Cisco Cisco Email Security Appliance C160 Mode D'Emploi
C H A P T E R
12-389
Cisco IronPort AsyncOS 7.1 for Email Configuration Guide
OL-22158-02
12
IronPort Email Encryption
IronPort AsyncOS supports using encryption to secure inbound and outbound
email.
email.
This chapter contains the following sections:
•
•
•
•
IronPort Email Encryption: Overview
To use this feature, you create an encryption profile that specifies characteristics
of the encrypted message and connectivity information for the key server. The key
server may either be the Cisco Registered Envelope Service (managed service) or
an IronPort Encryption appliance (locally managed server). Next, you create
content filters or message filters (or both) to determine which messages to
encrypt.
of the encrypted message and connectivity information for the key server. The key
server may either be the Cisco Registered Envelope Service (managed service) or
an IronPort Encryption appliance (locally managed server). Next, you create
content filters or message filters (or both) to determine which messages to
encrypt.
An outgoing message that meets the filter condition is placed in a queue on the
Email Security appliance for encryption processing. Once the message is
encrypted, the key used to encrypt it is stored on the key server specified in the
encryption profile and the encrypted message is queued for delivery. If a
temporary condition exists that prohibits the encryption of emails in the queue
(i.e., temporary C-Series busyness or CRES unavailability), messages are
re-queued and retried at a later time.
Email Security appliance for encryption processing. Once the message is
encrypted, the key used to encrypt it is stored on the key server specified in the
encryption profile and the encrypted message is queued for delivery. If a
temporary condition exists that prohibits the encryption of emails in the queue
(i.e., temporary C-Series busyness or CRES unavailability), messages are
re-queued and retried at a later time.