Harald Czilling

1
New e-mail solution kongsberg.com

• Harald Czilling
• 20 mai 2008

2
kongsberg.com

• Background information
• Challenges
• Criteria for choosing a solution
• Design of solution
• Test phase

3
Background information

• E-mail for the domain kongsberg.com is divided
  into two mail systems.
• MS Exchange at Kongsberg Defence Aerospace
  (KDA).
• Lotus Domino at Kongsberg Maritime (KM).
• Previously e-mail to kongsberg.com was received
  in MS-Exchange at KDA, and e-mails to KM were
  forwarded to the proper recipient.
• KDA and KM use different methods for managing
  SPAM.

4
Challenges

• All employees in the Kongsberg group will have a
  public _at_kongsberg.com mail address. Sub domains
  distinguishing the companies are not going to be
  used.
• nn_at_km.kongsberg.com
• nn_at_kda.kongsberg.com
• Capacity problems with the old solution
• Vast increase of e-mails over the past years.
• Extreme increase of unsolicited emails (SPAM).
• Manual routines
• Caused by the different directories for Domino
  and Exchange, no automatic routine was
  implemented to register/transfer mail addresses.
• Manual routines are reasons for errors

5
Criteria for choosing a solution

• Use existing e-mail infrastructure at both
  companies
• Common solution
• Equal possibilities for KDA / KM to administer
  and browse the system.
• Capacity
• Handle current e-mail volume and future growth.
• Scalability
• Easily increase the capacity without making
  significant changes in the design.
• Redundancy
• If one component fails, a redundant component
  will take over.
• Automated
• Avoid manual routines

6
Previous design
7
New design
8
Components in the solution

• Domino LDAP server
• The directory solution for KOGNET. Contains all
  kongsberg.com e-mail addresses and which system
  they belong to (KDA or KM)
• Tivoli Directory Integrator data pusher
• Pushes directory data between the directories
• Ironport SMTP server solution
• Incoming e-mail solution.
• Checks if the e-mail has a valid recipient,
  either forwards the message to the recipient(s)
  or rejects the message if no valid recipients are
  found.

9
Anti SPAM solution - Ironport

• SPAM handling in KM is based on the product
  Ironport
• AsyncOS - IronPort started with a FreeBSD kernel
  and made three major changes. First, IronPort
  developed a stackless threading model that allows
  the IronPort appliance to support more than
  10,000 simultaneous connections
• Reputation Filters - dispose of up to 80 of
  incoming spam at the connection levelsaving
  bandwidth, conserving system resources and
  yielding the highest levels of security for
  critical messaging systems
• SenderBase Network - SenderBase is the world's
  first and largest email traffic monitoring
  service. SenderBase collects data from more than
  100,000 ISPs, universities and corporations
  around the world. SenderBase measures more than
  120 different parameters for any email server on
  the Internet.

10
Anti SPAM solution - Ironport

• Anti-Spam - Anti-Spam combines best-of-breed
  conventional techniques with IronPort's
  breakthrough context-sensitive detection
  technology, to eliminate the broadest range of
  known and emerging email threats
• Anti-Virus - Sophos or McAffee Industry leader
  in anti-virus filtering
• Mailflow Central - log

11
Directory sync. overview
12
Kognet directory

• More than 9000 addresses
• Automatically updated by Tivoli Directory
  Integrator (TDI)
• Update interval every 15 minutes
• Appends
• Deletes
• Updates (changes)
• Automatically inserts routing host

13
Active directory at KDA

• All KM addresses written to a separate OU in AD
• Personal mail addresses with all aliases.
• Mail-in databases.

14
Solution
15
Test phase
16
Ironport Monitor
17
Anti SPAM solution - Ironport
18
Anti SPAM solution - Ironport
19
Questions ?
20
WORLD CLASS through people, technology and
dedication
WORLD CLASS through people, technology and
dedication