No, not specifically just the files. You have to do that before it gets to the ESA.
The ESA can encrypt the connection to the receiving mail system (e.g. TLS) or it can encrypt the whole mail, and make it an attachment to a new mail and require the recipient to register/get a password to open it.(Cisco Registered Envelope Service).