Exclusive: Mirapoint MD450 boxes out spam

Joining the ranks of NetIQ and the contenders in my spam products roundup is Mirapoint’s Message Director MD450. Mirapoint gave InfoWorld an exclusive look at this product (the first appliance I’ve looked at in this space) and it exemplifies what administrators should expect in an appliance: a drop-in approach to installation, great ease of use, and performance comparable to the best in the field. Most organizations should find installing the MD450 completely painless, as it comes with installation support.

Running on a customized, hardened version of BSD, the MD450 provides anti-spam filtering based on the open source SpamAssassin engine, with additional extensions and added filtering capabilities. Further, it provides incoming and outgoing policy enforcement; spam filtering and virus protection; an HTTP proxy; directory-harvest protection; password-attack protection; integrated LDAP routing; POP and IMAP (Internet Mail Access Protocol) servers; Web and SSL access to e-mail; and intrusion detection.

Mirapoint provides on-site installation support as part of the price, so I allowed the company to send a support engineer to assist with installation. The engineer wasn’t really necessary, though, as I had the appliance running in about five minutes with no help that couldn’t have come from the manual. Many companies may find the on-site support useful, however, when it comes to configuring the optional features and customizing the filtering settings for their needs.

The appliance itself is a custom dual-Xeon 2.8GHz system with 2GB of RAM, mirrored SCSI 10k drives with a hot spare, Gigabit Ethernet and 10/100 interfaces, and a 320U SCSI interface for backups. The hardware includes redundant hot-swap fans and power supplies. The MD450 performed excellently, and according to Mirapoint, it can handle more than 10,000 users.

The IP address and other network information can be set from the front panel; no serial terminal connection is required. Once the IP network information is set, the rest of the usual configuration can be done via a browser. Configuration of anti-spam filtering was generally straightforward, although there were some subtleties that made me glad there was an engineer on hand. For example, a configuration option necessary to support different spam settings for each user proved complex.

Creating new filters, adding to the whitelist or blacklist, scheduling updates to the anti-spam filtering rules and anti-virus rules, adding content checking and anti-virus checking are all easily accomplished. The MD450 can also reject all mail from specific domains or IP address ranges, and can use RBLs (Realtime Blackhole Lists)  that are maintained by volunteers who identify domains that either send spam or allow unidentified senders to relay mail through their systems.

Administrators can define anti-spam settings for a single domain or multiple domains, or allow users to modify their own settings. Multiple domains or subdomains can be configured, though this is a separately priced feature. Each domain or subdomain can have different administrators with different rights.

Mail can be quarantined, forwarded with text added to the subject line, discarded, or stripped of dangerous attachments. Users can access quarantined mail via a browser, where they can view, delete, open, reply to, or forward it. They also can confirm whether a message is junk mail, which will add it to the blacklist or whitelist.