Recent Posts
Categories
Archive

Archive for March, 2011

Social Media: Why IT Pros should use it

Monday, March 28th, 2011

Share on Twitter TwitterShare on Facebook Facebook Share on LinkedIn LinkedIn

Social Media: Why IT Pros should use it

You’ve probably said it yourself, “Social media is all about people who want to talk about themselves.” Although Social Media sites can be a way for some people to deliver trivial information, it can also be an incredibly valuable professional tool. For those IT pros who still aren’t sold on the benefits of Social Media sites, here are a few reasons why they can be very worthwhile:

  • Immediacy. Breaking news related to IT and other news hits feeds like Twitter before it posts almost anywhere else.
  • Centralization. By connecting with just a few people and organizations on social media sites, you can, in a single place, track activities that are important to you. For example just from today…
  • Specific use case — troubleshooting, alerts & product information. If you need to get immediate answers to a network problem, an IT security issue, or you need unbiased information about a technology purchase, you can send a question to your network. Many IT professionals in your network who have had experience with these things often immediately respond to your post with relevant information. They also often offer their email addresses so you can continue the conversation and get the details you need to make a good decision.
  • Networking. The professionals you’ll meet on social media sites are there for the same business reasons you are. Their insights and knowledge can be invaluable, as can your contribution to the tech community. Many reach out to others when they need something proving social media sites can be an invaluable networking tool.
  • Continuing education - Get real-time announcements about free webinars and educational events that are industry specific. (As an advertisement, check out InfoSight’s free webinars and training offerings)
  • Compliance Resources – Know what new regulations are coming down the pipeline.

Social Media sites can provide some “fun” stuff, too – an often welcome break from the normal grind. Check out badbanana and overlandparker, both on Twitter. It’s kind of nice to see a joke or two interspersed between news about the latest Trojan alert and stock news from infosec sites.

Summary

Although many people still have the perception that social networking is nothing more than a way for celebrities to boost their egos, it can be a particularly valuable professional tool. That’s why more and more IT professionals are joining the social media ranks.

What do you think? What’s your experience? What benefits do you receive from your involvement in social media sites?

Got an opinion? Please help continue our conversations by commenting on this post.

In The News: New Banking Trojan

Sunday, March 27th, 2011

Share on Twitter TwitterShare on Facebook Facebook Share on LinkedIn LinkedIn

In The News: New Banking Trojan

The SonicWALL UTM Research team has received reports of a new banking Trojan named Tatanga in the wild. Spain, Germany, the United States, and the United Kingdom are the top countries affected by this Trojan.

This Trojan has many sophisticated features resembling functions found in the popular crime-ware toolkits Zeus and SpyEye which includes:

  • Encrypted configuration files
  • Encrypted communication between the bot and the Command & Control server
  • Dynamic HTML injection affecting users of popular browsers like IE, Firefox, Chrome, Safari etc.
  • Disables AV applications
  • Harvests e-mail addresses & other sensitive information
  • Removes other malware infection specifically Zeus

SonicWALL Gateway AntiVirus provides protection against this threat via the following signatures:

  • GAV: Tatanga.gen (Trojan)
  • GAV: Pincav.BAHA (Trojan)

Learn more about this new vulnerability at the SonicWALL Security Center

Make sure you are protected! For more information on the latest protection visit, us on the web at InfoSight, Inc

Got an opinion? Please help continue our conversations by commenting on this post.

6 Sure-fire Ways to Increase Mobile Security

Saturday, March 26th, 2011

6 Sure-fire Ways to Increase Mobile Security

mobile security

Mobile threats have risen by more than eight times over the past five years, with a sharp increase in 2010. After some 200,000 users downloaded infected mobile apps from the official app store Android Market, Google pulled more than 50 infected programs from the Market.

In an effort to protect information on mobile devices, IT managers are increasingly becoming aware of the need to not only apply security policies for smartphones and tablets, but educate users on mobile security. Here are six sure-fire ways to increase the security of your mobile devices:

1.       contain smartphone VPN access;

2.       control the installation of third-party and unsigned apps;

3.       establish screen lock password policies;

4.       set up lost device procedures;

5.       evaluate smartphone anti-virus products; and

6.       enroll users in InfoSight-U’s online security awareness training

What has your organization done to increase mobile security? Your comments and suggestions are welcome.

Got an opinion? Please help continue our conversations by commenting on this post.

Top Tech Threats & Trends for 2011

Saturday, March 26th, 2011

Share on Twitter TwitterShare on Facebook Facebook Share on LinkedIn LinkedIn

Top Tech Threats & Trends for 2011

Here at InfoSight, Inc. we have put together our take on what the key tech trends and threats of 2011 will be. We know as the technologies become faster and smarter so will the threats that follow them. The Social Engineering and Black Hat SEO we experienced in the previous year will still hold strong and continue to transform, and we’ll see a continued increase in spending on virtualization, cloud computing and mobile technology.  We don’t consider ourselves fortune tellers, but read on to see if you agree.

TRENDS

VIRTUALIZATION: Fifty-six percent of companies plan to invest in some form of virtualization in 2011 so it’s safe to say that virtualization has definitely found its place. It’ll continue to grow in coming years too, as the Market Intel group predicts that $290B will be spent globally in virtualization over the next five years.

CLOUD COMPUTING: Cloud computing follows right behind virtualization and continues to grow.  Everyone has been talking about cloud computing, and many feel it’s time to implement it as the ‘norm’ for transporting backup data. Having this information at your fingertips is imperative to security compliance and regulation. As we continue to see the expansion of cloud computing, the diversity of the cloud will become crucial. Emerging regulatory obligations will encourage growth for industries that are required to comply such as Financial Services, Health Care and Education. However, the risks associated with cloud computing are also gaining attention.

MOBILE APPS: Currently, there are more than a million mobile apps available and one billion smartphones in circulation. Gartner, Inc.  predicts that mobile application downloads will grow to 21B by 2013. Developers will improve the aps adding analytics, allowing companies to see how their apps are being used as well as improving the user experience.  RFID chips will transform mobile phones into a payment tool and increase the amount of ecommerce conducted through the apps.  Currently, there are no mandatory information security regulations in place for the distribution of application channels, which will put users at risk.

SOCIAL TECHNOLOGIES: Social technologies have changed the way companies operate and whether or not they’re able to maintain their edge over the competition.  We’re already seeing banks using blogs and twitter as a customer service tool. In an effort to be successful, organizations will need to strategically coordinate their CRM, communications and social media technologies into almost every aspect of their business.

ONLINE BANKING: The revolution has begun.  Spending on technology that allows users to access banking services via the Internet will reach $9.7 billion, up an average of 33% a year. Mobile payments will continue to gain traction in the online world as more people get on the mobile bandwagon. Remote checking deposits have also caught on like wild fire fueling and more and more consumers are using online banking. Financial institutions will continue to develop mobile apps to attract and interact with their customers.

These trends are raising the bar for risk management and they give us preview of some pretty big challenges coming up. Let’s take a look at some of the emerging threats.

THREATS

EMAIL BORNE MALWARE: Easy-to-use toolkits available on the black market will lead to the flourishing of email borne threats in 2011. Many of the infected emails we saw in the past came from well known companies such as FedEx and LinkedIn.  A new method is emerging that reuses content from emails already found on the victim’s computer, making it even harder to detect the malware. Every user, from the newest administrative assistant to C-level executives, needs training to learn how to identify and avoid fraudulent email and other messages, harmful file attachments and internet behavior that can lead to trouble. New regulations on the horizon will make user training mandatory.

MOBILE MALWARE:
As devices grow more intricate and multi-faceted, they become gold mines for storing, collecting and transmitting confidential data.  PDA’s are not alone anymore; Tablets are now also on the radar for malicious malware. Mobile banking and NFC enabled (online banking transactions) payments are beginning to be targeted by cybercriminals, and today’s unregulated virtual infrastructure will demand a plan of action to protect mobile devices.

SOCIAL ENGINEERING: This is nothing new, but the rapidly increasing number of users is alarming. There are approximately half a billion users on Facebook and Twitter, making these heavily-used sites irresistible to social engineering attacks. These attacks are becoming more professional, convincing, and pre-meditated.  URL shortners, popular on these social networking sites, are contributing to the amount of attacks and it’s harder for victims to detect the fraud.  Using a technique called clickjacking, the victim is tricked into clicking on a disguised link. Often “liking” the content in question sends the attack out to contacts through newsfeeds and status updates, propagating the scam. Social engineering, however, is not confined to social networking sites. It was merely the focus of today’s commentary.

In summary, there are some exciting technologies developing as we saw earlier in this post. When technologies are developed faster than security precautions, risks increase. Still, cyber security is really all about people. Technology is simply a tool that enables and simplifies the things people want to do. Understanding the threats and the attack methods used can help protect us and minimize the danger. The better we prepare ourselves and our employees to recognize and avoid the danger, the better we will be at protecting our sensitive data from exploitation.

Got an opinion? Please help continue our conversations by commenting on this post.

A sneak peak at the FFIEC’s new online authentication guidance

Friday, March 25th, 2011

Share on Twitter TwitterShare on Facebook Facebook Share on LinkedIn LinkedIn

A sneak peak at the FFIEC’s new online authentication guidance

What will the FFIEC’s new online authentication guidance look like? In short, it makes financial institutions more responsible for fraud prevention and the security they provide.

Although it has not yet unveiled its update to 2005’s authentication guidance, the FFIEC has recently distributed a draft document to its member agencies which singles out five keys areas of improvement:

1.       Improved risk assessments: to help institutions discern and respond to emerging threats

2.       Layered security controls to detect and prevent attack or the inadvertent loss of sensitive information (think ACH wire fraud incidents)

3.       More pervasive use of multifactor authentication

4.       More efficacious approaches to authentication, including better qualifying challenge questions and more sophisticated device identification and protection;

5.       Improved customer education offerings, especially for  commercial accounts

With the proliferation of online banking, and in the aftermath of the Zeus Banking Trojan, the FFIEC that the more challenging the barriers, the better equipped financial institutions will be able to prevent fraud. We’ll have to wait a bit for the official and final release of the new guidance, but at least there will be few surprises.

Links: http://www.fdic.gov/news/news/financial/2005/fil10305.html

Got an opinion? Please help continue our conversations by commenting on this post.

InfoSight Inc Launches New Website, www.InfoSightInc.com

Thursday, March 24th, 2011

Our new website provides rich content, improved navigation, a new training portal and direct access to reference materials and our social media sites.

We recently launched our new-and-improved website. Check it out! Here’s what you can expect:

  • rich and informative content
  • improved navigation and sitemap
  • a Knowledge Center that includes a schedule of educational webinars and reference materials
  • a soon-to-be-unveiled IT security and compliance training portal as part of our new Knowledge Center
  • one-click access to our social media sites, including our Company blog

You’ll be greeted on our homepage with a fresh and uncluttered design, complimentary colors, and a multi-media video with featured content that will be updated on a regular basis. Currently, a short video on our site’s new features can be viewed at www.infosightinc.com.

Improved Navigation and Sitemap
Our new “Products and Services” section was created as one of seven core navigation items at the top of each page. Footers and sidebars on every page also provide shortcuts to new information and diverse content covering IT Security, Enterprise Messaging Solutions, IT Consulting and Assessment Services, IT Infrastructure, and options for eLearning through our Training and Development portal and Knowledge Center. Accessible on almost every page are links to our social media sites, where you can subscribe via RSS feed and remain updated on issues pertinent to your job function.

Staff Voices and Educational Resources
Our IT security analysts have been charged with generating content such as blog posts and white papers that will help you learn about current threats and available solutions, and if you become a registered member, you’ll be able to access a portfolio of IT-related informational resources. The website will be managed by staff, allowing each page to continue to provide unique information and resources useful to IT professionals and their staff.

Knowledge Center and Training Portal

Later this fall, we’ll unveil a new and innovative training portal that will provide all the resources necessary for a complete training program. An efficient and effective instructional experience for IT Professionals and their staff, the portal will offer a variety of courses to help professionals in regulated industries effectively manage risk and compliance. The portal will also provide a comprehensive training curriculum for all levels of employees, including those seeking to upgrade their general office software skills. Additionally, training managers will be able to easily schedule, track and document their company’s entire training program.

This launch lays the groundwork for a philosophy of ongoing evolution and expansion of Infosightinc.com with new features and improvements being made continually.

We look forward to providing exciting new developments to come and; as always, we cherish your feedback! Let us know what you think.

Got an opinion? Please help continue our conversations by commenting on this post.

IDS & IPS for Dummies: What’s the difference & why do I need them?

Wednesday, March 23rd, 2011

Share on Twitter TwitterShare on Facebook Facebook Share on LinkedIn LinkedIn

Privacy is a concern for most of us, regardless of our occupation. Protecting your computer network against attack is vital, especially in the highly connected network environment that we live in. To ensure system privacy, many organizations rely upon Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS); but what are the differences between the two and why are they needed? Think of it this way: Intrusion Detection is passive, while Intrusion Prevention is active. Intrusion Detection Systems detect system intrusion and Intrusion Prevention System prevents it. In this way, the two processes are related. Let’s take a closer look.

IDS is used to detect any infringement or unauthorized access into a computer system or network. When an intrusion is detected, a notification is sent to the administrator so that necessary steps can be taken to restore normal operations. IDS is good for alerting and recovery purposes, but unfortunately cannot prevent an attack from happening. IPS, on the other hand, filters network activity and has the ability to stop malicious attacks on the network offering an additional layer of security. Intrusion Detection Systems and Intrusion Prevention Systems are invaluable tools, and are becoming more of a necessity in any and all environments. Let’s look at some of the benefits.

IDS and IPSBenefits of Intrusion Detection Systems (IDS)
Intrusion Detection Systems (IDS) create an urgent awareness of any intrusion into the network so that steps may be taken to safeguard private information or policies. Organizations use IDS to observe network activity including any activity that deviates too far from normal user activity. IDS give organizations the ability to:

1) Configure for 100% network visibility, providing IT professionals the ability to see exactly what is running on their networks AND identify threats and vulnerabilities to their networks.

2) Configure to reduce actionable events by up to 99.99%, allowing IT professionals to focus on immediate threats and not wild goose chases.

Benefits of Intrusion Prevention Systems (IPS)
Intrusion Prevention Systems are more complex than Intrusion Detection Systems because they have a higher degree of efficiency in locating problems and stopping them in their tracks. IPS is capable of preventing any attack on the network that might compromise operational security. Administrators can also learn from IPS; for example, what is the nature of the intrusion; whether the attack is a strong one or a weak one; what can be done to prevent further problems. IPS enables constant upgrades to the network while offering additional security and preventing an attack that can cause damage.

Why do organizations need Intrusion Detection and Intrusion Prevention Systems?
Typical network and systems administrators may not have the specialized skills required or the time needed to deploy IPS or IDS technology. Implementing an enterprise IDS and IPS requires time and preparation.  Configuring the agents, creating group policies, testing the environment, tuning alerts, and understanding what the alerts mean, are just a few of the challenges. Whoever will be implementing and configuring the systems should have a thorough understanding of how the network is designed, know what applications are being used how they function. Some applications may need to write the root of the primary drive, others may need to communication over specific ports.  Mobile or remote workers also need to be taken into consideration.

Additionally, the cost of implementing an enterprise IDS and IPS could be cost prohibitive. Not only is there the cost of the products themselves, there is also the amount of hours it will take to implement. Add in the cost of managing the systems and you can appreciate the challenges of these protective measures.

You may opt to contract with IDS/IPS experts to focus on your network so that you can focus on your business. These experts ensure compliance with regulatory obligations, while they continuously research and update security software so you don’t have to. They’ll help you develop a comprehensive security strategy with multiple layers of security including Intrusion Detection Systems (IDS) & Intrusion Prevention Systems (IPS) to keep you ahead of the next threat. And hiring a team of experts to do the job allows you to focus on what you know best — your business!

With a plethora of vulnerabilities our there, organizations need to constantly mitigate the risks associated with the ever changing environments and applications being introduced. As you can see, IDS and IPS are invaluable tools, but we need to remember that they are not the “silver bullet” for security. Selecting just one technology for comprehensive protection results in too much risk. By combining several preventive measures, organizations now have multiple layers of protection against various types of attacks and can bring risk exposure threats down to acceptable levels.

Now we’d like to hear from YOU. How are you protected from the unknown?

Got an opinion? Please help continue our conversations by commenting on this post.

Managed Firewall 101: What everyone needs to know

Tuesday, March 22nd, 2011

If your home has ever been burglarized, you know what it feels like to be victimized. You may have been temporarily aggravated or even angered bmanaged firewallsy the “inconveniences” that followed the event, i.e., repairing a broken window or door, changing the locks, installing an alarm system, replacing items that were stolen, wondering what else was stolen that you haven’t noticed yet, etc., and somehow, the feeling of just how vulnerable you are stayed with you for a very long time. In fact, those feelings probably motivated you to take actions to prevent it from happening again. Cleaning up after a burglary can be a lot of work, both physically and emotionally, and it’s not so different than having your information breached. Just ask anyone whose identity has ever been stolen. It can take months, or even years to get your life back to normal.

Wouldn’t it be prudent to protect your confidential information, especially that of your business? One of the first steps to protecting your data is setting up a firewall to keep intruders out.

Most Internet users today are very familiar with the basics of firewall protection.  Firewalls block unauthorized access while permitting authorized communications. In the same way your home security system that allows your family in while keeping intruders out, a firewall adds a solid layer of protection between your critical information and malicious attempts to access it. But consumer-level firewalls cannot handle the volume and complexity of business IT requirements any better than Fido could ward off a band of thieves.  Managed firewalls are better suited for businesses with multiple computers connected to the Internet around the clock, and with sensitive data such as personal or credit card information stored on their system.

But what are managed firewalls? Managed firewalls are software, hardware, or a combination of both that are designed, installed, and continuously monitored and updated by third-party security analysts. Businesses that use managed firewalls need the extensive protection this type of system offers, but don’t necessarily have the required resources to maintain an in-house managed firewall.

Why professional Managed Firewall services are essential
The volume of data your organization handles daily via the Internet or a Local Area Network can be staggering. Your IT staff needs to be focused on keeping your system operating at peak efficiency and handling support issues quickly.  The effort required to manage an in-house firewall would keep them from focusing on essential day-to-day operations. With a managed firewall, third-party security analysts do the work for you, freeing your time for more importanmanaged firewallt matters.

The security of your data is vital and the risk of having proprietary information or financial records, usernames, passwords and associated data breached is very real. Internet crime, system intrusion, data loss, compromised credit card information, denial of service and other attacks can cripple a business. In fact, most firewall breaches occur when the firewall parameters or rules are not properly configured for the specific needs of the business, as with generic firewall software. A managed firewall can be configured for your specific needs, and threats can be quickly identified and neutralized. It’s like posting armed guards on your IT system. The “guards” constantly adapt to changing threat levels and thwart the efforts of unscrupulous hackers.

Benefits of a Managed Firewall
Now that you know what managed firewalls are, and why you might need one, let’s look at some of the benefits you’d receive.

  • Managed Firewalls provide 24/7 protection against threats Your firewall maintains logs of all security events and will be monitored at all times. By monitoring these logs malicious activity including previously unknown, zero-day attacks can be identified. Performance and availability can also be monitored to ensure your business never goes offline.
  • Reduce administrative overhead costs -The cost of recruiting, hiring, training, and associated employee costs is transferred to a third-party agency, reducing your overall IT burden.
  • Eliminate false positives -Na href=”http://infosightinc.com/IT-Security/antivirus_malware.php”>Antivirus software can degrade computer performance and inexperienced users may misinterpret the prompts and decisions that antivirus software presents. An incorrect decision may lead to a security breach. False positives can be as destructive as false negatives. Managed Firewall services can help you eliminate false positives.
  • Satisfy regulatory requirements -Managed Firewall services satisfy PCI, GLBA, NERC, FISMA and other regulations.

Clearly, a pinch of prevention is worth a pound of cure. So while you’re choosing between the features of your home alarm system, consider that the best solution for your IT security concerns may begin with a Managed Firewall.

Join the conversation: Are you so bogged down with your day-to-day operations that updating and maintaining your firewall takes a back seat? How are you employing that pinch of prevention?

Got an opinion? Please help continue our conversations by commenting on this post.

Data Loss Prevention: Should you trust your employees?

Tuesday, March 22nd, 2011

Stolen identities, bank accounts and credit card numbers are sold in bulk every day in shadowy online forums, often for pennies on the dollar. Cyber criminals can easily make a few hundred to a few thousand bucks a day from selling this stuff.

Data can be breached in many ways including intercepting it as it travels across the network, stealing data that is stored in file shares, databases and endpoints, and spying on data that’s in use on desktops and mobile devices. In fact, hackers are exploiting the missing safeguards in today’s mobile phones –including the iPhone & Android – giving them complete control over the phone’s functions. Did you know they can turn on the phone’s microphone to eavesdrop on conversations or make the phone join a distributed denial of service attack or a botnet? The can even infect other phones in the user’s contact list. Scary stuff.

Well-meaning employees
But besides theft, sensitive data can also be leaked by well-meaning employees making innocent mistakes. Our “work-from-anywhere” lifestyle combined with Web 2.0, has begun to blur the lines between work and private life. Because of this psychological shift, people may inadvertently share information their employer would have considered sensitive. Even if employees aren’t sharing the equivalent of trade secrets, the accumulation of the small “non-sensitive” items they share can allow a business’s competitors to gain intelligence about what’s going on and being worked on at that company.

Or worse, the personal information they share on social media sites could be used to hijack company credentials leading to a data breach at their place of employment. Recently, Chinese hackers, after carrying out a long reconnaissance of Google employees and more than 20 other companies in the run-up to the Dec 2009 Google attack, were able to install spyware on the most resilient of networks by manipulating key employees who had access to sensitive data to click on malicious links. The hackers targeted key employees by sending messages from contacts and friends to make messages containing the malicious links plausible.

Disgruntled employees
Without a doubt, however, the most insidious method of data data loss preventionloss comes in the form of the disgruntled employee. With more and more companies laying off staff due to a tough economy, the number of disgruntled employees who abused their access privileges after being notified that their employment would be terminated skyrocketed in 2009. According to a US Commerce Department & CSI Security Crime Survey, insider attacks have become the number one security threat for U.S. businesses, topping traditional threats like worms and viruses.

A recent Ponemon Institute and Symantec study revealed that more than half of employees who leave a company (59%) have kept company information after they leave.  Email lists, customer information and non-financial business information were the most frequently retained data. 67% reported using the former company’s confidential, sensitive or proprietary information after they left.

Reasons to steal data
Whether terminated or not, a surprising 73% of employees admit to stealing confidential company information. The top 5 reasons for stealing data include:

  • everyone else is doing it;
  • the information may be useful to me in the future;
  • I was instrumental in creating this information;
  • the company can’t trace the information back to me; and
  • the company doesn’t deserve to keep this information.

Data loss prevention tips
For organizations, it’s just as important to maintain good policies of data loss prevention from the inside as from the outside. Luckily, it’s relatively easy to monitor the security of confidential data within a company system: data loss prevention systems can track and safeguard every possible channel of information leaving a network. This includes protection against unwarranted printing, CD burning, USB copying, email, file-sharing programs, and a plethora of other ways that data can leak from the system.

In addition, because people are in many cases the last line of defense against threats such as malicious code, disgruntled employees, and malicious third parties, a security awareness training program is critical to any organization’s information security strategy and supporting security operations.

Data loss prevention from the inside, as well as from the outside, can help your company avoid damage to your reputation and brand, loss of customers and/or deposits, loss of competitive information, violations of the law and the consequences of non-compliance, legal liability, and the escalating costs of notification and clean up.

Also see: Forrester Research: Zero Trust

Got an opinion? Please help continue our conversations by commenting on this post.

10 tips to help you decide which email archive solution is best for your organization.

Tuesday, March 22nd, 2011

Choosing whether or not to archive is a no-brainer—archiving is a must for most organizations. Determining whether or not to implement an in-house archiving system or outsource the task to a SaaS provider is a bit more complicated. There are a variety of factors to consider before making a choice, as every organization has different goals to meet and resources available to them.

Before you make a decision about whether to implement an in-house email archive system or go with a managed service, you should evaluate your company’s needs to determine:

  1. Your goals
  2. Your budget
  3. What regulations and other compliance requirements you must meetemail archive
  4. Whether or not you have internal IT expertise readily available to implement and manage an in-house system (including regular upgrades and troubleshooting)
  5. storage requirements
  6. The need for a disaster recovery solution
  7. The need for a business continuity solution
  8. Time constraints on implementing a solution and how quickly you need it in place
  9. Whether your budget will support regular upgrades, maintenance, extra storage, etc.
  10. Your total cost of ownership for an in-house email archive solution

Once you have a firm grasp of what you need and what your budget and resources can support, the decision is much easier. Get informed about what to look for in an email archive solution.

Got an opinion? Please help continue our conversations by commenting on this post.