LibraCyber ESG Mail Encryption is an End-to-End encryption feature that protects your emails directly on the gateway. To learn more about this module, please see the Mail Encryption module knowledge base.
This feature is disabled by default, to activate it you have to click on the Enable green button placed at the top of the page.
General Settings
From this tab you can customize the Mail Encryption general heavior.
Encryption Web Service
From the first section you can configure the URL where the Encryption Web Service is reachable. The Encryption Web Service is already available from the appliance port 443 (the WebUI port), but you can expose it to a different port.
To expose the Encryption Web Service to a different port you can choose No in the "Is LibraCyber ESG WebUI public?" parameter and type the port where you want the service will run.
Note: the port must be greater than 1024.
Composition
In this section you can configure how the message will be composed.
- Notify Only: only notify the recipient about the encrypted message, without the encrypted message attached (not recommended).
- One-Time-Password Only: only use disposable One-Time-Password for encrypted message, without saving password for the same recipient.
- Encrypt subject: show a generic message on the notification mail and encrypt the original subject.
Encryption Triggers
In this section you can set when the message must be encrypted.
- Message has Sensitive header: when the sensitivity is set as Confidential in Outlook or other MUA, the message is encrypted.
- Subject begins with "Encrypt": matches "Enc:", "Encrypt", "Cifra:", "Cifrato" and so on.
- Subject begins with "Secure": matches "Sec:", "Secure", "Sic:", "Sicuro" and so on.
- Subject begins with "Confidential": matches "Confidential", "Confidenziale" and so on.
- Subject matches expression: matches a custom word list (this,is,a,word,list) or a regular expression (/my(custom)?match/i).
Encryption Policies
A Policy to encrypt or not to encrypt can be enforced for a combinations of Sender and Recipient.
The order of this list respect the priority used by LibraCyber ESG, and the first match in the list will apply. The priority is computed giving the sender precedence over the recipient, and giving specific email addresses precedence over domain, which in turn have precedence over "default".
When no match is found, the default policy is "Plain".
In this table are displayed all the existent Encryption policies, you can filter them out by performing a Search and Export results in common format such as CSV and PDF. To create a policy you can click on the New button from the table toolbar and define a Sender, a Recipient and the Action the appliance will perform.
Recipient Passwords
Whenever a encrypted email is sent to a recipient, a random password is generated. The password is emailed once to the sender and cannot be inspected, to keep secrecy.
In this table are displayed all the generated encryption password information such as the Sender, the Recipient and the Created On date. You can filter out displayed records by performing a Search and Export data in common formats such as PDF and CSV. To delete one or more records you can select them and click on the Delete button on the table toolbar.
If a user notifies his password has been stolen, so someone else could have access to his encrypted emails, you can Revoke the password, making it no longer valid to decrypt emails. If a user notifies he forgot his password, you can resend the password to him by clicking the Remind button.