Message Security and Classification Tools

This page lists utilities that allow you to classify email, manage secure email, and rights management for individual messages.

For tools dealing with securing Outlook and Exchange data with folder and user permissions, see:

Managing Exchange Server Permissions

S/Mime and PGP utilities are listed at S/MIME Encryption and Message Security Tools
Public key servers and other services are listed at Secure E-mail Services

More Information

Tools in the Spotlight

CodeTwo Exchange Rules Pro

CodeTwo Exchange Rules Pro goes beyond standard Hub Transport email rules on Microsoft Exchange 2007 or 2010 and lets you fully control email flow, filter messages and add signatures and branding to email. It is easier to use than Exchange native tools and it gives you everything Exchange offers, and also a lot of new features Exchange admins consider as a must-have. Quickly create group forward rules, auto-responders, filter messages, control email content, rewrite sender's addresses, tag messages, add signatures and disclaimers, and much more.

Tools

Classify	Inserts security classification labels into the first line of the message body and prevents messages from being sent until a classification label has been added. Separate versions available for Exchange and Outlook. Works with all versions of Outlook. Outlook 97 needs to be Version 8.04.5619 (or later) and Outlook 98 needs to be Version 8.5.5603.0 (or later); see instructions on Classify web site.
eCipher	eCipher allows you to send and read encrypted messages directly through your existing desktop email client (Outlook, Thunderbird, Eudora). The current version supports reading encrypted mail from any webmail client (Gmail, Yahoo!, AOL, etc.). eCipher protected emails utilize strong encryption and digital signatures, ensuring that they can only be opened by the intended recipients. eCipher also provides extra security options for your email, including the ability to prevent message forwarding, copying, saving, and printing. Free trial.
Entrust	Family of security products, including support for Exchange and Outlook users.
HP ProtectTools	HP ProtectTools products provide an easy, low-maintenance way to implement your PC security policies without inconveniencing your users. They work together in background mode to manage access to your systems and control access to data and data storage devices.
M86 MailMarshal Email Content Manager	M86 MailMarshal ECM (formerly M86 MailMarshal Exchange) is a flexible, scalable email policy management solution for Microsoft Exchange 2007 and 2010. Using deep content inspection technology, it simplifies compliance by ensuring inbound, outbound and internal email�including text, images and file attachments�adhere to data loss prevention and AUP requirements. Its scalability, centralized management and reporting, ease of deployment and minimal administration overhead make M86 MailMarshal ECM the most robust, yet cost effective internal email security solution available.
Messageware OWA Guard	OWA Guard is an endpoint security software solution designed to protect both businesses and their employees from unauthorized access to corporate information. Messageware OWA Guard protects users and businesses from logon attempts by unauthorized individuals, automated brute-force attacks, password guessers, phishing, man-in-the-middle attacks, key loggers and screen scrapers while prohibiting logons from countries with known hacker communities. Currently in beta.
Outlook Security Labels	Outlook COM add-in that security labels to digitally signed (S/MIME) messages. Security labels can be used to enforce a user's authorization to access the contents of the message. The label can also restrict which recipients can open, forward, or send the message.
OWA Prevent	Allows users to classify and label OWA messages to prevent leakage of sensitive information. Administrators can also block viewing of certain messages over OWA depending on message sensitivity, or if attachments are present. For Exchange 2003.
RightsEnforcer Email	Server and client software to allow users to set rights on documents sent as email attachments, adding a Send Secure Attachments button to Outlook. Can integrate with Microsoft Windows Rights Management to add protection to another 200 document types or operate by itself. Allows users to change the protection on a document after it has been sent.
SAFEmail	Component of military messaging client based on Outlook supports S/MIME v.3 encryption and signatures.
SAFEmail for OWA	Boldon James have extended the Microsoft OWA client to support military message handling. The extensions encompass a number of military attributes embedded in the user interface and a security labeller that appears as a separate 'pop-up' dialogue when the user sends the message. These extensions, when applied to the Microsoft OWA client, mean it can be used as part of a military message handling system (MMHS).
SecureZIP for Desktop	SecureZIP enables users to secure files with strong passphrase or digital certificate-based encryption, as well as digital signature support to ensure data integrity. Encrypt email body and calendar attachments � Ensure that the information contained in the body of your e-mail, email attachments and calendar attachments is protected through integration with Outlook. Re-encryption � Save time by forwarding encrypted e-mails to new recipients automatically from your e-mail without having to download and resave your files
Security Incident Report	Unsupported Microsoft sample form application.
SessionGuard	SessionGuard is Exchange security software that protects Outlook Web Access users from fraudulent use of their login credentials. SessionGuard ensures that an OWA user�s cached credentials cannot be reused to gain access to Exchange. In addition SessionGuard provides administrators the ability to set session timeouts to protect against forgetful users. Available for OWA 5.5, 2000 and 2003. (Was SecureLogoff)
Voltage SecureMail	Email encryption application for both internal and external recipients. Users get a Send Secure button in Outlook. Recipients only need to authenticate; they don't need special software.
Windows Rights Management	Tools for setting policies on email messages and files that govern who can read, copy, print, etc. and how long mail messages can be retained. Client supports rights assignment in Office 2003 and reading in Office 2003 or Internet Explorer (on Windows only). Server for corporate use available as add-in component for Windows 2003 Server. Microsoft is also maintaining (for the time being) a free, public RM server for use with .NET Passport accounts.