There may be times when we're sending an email
and based on the categorization of that email
or certain attributes of that email,
we want the email security appliance to take it, encrypt
it, and protect it.
In this video, I'd like to introduce you
to those capabilities on the email security appliance.
So here on the email security appliance,
the first step we would take is go to Security Services,
and then go down to Cisco Ironport Email Encryption
right here.
If it's not enabled, you'd go ahead and enable it
by clicking Edit Settings, enable it,
and then we would create an email encryption profile simply WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and then we would create an email encryption profile simply
by clicking on Add, specifying a profile name.
The key service type is Cisco Registered Envelope Service,
there's the service URL, and then regarding
envelope settings, we have high, medium, and low specifying
what can and can't be done with those and additional options
regarding what can happen with that email.
So we click on Submit, and now I've
got this profile called Test.
Now to make this actually work, you
have to register your ESA with Cisco, so they're expecting you
and can make it all work. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and can make it all work.
So the provision status says not provisioned.
If we click on commit changes, and if we
had registered with Cisco for their service,
then these encryption profiles could then be used.
Now let's imagine for a moment that this ESA was all
registered and these were available.
How do we then use these email encryption profiles?
What we would do is go to Mail Policies
and specify Outgoing Content Filters,
and we would create an outgoing content filter.
This is basically specifying what to look for.
So in this high security encrypt content filter that I made, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So in this high security encrypt content filter that I made,
we can specify what to look for, and then what to do.
So basically looking for a subject header
or some other attribute.
In fact, if we click on the condition,
there's just a laundry list of what we can match on.
So if we say we're looking for super secret in the text
as a condition, and I'll click on OK,
we would then specify the action.
And so under the action, I have encrypt on delivery,
which is one of many actions.
But for the benefit of encryption,
this would trigger the encryption
based on that text being found.
So we'll click on OK there. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we'll click on OK there.
So once we have this content filter,
then if we get email Mail Policies,
and we go to Outgoing Mail Policies, it's at this point,
we can apply that content filter that will then,
based on the content of the message,
apply the encryption before sending that message out.
So that's how you would apply it.
So it's basically a three step process.
Security services first, then going to Cisco Ironport Email
Encryption, make sure you have at least one profile to use.
Under Mail Policies, we go to Outgoing Content Filters,
create the content filter, which would WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
create the content filter, which would
include the conditions to look for,
and then the action of encrypting.
And then going back to Mail Policies, and our Outgoing Mail
Policy, including it here as part of our content filters.
So in this video, we've identified
that if we have our ESA that's registered with Cisco,
we can take advantage of the encryption services
by looking for certain conditions in an email message,
and then based on that, encrypting that email
before sending it on its way.
So thanks for joining me in this video.
I'll see you in the next one.
Meanwhile, I hope this has been informative for you,
and I'd like to thank you for viewing. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and I'd like to thank you for viewing.