IronPort & Spam
I used to get irritated with spam, but no more. I became accustomed to it, just like I became accustomed to the obligatory but ineffectual security checks at airports. The security checks are a hollow ritual designed to convince the voter that precautions against terrorists are being taken. But, as I indicated in a previous blog, the only effective airport security I’ve experienced is in Israel. The price you pay is that it takes forever to get through the security check.
Spam blocking is not a hollow ritual. However it can be less than perfect. The spam blocker that I use, primarily, is the native Apple mail spam blocker. It does a good job of weeding out most spam but it also ejects valid emails sometimes—the dreaded false positive. So when I’m bored during the day I flit through the junk folder and check. The most irritating quirk that Apple Mail spam blocker has is that it will often classify vendor emails with briefing PowerPoints as junk. Unfortunately, it isn’t a reliable indicator of the quality of the vendor’s technology
I have several email accounts. I guess I’m no different to anyone else in that respect. My five active accounts are: for Hurwitz, for Bloor Research, for BaroudiBloor (an old account that yields 99% spam), a personal Gmail account and a personal Mac.com account. I use a Gmail account for archive (archiving all my emails to there means that I never lose any and it also becomes a file archive via attachment). It’s also my emergency account in case my laptop gets stolen. I don’t get any spam through Gmail, but that’s because I never use the account to register for anything. It may be that Gmail has good spam blocking, but I cannot confirm it. Bloor Research uses Spam Assassin for spam blocking. It’s OK but not wonderful. No other email service I use has spam protection and I access them all from my Apple.
Is 100 percent spam blocking possible? I recently ran into an article in InfoWorld (28th May issue), which compared IronPort’s spam blocking appliance to that of Mirapoint. IronPort won this particular bake-off. It caught 93 percent of spam with only 1 false positive (in just under 10,000 emails) straight out-of-the-box. Also the false positive was a non-critical. I know IronPort reasonably well as it hired me as a speaker last year and I met with their technical people as a consequence. Blocking figures beyond 98% are possible because the spam engine learns, but actually from the productivity angle, it’s the low false positive count that matters most. Once you’ve blocked 90 percent of spam, the extra percent or two doesn’t deliver much to the user.
The spam blocking industry is doing very well, because automatic spam blocking pays for itself quite quickly. It reduces the need for disk storage and hence the cost. It cuts the workload for administrators. An incidental benefit is that it stops virus-bearing emails. It is a sub-industry that will prosper for quite a while yet—even after spam itself ceases to circulate much. This became clear from discussions with IronPort (and other vendors in this space). These vendors are not just about spam filtering, they are about message management—which for the moment means just email management. However, these vendors are well aware that in the end it’s about all messages (IM, voice, video, and anything else the world invents).
IronPort’s most recent product upgrade has been to add “compliance filters” which filter outbound email to ensure none of the content violates US regulations such as HIPAA and Graham-Leech-Bliley. Two-way filtering is just the next step in the growth of the message management market. Common message management frameworks are some way away.














