Google Apps Directory Sync for Email Security

Google Apps Directory Sync for Email Security enables synchronization of your LDAP user data with your Google Apps security and compliance products. This automates user management tasks and ensures that new users are automatically provisioned, reducing the time and effort required to manage services for your users.

This utility connects to your Google message security service and adds, deletes, or moves users to match your existing organizational schema in your directory server. You can perform test synchronizations, configure change limits and notifications, and schedule automatic synchronizations.

The directory sync utility synchronizes LDAP user data with:

• Google Message Security
• Google Message Filtering
• Google Message Discovery
• Postini Email Security

Key benefits:

• Automates common administrative tasks and frees more time to focus on critical projects
• Push-based architecture requires no inbound network ports to be opened in the firewall, preserving existing firewall rules
• Easy and straightforward configuration simplifies setup and implementation
• Self-contained tool that does not require installation of additional components such as a DSML server

	Google Apps Directory Sync for Email Security	Directory Sync Hosted Edition
Location	Runs on a server in your network	Runs on the message security service
Configuration	Configure on your server with the Configuration Manager utility provided	Configure in the Administration Console
Direction of Data Flow	Pushes changes to the message security service	Pulls changes from your DSML server
Installation Needed	Installation includes all needed components	Requires installation of third party DSML server on your network
Firewall Settings	Your firewall must allow outgoing HTTPS connections to the message security service	Your firewall must allow incoming HTTP connections to your DSML server
Authorization	Requires administration access on the message security service, and read and execute permissions on your LDAP server. Uses basic authentication.	Requires administration access on the message security service, and read and execute permissions on your LDAP server. Uses basic authentication or anonymous access.
Complexity	Allows advanced LDAP queries, sophisticated organization mapping, and exception handling.	Allows advanced LDAP queries, simple organization mapping, and some exception handling.