Hi,

Im looking for some advice/idea on the security part for mail server.

Say that I have a mail server with postfix + spamassassin + mailscanner + mailwatch and I want to tune up my security,
any product/solutions come to mind that can be consider easy to be integrated into the system?

Looking towards to have a better security to stop phishing, malware, ransomware at earlier stage of receiving email.

you may use cloud based solution.. it can stop the threat before even reach your mail server.. there is plenty, you might need to choose the one that suit your budget..

Yes, I have thought of it. But the thing is its preferable to have an on premise system for data privacy and control.

Need some enterprise level solution/ideas because its for a company that I am working with.

Can check out the following:
https://www.fireeye.com/products/email-security.html
https://www.proofpoint.com/us/products/emai...-and-protection

Or start looking to setup an IDS/IPS if you don't have one already.

Interesting, never thought of IDS/IPS. Need to broaden my perspective on this. Thanks for the suggestion

Can share what is the main benefits for own email server?

If you looking for cheap email hosting:
Actually now the email server is very cheap, especially under the shared hosting plan. With less than USD5 per month, you can have an unlimited email account if you know how to set it up properly.

If you looking for stable email hosting:
office 365, google workspace.

If you looking somewhere in between cost and stability:
exabytes, thegigabits.

One of the best email filtering service I know is Avanan, but it required you to have either google workspace email service or office 365 email service. Other standard email service provider do comes with spam filtering service.

Spam filtering is very important to save employees times, but most important is to have endpoint protection to detect and block email attachment that comes with virus/ransomware which can destroy your whole network.

Own email server is for controlling all the email data and privacy especially government related stuff.
The setup all is there however I just want to make sure that current environment setup have at least up-to-date security.
That can also def again ransomware and cryptobot etc.

I see, thanks for your information. I have no experience with government sector which might contain highly sensitive information. It should be worth to maintain own server for your case.

How about implement well know firewall email security gateway such as Sophos/Fortinet? What is the solution you are using now?