Abstract: A system for classifying an Internet protocol (IP) address, including: a data store for storing client profile data associated with a client, the client profile data including an Internet protocol address of a server; and a processor for receiving a resolved Internet protocol address from the client, and determining whether the resolved Internet protocol address corresponds to a second server associated with the first server. The data store includes configuration data representing Internet protocol addresses corresponding to servers in a server farm, and the processor determines that the servers are associated and part of the server farm when the resolved IP address corresponds to one of the IP addresses of the configuration data. The resolved IP address is received with a client request, and the request is allowed when the second server is associated with the first server.

Abstract: A proxy server for downloading a data file for a client, such as an email client or web browser, including: a external proxy for downloading the data file for the client from an external server over a network, based on profile data associated with the client stored on the proxy server; a memory module for storing the data file; and an internal proxy for transferring the data file to the client when requested by the client. The external proxy operates asynchronously to the internal proxy, and the proxy server operates transparently with respect to the client.

Abstract: A push update system for a security system having a plurality of network nodes connected in a hierarchy to a root node, including: (i) an upstream agent of an upstream node for sending updates for respective downstream nodes; (ii) a schedule agent for scheduling processing by the upstream agent; (iii) a downstream agent of a downstream node for receiving and storing updates; and (iv) an update agent for processing received updates to queue updates for a downstream node. The root node includes the upstream agent and the schedule agent. Leaf nodes include the downstream agent, and intermediate nodes include all four agents. The updates include Internet threat signatures for Internet protection appliances of the leaf nodes.

Abstract: An electronic communication control system including a communication transfer component for temporarily storing at least part of an electronic communication from a sender to an intended recipient; a communication analyser associated with the communication transfer component for analysing the stored part of the electronic communication to determine at least two sender attributes of the sender and at least one intended recipient attribute of the intended recipient; a database for storing data records having a score and being associated with at least two sender attributes and an intended recipient attribute; and a database manager in communication with the communication analyser for creating a data record in the database associating the sender attributes with the intended recipient attribute and having a score based at least in part on information received from the message analyser.

Abstract: An administration portal for a network security server, including: (i) control elements allowing a user of a network to access respective services, such as email, spam filter, malware filter, and web browser control services, performed by the security server; and (ii) an administration module for maintaining permission attributes for users of the network, the attributes defining access to the control elements. The permission attributes have a delegation hierarchy so a managed security service provider can set a permission attribute for a user to administrator, and the user with an administrator permission attribute can set another user to have a user permission attribute. The permission attributes can also be set on a group basis for a group of said users. The attributes each have associated capability levels defining a level of access for the respective services.

Abstract: A proxy server for downloading a data file for a client, such as an email client or web browser, including: a external proxy for downloading the data file for the client from an external server over a network, based on profile data associated with the client stored on the proxy server; a memory module for storing the data file; and an internal proxy for transferring the data file to the client when requested by the client. The external proxy operates asynchronously to the internal proxy, and the proxy server operates transparently with respect to the client.

Abstract: A system for classifying an Internet protocol (IP) address, including: a data store for storing client profile data associated with a client, the client profile data including an Internet protocol address of a server; and a processor for receiving a resolved Internet protocol address from the client, and determining whether the resolved Internet protocol address corresponds to a second server associated with the first server. The data store includes configuration data representing Internet protocol addresses corresponding to servers in a server farm, and the processor determines that the servers are associated and part of the server farm when the resolved IP address corresponds to one of the IP addresses of the configuration data. The resolved IP address is received with a client request, and the request is allowed when the second server is associated with the first server.

Abstract: A push update system for a security system having a plurality of network nodes connected in a hierarchy to a root node, including: (i) an upstream agent of an upstream node for sending updates for respective downstream nodes; (ii) a schedule agent for scheduling processing by the upstream agent; (iii) a downstream agent of a downstream node for receiving and storing updates; and (iv) an update agent for processing received updates to queue updates for a downstream node. The root node includes the upstream agent and the schedule agent. Leaf nodes include the downstream agent, and intermediate nodes include all four agents. The updates include Internet threat signatures for Internet protection appliances of the leaf nodes.