topic Re: SMTP Inbound Decryption in General Topics

SMTP Inbound Decryption

Han.Valk — Sat, 15 Jun 2019 20:13:02 GMT

I am trying to setup inbound decryption for SMTP (TLS) using the default Decryption Profile.

What destination IP address do I use in the Decryption Policy: public pre-NAT or private post-NAT?

Regards,

Han.

Re: SMTP Inbound Decryption

Remo — Sat, 15 Jun 2019 20:17:26 GMT

--> the public per-NAT IP

Re: SMTP Inbound Decryption

Remo — Sat, 15 Jun 2019 21:26:11 GMT

PS: right now I cannot find it anymore but I remember that the firewall is only able to send back an SMTP 541 error in forward decryption mode and not with knbound decryption ...