are commercial computer software and documentation developed at private expense. Use, duplication, or disclosure by the U.S. Government is subject to the terms of the Marshal standard commercial license for the software, and where applicable, the restrictions set forth in the Rights in Technical Data and Computer Software clauses and any successor rules or regulations. Marshal, MailMarshal, the Marshal logo, WebMarshal, Security Reporting Center and Firewall Suite are trademarks or registered trademarks of Marshal Limited or its subsidiaries in the United Kingdom and other jurisdictions. All other company and product names mentioned are used only for identifi cation purposes and may be trademarks or registered trademarks of their respective companies. “MailMarshal SMTP 2006 has proven that it can offer superior email protection to all our employees...” Ian Speller, Information Security Manager , Gallaher

able to very quickly apply a new rule based on the results. It is even able to strip attachments from emails that may be suspect, allowing the recipient to safely receive only the body of the email.”

Of particular use to Gallaher is the ability to block emails that are not from a recognised or valid email domain. Likewise, the group continues to build an approved senders list, currently comprising of about 80 email domains from trusted sources. Such emails are given overall delivery preference.

Mark Green, Gallaher’s Group’s Active Directory to enforce role-based sources of commercial newsletters Information Security Manager policies decided by the Information per day since its deployment. After comments, “MailMarshal provides Security team in support of the Gallaher receiving no negative feedback on us with a consistently reliable email Group’s Internet and email Acceptable blocked commercial newsletters, the protection service that allows us Use Policy. Information Security team intend to to enforce policies to all users or upload the list of blocked commercial individuals across the entire Gallaher Used primarily as an anti spam fi lter newsletters to the managed email Group. The granular control of to combat the average 3.3 million provider who block the messages from MailMarshal has allowed us to remain spam emails received per annum, being delivered to Gallaher. ahead of inbound email threats, without MailMarshal SMTP 2006 also provides inconveniencing the fl ow of email traffi c a powerful tool that scans incoming and The rapid email analysis engine behind to partners and customers. What we outgoing images. The Image Analyzer MailMarshal SMTP 2006 breaks emails are particularly impressed with is its plug-in for MailMarshal uses algorithms down into their component elements, ability to adapt rules within an instant on surrounding colour schemes to and performs deep virus scanning of learning of a new threat. We feel assess, categorise, and conclude and content security checks on both assured by the knowledge that our whether an image is inappropriate. incoming and outbound correspondence. employees, systems and our corporate Depending on the context of the Completely customisable, MailMarshal reputation are appropriately protected.” image, Image Analyzer allows the SMTP 2006 offers the fl exibility to apply Information Security team immediate essentially any security or quarantine The granular control, and sophisticated access to quarantined emails for further procedure that is required. rule set behind MailMarshal SMTP 2006 investigation. provides Gallaher with the fl exibility “Our long standing relationship with to enforce policies to certain user The Benefi ts Marshal has been further cemented groups based on their function within by our upgrade to MailMarshal the business. Employees within the With MailMarshal SMTP 2006, Gallaher SMTP 2006”, explains Ian Speller, marketing department, for example, are has seen an impressive blocking rate of the Information Security Manager able to send and receive a variety of spam emails. The Information Security at Gallaher. “The solution is able to images, yet MailMarshal SMTP 2006 is team has also been able to identify analyse images embedded within a still able to decide whether an image is and block more than 1500 different word document, for example, and is of a inappropriate nature based on deep

© 2006 Marshal Limited, all rights reserved. U.S. Government Restricted Rights: The software and the documentation are commercial computer software and documentation developed at private expense. Use, duplication, or disclosure by the U.S. Government is subject to the terms of the Marshal standard commercial license for the software, and where applicable, the restrictions set forth in the Rights in Technical Data and Computer Software clauses and any successor rules or regulations. Marshal, MailMarshal, the Marshal logo, WebMarshal, Security Reporting Center and Firewall Suite are trademarks or registered trademarks of Marshal Limited or its subsidiaries in the United Kingdom and other jurisdictions. All other company and product names mentioned are used only for identifi cation purposes and may be trademarks or registered trademarks of their respective companies. “MailMarshal SMTP 2006 provides the Gallaher Group with a definitive email security solution that protects against virtually any email-based threat” Mark Green, Information Security Manager, Gallaher

analysis of skin tones within the context MailMarshal allows the Information rule sets within MailMarshal SMTP of the image. Security team the fl exibility to enforce 2006 will enable the Gallaher Group to a size limit on inbound/outbound email comply with legislation across Europe, “MailMarshal SMTP 2006 provides the attachments. Any emails received where for example, in some countries Gallaher Group with a defi nitive email with attachments over this limit are the law does not permit employers to security solution that protects against quarantined and released outside of view the content of employees’ emails. virtually any email-based threat”, normal working hours when bandwidth The ability to enforce such policies to explains Mark Green, Information is available. all local mailboxes in any particular Security Manager at Gallaher. “Being geography, while still providing rapid able to rigorously analyse every single The ease of use and simple interface and robust analysis of all incoming incoming and outbound email would be of MailMarshal SMTP 2006 removes emails for malware or spam, has an impossible task for any Information the burden for Information Security given the Information Security team Security team, but MailMarshal makes administrators who manage the a global email security solution that this a reality. It is also sophisticated thousands of emails received daily. is sophisticated enough to adhere to enough to perform ad-hoc requests, local compliance regulations while still such as fi ltering out emails containing Looking ahead maintaining a company-wide protection URL’s to websites known for installing to incoming spam. spyware and other malware onto a So confi dent is the Gallaher Information employees’ desktops. ” Security team in MailMarshal’s Mark Green, Gallaher Group’s capabilities, it is currently deploying Information Security Manager All employees with corporate email, or the solution across all of its 5000 concludes, “Our deployment protects all Internet access adhere to an Acceptable international mailboxes. Email traffi c of our UK employees, but granularity of Use Policy, which is aligned with the is expected to increase to over fi fteen MailMarshal has so impressed us that corporate stance on inappropriate million inbound messages per year. we are now in the process of migrating email activity. Rather than adopting a The group has also reviewed and has all the Group’s International Mailboxes “Big Brother” mentality and monitoring deployed Image Analyzer to extend onto a single domain. MailMarshal each individual’s email for personal its deep image scanning capabilities SMTP 2006 has proven that it can offer correspondence, Gallaher’s Information (where appropriate) to all employees’ superior email protection to all our Security team understands that a incoming and outgoing emails. employees, so it makes sense for us reasonable amount of emails will be to move all employees onto a single of a personal nature. To support this, The fl exibility and granularity of the security platform.”

Marshal’s Worldwide and EMEA HQ Americas Asia-Pacifi c Marshal Limited, Marshal, Inc. Marshal Software (NZ) Ltd Renaissance 2200, 5909 Peachtree-Dunwoody Rd Suite 1, Level 1, Building C Basing View, Suite 770 Millennium Centre Basingstoke, Atlanta 600 Great South Road Hampshire RG21 4EQ GA 30328 Greenlane, Auckland United Kingdom USA New Zealand

Phone: +44 (0) 1256 848080 Phone: +1 404-564-5800 Phone: +64 9 984 5700 Fax: +44 (0) 1256 848060 Fax: +1 404-564-5801 Fax: +64 9 984 5720

Email: [email protected] Email: [email protected] Email: [email protected] [email protected] | www.marshal.com