topic Re: SSL decryption for email in General Topics

SSL decryption for email

Farzana — Fri, 19 May 2017 03:28:59 GMT

Hi,

Do we need to enable SSL decryption simply for reading SMTP messages?

We have created a profile under Objects and attached it to incoming mail policy but attachments with extension dll, bat, exe file all get through and see nothing in Wildfire submissions.

Thanks in advance.

Re: SSL decryption for email

santonic — Fri, 19 May 2017 07:36:51 GMT

Ignore this then 🙂

Re: SSL decryption for email

Remo — Fri, 19 May 2017 07:33:51 GMT

Actually the decryption of SMTPs works the same way as the normal SSL/TLS Decryption. The difference is that you need to set up inbound Inspection (because otherwise the external mailservers will not trust your certificate) with the certificate which you use on your mailserver. Outgoing E-Mails can be decrypted with the normal forward decryption, there you only need to install your decryption root cert on your mailserver.