ePrism User Guide - EdgeWave

Encryption and Certificates
• Enable TLS version 1 — Enable TLS version 1 protocol. This is the default setting.
• Character set encoding — Select the type of character encoding used for HTML data.
Encrypted Mail Delivery
ePrism offers a simple mechanism for encrypting mail delivery via SSL/TLS support. A flexible
policy can be implemented to allow other servers and clients to establish encrypted sessions with
ePrism to send and receive mail.
The following types of traffic can be encrypted:
• Server to Server — Used to create an email VPN (Virtual Private Network) and protect
company email over the Internet.
• Client to Server — Many email clients, such as Outlook, support TLS for sending and
receiving mail. This allows email messages to be sent with complete confidentiality from
desktop to desktop, but without the difficulties of implementing other encryption schemes.
Encryption can be enforced between particular systems, such as setting up an email VPN between
two ePrism Email Security Appliances at remote sites. Encryption can also be set as optional so
that users who are concerned about the confidentiality of their messages on the internal network
can specify encryption in their mail client when it communicates with ePrism.
ePrism supports the use of certificates to initiate the negotiation of encryption keys.
ePrism can generate its own site certificates, and can also import Certificate Authority (CA) signed
certificates.
91