STARTTLS for DLP Email Prevent

[Migration User]

Very basic question. In the forward mode, does Email Prevent unencrypt email to monitor content, or does it just pass through as encrypted?

 

[Migration User]

Yes, Email Prevent can decrypt emails to apply a DLP scan and re-encrypt them before forwarding. You need to configure TLS accordingly.

[DLP Solutions]

If you are referring to EMAILS that are ALREADY encrypted before being sent to EMAIL PREVENT, then they will remain encrypted. There is no way to unencrypt something that has been encrypted by another source. 

If you are asking about how the transmission of traffic from 1 hop to another is done..

It will be sent unencrypted to the next hop UNLESS you have configured the TLS communication between the servers. This will require the exchange of certs.

Hope this helps.

[DLP kishorilal]

Hi Madstan,

 

As to scan/read content must be decrypted so before sending to email prevnt the content is not encrypted it will further encrypted when scan completed and data will be sent out next MTA so that before MTA it has been sent out to encryption Gateway.

 

Monitoring and prevention of TLS-encrypted email traffic is only supported with Email Prevent in version 10.0 and above, see the SMTP Prevent MTA Integration Guide for instructions.

 

Network Monitor cannot inspect encrypted traffic.