Encryption

You can configure the various encryption settings for outgoing messages, and specify encryption settings from the outbound IP to the Email Security product and from the Email Security product to the Internet.

To configure special routing and attachment encryption, see Configuring the Encryption Service.

To configure encryption for outbound mail:

Manage >> Outbound IPs >> {Outbound IP}

1.

Encryption can be triggered based on the content of a message's subject. In Add Trigger Filter, enter a name for the filter, the word in the subject that will trigger the filter, and select the action: Attach Encrypted or Special Routing.

2.

Select the encryption method for mail from the outbound IP to the Email Security server:

Never Encrypt	Transport Layer Security (TLS) is never offered during the session.
Offer to Encrypt	If an encrypted session cannot be established, the message is received in the clear.
Always Encrypt	If an encrypted session can not be established the connection is closed. The sender can connect and authenticate in the clear but cannot proceed with sending the message.

3.

Select the default encryption method for mail from the Email Security server to the Internet. To encrypt all outgoing messages, select Always Encrypt for the default encryption method, and then select the Encryption option.

Never Encrypt	Transport Layer Security (TLS) is never attempted during the session.
Attempt to Encrypt	If an encryption session cannot be established, the message is sent in the clear.
Always Encrypt (any certificate)	Accepts any certificate.
Always Encrypt (valid certificate)	Accepts any valid, non-expired, certificate that has the proper form and syntax.
Always Encrypt (trusted certificate)	Accepts only certificates issued by a trusted Certificate Authority (CA), there is a complete chain to the CA, and the host name is not an IP address.