eSafe is a gateway-based content filtering platform for both Web and E-mail traffic, providing to the Enterprise protection from spyware, viruses, and spam. The product is offered in both virtual appliance (with an included, hardened Linux O/S) or preloaded hardware appliance (from Aladdin and from partners) formats, and can be deployed in the network in a number of configurations, including as a transparent bridge, router, ICAP proxy, forwarding proxy, an SMTP relay (if only E-mail filtering is required), and now as a native proxy. Clustered (up to 8 appliances), HA deployments are also possible; with the appliances featuring built-in load-balancing and failover capabilities. According to the vendor, the product's "NitroInspection" technology allows it to inspect HTTP content at speeds of over 38 Mb/sec.

eSafe provides for the filtering of both Web and E-mail traffic, and boasts as a key feature the ability to scan Web traffic--including HTTP and HTML code and scripts--as opposed to scanning only downloaded files. Key filtering features include:

- Anti-virus scanning, featuring both a Proactive Scanning Engine (PSE) for the detection of "most zero-hour malicious code," and signature-based scanning

- Web/URL filtering, by category, content, or file type. Filtering capabilities and policies can be enhanced via the product's ability to integrate with LDAP/AD directories and support for URL filtering profiles that can be applied to users/groups, Workstation hostname or IP and Subnets according to IP range or VLAN during all or selected time frames

- "AppliFilter" application filtering, with the ability to detect and block specific applications, including P2P file sharing applications such as KaZaa, iMesh, Gnutella, and eDonkey; instant messengers including ICQ, MSN, AOL, and Yahoo!, and adware/spyware components

- Spam management, via multiple identification parameters and methods including real-time reputation, RBLs, black lists, spoofed senders, DNS lookups, heuristic analysis, and more

- Anti-spyware controls. These include the ability to detect and block spyware attempting to exploit HTTP and/or browser vulnerabilities that lead to automated spyware installations; identifying and blocking spyware downloads, including ActiveX, browser helper objects, and toolbars; identifying known spyware signatures when downloaded, including modules (DLLs) inside downloaded apps; and finally the blocking of spyware communication protocols, preventing existing spyware from communicating over the network.

eSafe is offered as four primary products: eSafe Gateway, which provides both E-mail and Web filtering capabilities; eSafe Web, with Web traffic only filtering; eSafe Web SSL, which adds the ability to inspect SSL traffic; or eSafe Mail which is installed as a mail relay.

Other eSafe-related or add-on products offered by the vendor include:

- Aladdin eSafe Mobile Content Security Gateway (MCSG), targeted specifically to mobile operators

- eSafe SecureSurfing, targeted specifically to ISPs looking to offer security services to their customers

- eSafe Anti-Anonymizer, with the ability to block "anonymizer" proxy servers used by employees

In hardware flavors, the vendor offers their "Hellgate" appliances which are targeted primarily to SMBs (supporting from 50 to 500 users). The appliances are preloaded and pre-configured, and features include a built-in fail-bypass option, support for firmware restore and upgrade, and an LCD screen for initial setup.

Note that not all features described above may be available in each eSafe version. Contact Aladdin Knowledge Systems for further information.