SMTP Watch
Emails are by far the most critical communication infrastructure used by businesses.
Previous
Next
Emails are by far the most critical communication infrastructure used by businesses. It is not uncommon for misconfigured mail settings to result in outgoing mails being marked as spam by the receiving servers or for hackers to gain valuable information about your infrastructure to help them identify exploits that they can then use.
And email infrastructure changes more often than you think, which with regular patches and updates, and organizations can, and do, have multiple email servers to cater to multiple business units.
SMTP Watch takes care of these on an ongoing basis:
Blueprint Data
More often than we’d like to see, administrators misconfigure the EXPN and VRFY settings, thus allowing a hacker to get or verify for the existence of valid email ID’s – and this is valuable information by itself. This component of SMTP Watch enumerates the usernames and reports them for the mail administrator’s action.
Banner Grabbing
An intruder can use banner grabbing to find network hosts that are running versions of applications and operating systems with known exploits. This sub-component reports identifies and reports currently known exploits (which unfortunately keep emerging).
Security Misconfigurations
DMARC and SPF settings are constantly verified, along with other potential misconfigurations, and promptly reported.
Unauthorized Access
We are never ceased to be surprised by how often common passwords, even default ones, are used by mail administrators. This service keeps a watch on this to enable your immediate attention.