IronPort (Email) Encryption

[rockbd]

Dear All

I am start using ironport recently.

But found out that it only eble to communicate via 25. It is a none encrypted connection. Can i use encrypted connect between Exchange (my mail server) and ironport?

My 2nd question is if i use ironport encryption then i think the mail will be send encrypt to receiver server but how it will decrypt the mail? As it is encrypted by my IronPort?

Waiting for a solution.

[balaji.bandi]

here is the some information of the flow for reference and understanding :

https://www.cisco.com/c/dam/en/us/products/collateral/security/cloud-email-security/guide-c07-738366.pdf

setup guide

https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_010010.pdf

[rockbd]

Thanks for the reply and those two documents.

My Exchange and Ironport both are on premises.

If i configure like you have provided documents then how the key will be exchange to other server (like gmail). If the key is not exchage then how the gmail server will open my message.

[dmccabej]

Hello,

What you're wanting to setup would be TLS communication between the ESA and your on-prem Exchange server(s). You can review the previously mentioned user guide for how to enable TLS, or you can also take a look at the article below that provides additional steps. You can search separately for how to enable it on Exchange for your Send/Receive connectors.

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118844-technote-esa-00.html

Thanks!

-Dennis M.