Trend Micro Message Archiver

The Trend Micro Message Archiver is targeted to mid-sized organizations with MS Exchange-based E-mail systems. The product integrates with Exchange and allows for the storage of Exchange E-mail messages in a tamper-resistant repository, along with the ability to search said repository for individual message review or legal/forensic purposes.

The product is installed on a separate server (the vendor recommends a dedicated server) and works in concert with MS Exchange journaling, receiving copies of all messages (internal or external) sent through the Exchange system in real-time. The messages themselves are timestamped, compressed, encrypted, fingerprinted, and indexed before being stored using a non-database architecture (a separate DB purchase/implementation is not required). The server can store the messages on internal or external storage. The timestamping, fingerprinting, and encryption of messages are performed in an attempt to prevent the later tampering of messages during their retention period for legal/compliance integrity; while compression is applied in an attempt to reduce the amount of storage necessary for the archive. On this latter point, the product also features single instance message storage, wherein single messages and their attachments delivered to multiple people are stored in the archive only once (the attachments are stored with the messages they belong to). Additionally, E-mail "stubbing" is supported, wherein attachments can be moved off the main Exchange Server into the archive, with shortcuts placed into the original messages so that the attachments can still be accessed.

As initially shipped, the product captures only real-time messages, and not those already stored on the mail server. The vendor states that they are working on a mail import option to allow for the archiving of existing server messages.

Once stored, the message stores can be searched from within an MS Outlook client via a plug-in (end users) or a Web-based interface (auditors). Searches are role-based; with privileged users able to search all messages in the archive and regular end-users able to search only for messages that were sent to or from themselves (integration with Active Directory or LDAP repositories is supported). Search details of privileged users are logged; and an additional "Data Guardian" can receive E-mail alerts detailing all searches performed by privileged users for auditing purposes.

Searches themselves leverage the indexes created as the messages are stored, and can include searches for keywords or for message metadata. End users can launch self-service searches from within their own clients; while auditors can launch advanced searches through the Web interface with such features as proximity searches, fuzzy logic, stemming, wildcards, etc.

Stored messages remain in the archive for an administrator-defined retention period (with the product's initial shipment, a single retention period is defined for all messages stored in the archive), after which they are automatically deleted. This retention period is defined in months (i.e., how many months the messages should be retained).

The Trend Micro Message Archiver is available now; with representative pricing set at $33.70 per seat for 501-1000 seats (includes one year of maintenance). Volume discounts are available, as is a free 30-day trial.

Contact Trend Micro for further information.

product submission by EITPlanet Staff

Latest category updates via our RSS feed