HP Email Firewall Appliance manual 41

SMTP Security 41

SMTP Security	The 3Com Email Firewall offers a simple mechanism for encrypting mail
	delivery via SSL (Secure Sockets Layer) and TLS (Transport Layer Security)
	support. A flexible policy can be implemented to allow other servers and
	clients to establish encrypted sessions with the 3Com Email Firewall to
	send and receive mail.
	The following types of traffic can be encrypted:
	■ Server to Server — Used to create an email VPN (Virtual Private
	Network) and protect company email over the Internet.
	■ Client to Server — Many email clients support TLS for sending and
	receiving mail. This allows email messages to be sent confidentiality
	from desktop to desktop but without the difficulties of implementing
	other encryption schemes.
	Encryption can be enforced between particular systems, such as setting
	up an email VPN between two 3Com Email Firewalls at remote sites.
	Encryption can also be set as optional so that users who are concerned
	about the confidentiality of their messages on the internal network can
	specify encryption in their mail client when it communicates with the
	3Com Email Firewall.
	The 3Com Email Firewall supports the use of certificates to initiate the
	negotiation of encryption keys. The 3Com Email Firewall can generate its
	own site certificates and it can also import Certificate Authority (CA)
	signed certificates.
	See “SSL Certificates” on page 94 for more information on installing
	certificates.