SSL decryption for email

[Farzana]

Hi,

Do we need to enable SSL decryption simply for reading SMTP messages?

We have created a profile under Objects and attached it to incoming mail policy but attachments with extension dll, bat, exe file all get through and see nothing in Wildfire submissions.

Thanks in advance.

[santonic]

Ignore this then 🙂

[Remo]

Actually the decryption of SMTPs works the same way as the normal SSL/TLS Decryption. The difference is that you need to set up inbound Inspection (because otherwise the external mailservers will not trust your certificate) with the certificate which you use on your mailserver. Outgoing E-Mails can be decrypted with the normal forward decryption, there you only need to install your decryption root cert on your mailserver.