PeepSafe E-Mail Gateway
For mail usage within the secure portal environment, we recommend that customers set up a sub-domain. That is not going to stop people from accidentally or maliciously sending e-mail that contains credit card data to your corporate email system. If they do that, whether you wanted them to or not, that will bring your whole system back into scope.
We offer 2 solutions to resolve this. The first, depicted below, is what we call the ’Postini’ model. We have redirected the MX (mail exchanger) to the gateway. We have a filter at the gateway that inspects all incoming mail. If the mail is clean, it gets passed on to the internal mail systems of the company. If cardholder data is found or suspected, the e-mail gets quarantined and moved into a secure mailbox. The user is alerted they have an e-mail that may contain sensitive data.
As we know from years of experience with Postini-like models, some customers are not comfortable re-directing their MX record. To resolve this issue, we have a filter that can be installed on premise. It’s a small network device, which follows the same process in reverse. It inspects the incoming mail and forwards any suspicious mail to the quarantine within the portal. All other mail is forwarded directly to the recipient. The small downside to this is that you have to create a cardholder data environment on premise to protect the filter.
