McAfee OFFICE 3.1 User Manual download pdf (Page 41)

McAfee SaaS Email Protection Training Guide – Group Administrator Role

Proprietary and Confidential Page 6-19

The Downloaded Recipient Shield list will create a .csv spreadsheet file.

The following value is allowed in list entries:

 Sender Address - complete email address (for example, user@xyz.com). Must be

associated to the same domain as stated at the top of the Policy Configuration window

If a message arrives for a recipient listed on the recipient shield list, identify what action you would

like performed on each message:

 Accept and silently discard the message - an accept message is sent back to the sending

MTA but a bounce message is not sent to the sending MTA

 Deny delivery - no accept message is sent to the sending MTA but a bounce message is

sent back to the sending MTA explaining that the message was not delivered – restricted

recipient mailbox

 Do Nothing - no accept message is sent to the sending MTA and no bounce message is sent

to the sending MTA

6.10. Enforced TLS

6.10.1. What is TLS? (Transport Layer Security)

The Transport Layer Security (TLS) system allows client/server applications to communicate across

a network to prevent the possibility of message corruption or forgery. TLS provides confidentiality by

encrypting segments of network connections to provide security and data integrity.

This is accomplished by encrypting messages from mail server to mail server. This encryption

makes it more difficult for hackers to intercept and read messages.

6.10.2. What is Enforced TLS?

Enforced TLS is a new policy option that forces inbound or outbound mail to be delivered via TLS for

specified domains. Delivery will be denied if TLS cannot be negotiated for a specified domain.

The ability to turn on and send a notification to both the sender and recipient of the message

informing them of the non-delivery is available.

Note: TLS requires a conversation between our mail transfer agent and the customers to be

successful. The customer must have TLS turned on to accommodate this transaction. Refer to your

MTA software manual on “How to enable/turn-on TLS” to ensure TLS is implemented in your system

prior to setting up your domain lists.

TLS Encryption is currently supported by the Email Protection Service. Without enabling Enforced

TLS Policy, the TLS Encryption will work as follows:

 If a TLS connection can be negotiated between the sender and the recipient MTAs, then the

system delivers the email over TLS

 If a TLS connection CANNOT be established between the sender or the recipient MTA, then the

mail transfer agent delivers, via SMTP, without encryption

6.10.3. Enabling Enforced TLS

Enabling Enforced TLS will ensure that the connection from the specified domains(s) in your policy

must be made via a TLS connection.

When TLS Policy is enabled, the TLS Encryption will work as follows:

1 2 ... 36 37 38 39 40 41 42 43 44 45 46 ... 80 81

No comments

McAfee OFFICE 3.1 User Manual Page 41