Message EncryptionAdministration Guide

Introduction to Encryption Services 11Message Encryption, Portal DeliveryMessage Encryption, Portal Delivery can be used on an on-demand basis to comm

12 Postini Encryption Services Administration GuideWhen Encryption Services ApplyPolicy Enforced TLS applies to all inbound mail received from designa

Chapter 2Policy Enforced TLS 13Policy Enforced TLSChapter 2About Policy Enforced TLSThe email security service includes Transport Layer Security (TLS)

14 Postini Encryption Services Administration GuideRequirementsPolicy Enforced TLS is set up separately for inbound and outbound mail.To set up Policy

Policy Enforced TLS 15• Stage 1: The sending server sends a message via TLS to the email protection service, which will always accept TLS messages and

16 Postini Encryption Services Administration GuideOutbound Policy Enforced TLS Mail FlowIf you have Policy Enforced TLS enabled for outbound mail, yo

Policy Enforced TLS 173. Scroll to the Inbound TLS by Sender Domain section, at the bottom of the page. If you do not see this section, you do not hav

18 Postini Encryption Services Administration Guide4. Enter the domain name you wish to set as TLS-only. Type the exact domain name. Wildcards and sub

Policy Enforced TLS 19To set up Certificate Validation:1. Go to Outbound TLS settings in the Administration Console.2. If the domain is not already li

20 Postini Encryption Services Administration GuideTLS Certification DescriptionEncrypt Only Behavior: Policy Enforced TLS obtains the keys from the S

2 Message Encryption Administration Guide Google, Inc.1600 Amphitheatre ParkwayMountain View, CA 94043www.google.comPart number: ENCAD_R6.16_134 Nove

Policy Enforced TLS 21Change the Default Certificate Validation SettingYou can change the default setting as well. When you add a new domain to Policy

22 Postini Encryption Services Administration Guide2. Click Save as Default.TLS AlertsPolicy Enforced TLS is intended for secured business partners wh

Policy Enforced TLS 234. Confirm the values by entering the following command into Step 2.5 and clicking “Submit job”:displayorg <orgname>orgnam

24 Postini Encryption Services Administration GuideWhen Policy Enforced TLS blocks an inbound message, your administrator will see the following alert

Chapter 3Message Encryption, Portal Delivery 25Message Encryption, Portal DeliveryChapter 3About Message Encryption, Portal DeliveryMessage Encryption

26 Postini Encryption Services Administration GuideYou will also need to enable Transport Layer Security (TLS) on your mail server. Setting up TLS on

Message Encryption, Portal Delivery 271. Sender to Email Security ServiceYour outbound email is routed through the email protection service. To assure

28 Postini Encryption Services Administration GuideIf the message expires without being read, the sender will receive a notice.If the recipient replie

Message Encryption, Portal Delivery 29Custom PortalFor an additional cost, you can custom-brand your Secure Portal. Contact your account representativ

30 Postini Encryption Services Administration GuideSet Up Portal DeliveryTo set up Portal Delivery, you’ll work with an account representative to enab

3library. Credit must be given in user-accessible documentation. This software is provided “AS IS.” The copyright holders disclaim all warranties, e

Message Encryption, Portal Delivery 31Activate Message EncryptionAn Activation Specialist will walk you through activating the Message Encryption serv

32 Postini Encryption Services Administration GuideActivation Specialist Adds Domains and PortalOnce you have specified your domain (and, if you are u

Message Encryption, Portal Delivery 33Configure Message EncryptionSet Message Encryption Settings in the Administration Console for organizations or i

34 Postini Encryption Services Administration GuideEncrypt all mail for a select group of users. Encrypt mail for other users if it contains a certain

Message Encryption, Portal Delivery 35In this scenario, Message Encryption will also apply for messages from with “Sensitivity: Company-Confidential”

36 Postini Encryption Services Administration Guide4. Check “Apply these settings to existing sub-orgs.” to overwrite Encryption Services setting of s

Message Encryption, Portal Delivery 37Configure Encryption for a UserAfter setting up Message Encryption, you can configure encryption settings by ind

38 Postini Encryption Services Administration Guide4. Click Save Configurations to save these changes.5. View User Encryption Settings to confirm your

Message Encryption, Portal Delivery 39View User Encryption SettingsYou can view a list of user Message Encryption settings through the Administration

40 Postini Encryption Services Administration GuideTo set up a Content Manager rule for Message EncryptionBefore you can set up Content Manager to use

Contents 5ContentsWhat This Guide Contains 7Related Documentation 7How to Send Comments About This Guide 8Chapter 1: Introduction to Encryption Serv

Message Encryption, Portal Delivery 41• Mozilla Firefox 1.06 or later, including Firefox 2.0.• Netscape Navigator 8.0 or later.• Safari 2.0.• Blackber

42 Postini Encryption Services Administration GuideThe Secure Portal times out as user is responding to a messageWhen a user logs in to the portal, th

Chapter 4Message Encryption, Inbox Delivery 43Message Encryption, Inbox DeliveryChapter 4About Message Encryption, Inbox DeliveryMessage Encryption, I

44 Postini Encryption Services Administration GuideRequirementsUsing Message Encryption requires that you route your mail through Outbound Services. F

Message Encryption, Inbox Delivery 453. Recipient DecryptionWhen the recipient receives the message, the message includes explanatory text and an HTML

46 Postini Encryption Services Administration GuideThe first time the user opens a message, the user will be prompted to add a password.On subsequent

Message Encryption, Inbox Delivery 47Once the password is entered and the message is decrypted, the message text is displayed. Because the message is

48 Postini Encryption Services Administration GuideSet Up Inbox DeliveryTo set up Inbox Delivery, you’ll work with an account representative to enable

Message Encryption, Inbox Delivery 49List Branding Preferences (optional)You can custom the Inbox Delivery messages with your support email address, l

50 Postini Encryption Services Administration Guide4. In section 2, click “Send by TLS if possible.”5. Click Save to store your settings.Configure Mes

6 Postini Encryption Services Administration Guide How Inbox Delivery Works 44Filtering 45Reading Encrypted Messages 45Inbox Delivery Branding 47Set

Message Encryption, Inbox Delivery 51To can view a list of user Message Encryption settings through the Administration Console, see “View User Encrypt

52 Postini Encryption Services Administration Guide• Mozilla Firefox 1.06 or later• Netscape Navigator 8.0 or laterInbox Delivery also requires cookie

Chapter 5Reports 53ReportsChapter 5About ReportsReports provide visibility into the traffic patterns across your organization. The Administration Cons

54 Postini Encryption Services Administration Guide4. Click one of the External Encryption reports: Domain, Account or Activity Log, or the Inbound or

Reports 55Outbound External Encryption by DomainThis report contains Message Encryption information on outbound encryption, sorted by sender domain. D

56 Postini Encryption Services Administration GuideOutbound External Encryption by AccountMessage Encryption information on outbound encryption, sorte

Reports 57The logs contain data from the prior day. Timestamps are in PST for most systems, and GMT for System 200. The log contains a maximum of 5000

58 Postini Encryption Services Administration GuideRecipient Recipient’s email address.Size Size (in bytes) of the message sent.Item Description

Index 59IndexAalerts for Policy Enforced TLS 22Bbatch commandsfor Message Encryption 36, 38for TLS Alerts 22Ccertificate validation 18comments about

60 Postini Encryption Services Administration Guide features and benefits 13inbound mail flow 14outbound mail flow 16reports 53requirements 14Postini

7About This GuideWhat This Guide ContainsThe Encryption Services Guide provides information about:• Descriptions of features and data flow of Policy E

8 Archive Manager - Microsoft Exchange Journaling Configuration GuideHow to Send Comments About This GuidePostini values your feedback. If you have co

Chapter 1Introduction to Encryption Services 9Introduction to Encryption ServicesChapter 1About Encryption ServicesOur encryption offerings deliver po

10 Postini Encryption Services Administration GuideThe protocol uses cryptography to provide endpoint authentication and communications privacy over t