C170 with version 9.7.0-125 and valid certificate for TLS.Our outgoing content filter which handles outbound email PXE encryption has the action set to "Encrypt and Deliver Now (Final Action)". Within this action, our encryption rule is set to "Only ...