TLS Monitoring Incoming

[Secnet DRVBundGQ]

The TLS alerts mechanism under the "destination controls setting" works great, but i need the same for incoming connections.

I wish to be informed about any failed TLS-connection with partner X.

Is there a solution?

I tried several filters, but without success.

e.g.

GUI

Order	Condition	Rule	Delete
1	Other Header	header("from") != "TLSv1"

Notify

notify ("xxx@xxx.com")

any ideas?

[Andreas Mueller]

Hello,

there is no alert functionality for incoming messages where TLS is required. This is basically because of the sender being in charge to enable TLS when they cannot establish a connection to you. A filter would not work because the message never enters the appliance. Or do you try to archive this with messages that have fall back to plain text (TLS preffered) when TLS could not be established?

Regards,

Andreas