McAfee MAP-3300-SWG Product Guide - Page 82

Overview of Email features Email Configuration TLS Connections Use this area to define hosts that use TLS encryption. Table 59 Option definitions Option Source (appliance is acting as server) Definition Displays the details, such as: • 192.168.200.254/24 • 192.168.200.254/255.255.255.0 • server1.example.net • *.example.net Use TLS Always - rejects email from participating organizations if their communication does not try to start encryption. Never - configure connections to the source server to never use TLS encryption. When available - if available, the connection uses TLS encryption. Authenticate Client Server Certificate Specifies whether the other device must also authenticate. Selects the certificate to use for this TLS Connection. The name is one of the certificate IDs from the Certificate Management section . Source (appliance is acting as client) Use TLS Authenticate Self Client Certificate Displays the details, such as: • 192.168.200.254/24 • 192.168.200.254/255.255.255.0 • server1.example.net • *.example.net Always - rejects email from participating organizations if their communication does not try to start encryption. Never - configure connections to the source server to never use TLS encryption. When available - if available, the connection uses TLS encryption. Specifies whether the client must verify itself to the recipient before sending email. The client then needs its own certificate. Selects the certificate to use for this TLS Connection. The name is one of the certificate IDs from the Certificate Management section. Certificate management Use this area to manage TLS digital certificates that are needed for the secure transfer of email. Certificates typically have a lifetime of several months or years, so they do not need to be managed often. 82 McAfee Email and Web Security Appliances 5.6.0 Product Guide