PGP Universal Gateway Email
Strengths: PGP delivers a top-notch encryption gateway that is easy to use and contains excellent policy enforcement features.
Weaknesses: A bit more expensive than other products and is limited to policy-based encryption and digital signature protection.
Verdict: Despite a higher cost for a software appliance, the Universal Gateway is definitely a valuable enterprise-class product for any size organization looking for gateway email encryption.
PGP Universal Gateway Email is a centrally managed email security software appliance, typically deployed on certified hardware devices. For our testing, we installed the software using VMware ESX 3.5. For this review, the tool is categorized mostly under the email security domain as its primary goal is to handle encryption and signature duties through policy management.
Setting up the Universal server was incredibly easy. The interface is very intuitive and is one of our favorite interfaces. On initial login, some administrators who aren't entirely familiar with PGP's product line will find the initial tutorials and policy diagrams very useful. Policy-flow diagrams help users understand the typical flow of mail and how encryption is handled based on the types of clients, policies and other deciding factors. The product protects email streams mostly between customers and their outside contacts (internal mail is not typically secured). Although the product is a pure-play email security gateway (encryption and digital signatures), it does inspect message content for keywords or sensitive content in order to apply the appropriate encryption options.
The policies in place decide how to secure the email from a gateway perspective (SMTP, POP, IMAP) based on existing legacy clients, unauthenticated users, trusted sources and other factors. All workload is done at the server level, removing the need for client software and providing end-user transparency. Disparate email clients, operating systems and recipient architectures are handled appropriately as well. End-users can receive encrypted emails if keys are available or delivery of the message can be pushed out via PDF file or even retrieved via web-based delivery directly on the gateway itself. The ability to enter in "learn mode," so PGP can learn about users and generate keys without actually performing any encryption, is a nice touch as well.
Documentation is excellent. All of the help files, tool tips and tutorials are top notch. The PGP website also has everything that customers need to learn about the products.
A Silver level support package (24/5 phone, email and web support) is included for one year with the base license. Renewal is $22 per seat on an annual basis. Additional support tiers are available.