Cisco Cisco Email Security Appliance C670 ユーザーガイド
12-7
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 12 Cisco IronPortEmail Encryption
Step 14
Select an HTML notification template. Choose from HTML notifications you configured in text
resources. If you did not configure a template, the system uses the default template.
resources. If you did not configure a template, the system uses the default template.
Note
The key server uses an HTML or text notification based on the recipient’s email application. You
must configure notifications for both.
must configure notifications for both.
Step 15
Select a text notification template. Choose from text notifications you configured in text resources. If
you did not configure a template, the system uses the default template.
you did not configure a template, the system uses the default template.
Step 16
Enter a subject header for encryption failure notifications. The appliance sends a notification if the
encryption process times out.
encryption process times out.
Step 17
Select an encryption failure notification template for the message body. Choose from an encryption
failure notification template you configured in text resources. If you did not configure a template, the
system uses the default template.
failure notification template you configured in text resources. If you did not configure a template, the
system uses the default template.
Step 18
Submit and commit your changes.
Step 19
If you use Cisco Registered Envelope Service, you must take the additional step of provisioning your
appliance. Provisioning the appliance registers the encryption profile with the hosted key service. To
provision the appliance, click the Provision button for the encryption profile you want to register.
appliance. Provisioning the appliance registers the encryption profile with the hosted key service. To
provision the appliance, click the Provision button for the encryption profile you want to register.
Updating the PXE Engine
The Cisco IronPort Email Encryption Settings page displays the current versions of the PXE engine and
the Domain Mappings file used by your appliance. In previous versions of AsyncOS, you had to update
AsyncOS in order to update the PXE engine. Now, you can use the Security Services > Service Updates
page (or the
the Domain Mappings file used by your appliance. In previous versions of AsyncOS, you had to update
AsyncOS in order to update the PXE engine. Now, you can use the Security Services > Service Updates
page (or the
updateconfig
command in the CLI) to configure the Cisco IronPort appliance to
automatically update the PXE engine. For more information, see
You can also manually update the engine using the Update Now button of the PXE Engine Updates
section of IronPort Email Encryption Settings page (or the
section of IronPort Email Encryption Settings page (or the
encryptionupdate
command in the CLI).
Figure 12-4
PXE Engine Updates on the IronPort Email Encryption Settings Page
Configuring the Encryption Content Filter
After you create an encryption profile, you need to create an outgoing content filter that determines
which email messages should be encrypted. The content filter scans outgoing email and determines if
the message matches the conditions specified. Once the content filter determines a message matches the
condition, the Cisco IronPort Email Security appliance encrypts the message and sends the generated
key to the key server. It uses settings specified in the encryption profile to determine the key server to
use and other encryption settings.
which email messages should be encrypted. The content filter scans outgoing email and determines if
the message matches the conditions specified. Once the content filter determines a message matches the
condition, the Cisco IronPort Email Security appliance encrypts the message and sends the generated
key to the key server. It uses settings specified in the encryption profile to determine the key server to
use and other encryption settings.