IronPort - Encrypt emails for a particular User

[MNour401917]

Hi All,

Long time since i have been around here.

Have a question.

With IronPort appliances is it possible to  encrypt emails based on particular user/recipient rules if we upload a private key to the appliance?

Thanks in Advance

Nour

[Ken Stieers]

If you mean S/MIME, yes.

You can create S/MIME profiles with the cert and then use those profiles in outgoing content filters to sign/encrypt messages as needed.

[MNour401917]

Hi Ken,

Thank you for your help. Can the profile or filter be configured to match only one user emails? any documentation or reference will be much appreciated. 

[svgeorgi]

S/MIME profiles can be used in content filters as an action "S/MIME Sign/Encrypt (Final Action)", the condition for the same filter can be envelope sender/recipient, combinations or any other of the available conditions:

https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0.pdf#unique_535

https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0.pdf#unique_525