Cisco Cisco Email Security Appliance X1050 Technical Manual

Page of 2
ESA Email Encryption Configuration Example
Document ID: 117863
Contributed by Kevin Luu, Robert Sherwin, and Andreas Mueller, Cisco
TAC Engineers.
Jun 26, 2014
Contents
Introduction
Prerequisites
Configure
     Enable Email Encryption on the ESA
     Create an Outgoing Content Filter
Verify
     Validate Encryption Filter Processing in the Mail_logs
Troubleshoot
Introduction
This document describes how to set up email encryption on the Email Security Appliance (ESA).
Prerequisites
The information in this document is based on these software and hardware versions:
Model: All C−Series and X−Series
• 
Envelope Encryption (PostX) Feature installed
• 
Configure
Enable Email Encryption on the ESA
Complete these steps from the GUI:
Under Security Services, choose Cisco IronPort Email Encryption > Enable Email Encryption, and
click Edit Settings.
1. 
Click Add Encryption Profile in order to create a new Encryption Profile.
2. 
Choose Cisco Registered Envelope Service or Cisco IronPort Encryption Appliance (if the
Encryption Appliance is purchased) for the Key Service Type.
3. 
Click Submit and Commit Changes.
4. 
After the Encryption Profile has been created, you are given the option to Provision it to the Cisco's
Registered Envelope Service (CRES) server. A Provision button should display next to the new
profile. Click Provision.
5.