NetIQ Marshall range of filtering tools

The Marshall range of filtering tools comprises Webmarshall, to filter and manage browser traffic; Mailmarshall, to do the same for email, with a choice of either generic SMTP or Exchange implementations; and a new IMmarshall package designed specifically for the MSN IM service. All three are written to run on Windows NT/2000 servers, but are otherwise platform independent and can filter and manage traffic on any IP-based network.

Webmarshall can be used as a standalone non-caching proxy, handling HTTP, HTTPS and FTP protocols, or in conjunction with other proxy servers with no protocol restrictions. The software can also be installed as a plug-in to the Microsoft ISA server. SQL Server or MDE (the runtime Microsoft Data Engine implementation of SQL Server) is a prerequisite for logging and reporting, with configuration and management achieved via a plug-in to the Microsoft Management Console (MMC).

Webmarshall is rules-driven with facilities to apply web access policies on a per user or group basis. Users can be identified using NT or Novell NDS authentication as well as the IP address of the requesting PC, however there's no Ldap support in the current release. Preconfigured categorised URL lists are included, though, and to identify objectionable sites you can use Textcensor. This analyses the content of sites not already on a local blacklist and adds them if content matching custom lexical rules is found.

Screening of file downloads and uploads is a key feature of Webmarshall, with optional anti-virus scanning using a choice of third-party products, such as McAfee and Sophos. Cookie stripping is another useful option, but you can't specifically block Java or ActiveX controls. Nor can you view activity in real time, although there are excellent reporting facilities with a runtime version of Crystal Reports included with the package.

Mailmarshall runs on an NT/2000 server and needs SQL Server or MSDE for reporting. The host system is configured as the mail gateway and can be used with any SMTP-based mail server running on any platform, with a special implementation for Microsoft Exchange Server if needed. The software can also be configured as standalone POP3 mail server in a small business.

The same weighted lexical scanning technology used in Webmarshall is also used to filter messages in Mailmarshall. The software is configured and managed using a rules-based interface implemented as an MMC snap-in, although it's not possible to manage the different products from one console. They shouldn't be hosted together on the same platform (for performance reasons), although they can share a common SQL Server host.

Mailmarshall offers the usual facilities to filter messages and attachments, selectively blocking, redirecting or quarantining them based on predefined rules. The rules can be configured using a variety of criteria and it can check for viruses by linking to third-party scanners. To provide an effective answer to the spam problem you can match against realtime black hole lists, as well as using Spamcensor, plus an automated update service.

Standard tools to add disclaimers to outgoing messages are supplemented by facilities to screen for confidential material in Mailmarshall. An optional module, Mailmarshall Secure, examines messages encrypted using the S/Mime standard for public key encryption. You also get comprehensive logging, alerting and reporting facilities.

IMmarshall has similar requirements to the rest of the range. The content scanning technology lets you do more than just block access to MSN. It's possible, for example, to limit communication with members of trusted contact lists and manage access based on both user identity and time of day. File downloads can be selectively blocked and anti-virus scanning applied with third-party products. Disclaimers can be added to MSN conversations, and there are comprehensive facilities to archive conversations and report on activity. The biggest drawback to IMmarshall is that it only works with MSN, not any of the other IM or P2P networking services.

Contact: NetIQ 01784 454 500
www.netiq.com