access control list (ACL)
A table that tells a computer operating system which access rights each user has to a particular system object, such as a file directory or individual file.
Acceptable Use Policy (AUP)
Rules and regulations governing the use of organizational email and Internet browsing.
Active Directory
The directory service implemented in the Windows 2000 or later environment to store often accessed information. It contains information about users, groups, computers, organizational units, and domains.
alert
An indication of a significant event. Alerts are generated by MailMarshal services.
array
A group of MailMarshal email processing servers that use the same policy.
array manager
A MailMarshal service that controls configuration for all email processing servers and connects to the MailMarshal database. Also, the server running the array manager service.
attribute
Computer characteristic, typically defined by a registry key or value.
blended threat
Security threat to a network using multiple vectors (for instance, a malicious URL sent by email).
component
Individual part of a MailMarshal implementation that performs a specific function. For example, an email processing server, Array Manager, or database is a MailMarshal component.
computer name
A name that uniquely identifies a computer on a network. The computer name cannot be the same as any other computer or domain name on the network. The network uses the computer name to identify the computer and to allow other users to access the shared resources on that computer.
Denial of Service Attack (DoS)
An attempt to cause the target organization to lose access to common business services, such as email. In an email DoS attack, the attacker floods email servers with messages, causing the email servers to slow down or cease operation.
Directory Harvest Attack (DHA)
An attempt to identify valid email addresses by sending randomly-addressed messages to an email server in a corporate network. When a message reaches a recipient without being bounced back, the attacker enters the valid address in a database used for sending spam.
distinguished name
An address format used to locate and access objects in an X.500 directory using the LDAP protocol. This format specifies the complete path to the object through the hierarchy of containers in a domain. Each distinguished name is unique. For example, a user object with the common name J. Doe in the organizational unit container called Users on the domain marshal.com might be represented as follows: CN=JDoe,OU=Users,DC=Marshal,DC=com
DLL
A library of executable functions or data that can be used by a Windows application. Typically, a DLL provides one or more particular functions and a program accesses these functions.
DMZ
A part of a local network that has controlled access both to the Internet and to the internal network of the organization. Servers that provide gateway services for an organization are typically located in a DMZ.
DNS
See Domain Name Service (DNS).
DNS blocklist
A service that provides an automated response through the DNS protocol. DNS blocklists typically attempt to list email servers that are associated with spamming, open relays, or other unacceptable behavior.
Domain-based Message Authentication, Reporting & Conformance (DMARC)
An email validation standard and system based on SPF and DKIM checks. The owner of a sending domain sets a policy that defines validation methods used by their domain, and suggests how recipients should deal with messages that fail validation. The recipient returns reports about messages and actions to the sending domain.
DomainKeys Identified Mail (DKIM)
A method of digitally signing an email message. Public keys used to verify the signature are retrieved from special DNS records.
Domain Name Service (DNS)
The Internet service that translates domain names into IP addresses.
email processing server
A MailMarshal server that accepts SMTP email messages and takes action as defined in the organizational email policy.
Extended Simple Mail Transfer Protocol (ESMTP)
A standard that defines optional additions to the SMTP email protocol.
event
Any significant occurrence in the system or application that requires user notification or an entry to be added to an event log.
event log
A record of any event that happens on a server. In Windows, events are stored in the System, Security, or Application log.
Extensible Markup Language (XML)
A data tagging language that permits the storage and interchange of structured data.
fault tolerance
The ability of a product to respond to a catastrophic event (fault) that ensures no data is lost and that any work in progress is not corrupted.
firewall
A security system that is placed between the Internet and the private network of an organization, or within a network, and only passes authorized network traffic.
folder classification
An entry indicating a quarantine folder name written to the MailMarshal database when a file is moved to a quarantine folder. MailMarshal creates the database entry automatically.
hyperlink
An emphasized portion of text on a window that, when clicked, opens another document or window.
IIS
See Microsoft Internet Information Services (IIS).
Lightweight Directory Access Protocol (LDAP)
A network protocol designed to work on TCP/IP stacks to extract information from a hierarchical directory such as X.500. It is useful for searching through data to find a particular piece of information. An example of an LDAP directory is the Active Directory in Windows 2003 or later. Objects in an LDAP directory are identified by their distinguished names.
local area network (LAN)
A group of computers in the same place that are connected and typically have the same network operating system installed. Users on a LAN can share storage devices, printers, applications, data, and other resources.
mailbox
A disk storage space assigned to a user account to receive incoming email messages.
Management Console
Web-based interface that allows you to edit email policy, configure email delivery and server settings, monitor email traffic and manage quarantined email. Intended to be used by email administrators, managers, and help desk personnel. This interface replaces the legacy Configurator, Console, and Web Console from Trustwave SEG 8.X and below.
MDAC
See Microsoft Data Access Components (MDAC).
message classification
Classification action defined in a rule as Write log message with x.
Microsoft Data Access Components (MDAC)
A set of network libraries and programming interfaces designed to allow client applications to connect to data providers such as SQL Server databases.
Microsoft Internet Information Services (IIS)
A Web server application for Windows operating systems.
Microsoft Management Console (MMC)
A common interface designed to host administrative tools for networks, computers, services, and other system components.
Multi-Purpose Internet Email Extensions (MIME)
A standard that permits transmission of content other than text through SMTP email.
Microsoft SQL Server Desktop Engine (MSDE)
A freely distributable limited version of SQL Server 2000. Note that MSDE is no longer supported by MailMarshal.
open relay
An email server that accepts messages from any server for delivery to any other server. Open relays are often exploited by spam senders.
permissions
Authorization for a user to perform an action, such as sending email messages for another user or posting items in a public folder.
Post Office Protocol 3 (POP3)
The standard protocol used by email client software to retrieve email messages from a mailbox.
queue
A storage structure in which a set of items are held until they can be processed. For example, when MailMarshal receives email messages, the messages are stored in a queue until the MailMarshal Engine can process them.
registry
A database repository for information about the computer configuration. The database is organized in a hierarchical structure of sub trees and their keys, hives, and value entries.
regular expressions
Search criteria for text pattern matching that provide more flexibility than simple wildcard characters.
relaying
Sending an email message to an email server for delivery to another server. See open relay.
remote procedure call (RPC)
A standard protocol for client server communication that allows a distributed application to call services available on various computers in a network.
reputation service
A service that provides an automated response that classifies the source of an email message. Reputation services are usually implemented as DNS blocklists.
scalability
Ability to distribute loads across multiple servers, allowing for greater accessibility and balanced traffic.
Sender ID
A standard for validation of the source of an email message, based on special DNS records. Typically used for anti-phishing checks.
Sender Policy Framework (SPF)
A standard for validation of the source of an email message, based on special DNS records. Typically used for anti-phishing checks.
service account
In Windows NT it is a user account that a service uses to log on to Windows NT. The account must have the specific rights and permissions required by that service.
Simple Mail Transfer Protocol (SMTP)
A member of the TCP/IP suite of protocols. The standard governing email delivery over the Internet.
SMTP
See Simple Mail Transfer Protocol (SMTP).
Spam
Unsolicited email messages, usually of a commercial nature.
SpamBotCensor
A proprietary spam detection technology incorporated in MailMarshal. SpamBotCensor leverages the message analysis tools of SpamCensor to efficiently identify spam that is generated by botnets.
SpamCensor
A proprietary spam detection technology incorporated in MailMarshal. SpamCensor includes a multi-faceted message analysis tool and regular definition updates.
SpamProfiler
A proprietary spam and malware detection technology incorporated in MailMarshal. SpamProfiler is a signature based system that operates during message reception and includes real-time updating.
Spam Quarantine Management Website
Interface that allows a user to review and release their email messages that MailMarshal has quarantined.
split message
A message for multiple recipients that MailMarshal divides into copies. MailMarshal processes each copy differently, according to the rules indicated for a specific recipient.
spoofing
Disguising the sender address of an email message to make it appear as though it is from another person, usually for malicious reasons.
SQL Express
A freely distributable limited version of SQL Server.
SQL Server
The Microsoft enterprise database server software.
Structured Query Language (SQL)
A programming language used to retrieve information from a database.
TextCensor
The lexical analysis engine included in MailMarshal. TextCensor allows you to scan email messages and attachments for complex text content, using Boolean and proximity operators and numerical weighting.
Transport Layer Security (TLS)
A protocol intended to secure and authenticate communications (such as email) across public networks by using data encryption.
wildcard character
A character in a search pattern that represents a number of arbitrary characters within the text being searched.
X.500
A global, hierarchical directory service. For example, a domain controller hosting Active Directory on a network running Windows 2003 or later provides an X.500 directory service.
XML
See Extensible Markup Language (XML).
