Chapter 10 Encryption Service

Transcription

1 Chapter 10 Encryption Service The Encryption Service feature works in tandem with Dell SonicWALL Security as a Software-as-a-Service (SaaS), which provides secure data mail delivery solutions. The mail messages that have Encrypt as part of the Subject will be encrypted and securely delivered to the recipient. This chapter contains the following sections: How Encryption Service Works on page 165 Enabling the Secure Mail Policy on page 166 Licensing Secure Mail Encryption Service on page 167 Configuring Encryption Service on page 168 Users in Encryption Service on page 169 How Encryption Service Works The Encryption Service works with both outbound and inbound messages. The Encryption Service must first be licensed through the System > License Management page. The administrator then will enable the default policy filter to send secure mail via the Encryption Service. After adding the necessary sender domains and public IP addresses, the administrator can then add users that are licensed to use Encryption Service. Outbound Messages Outbound messages flow in the following order: 1. A user in an organization sends a secure mail message. It is sent through the exchange mail server of the organization. 2. The message is then processed by the Dell SonicWALL Security appliance. The Security appliance will be able to recognize the message as Secure Mail based on the auto sender domains and public IP address specified in the Encryption Service page of Dell SonicWALL Security. 3. The message is sent from the Dell SonicWALL Security appliance via TLS to the Encryption Service Server. The Encryption Service Server will be able to determine this is a secure message based on the auto sender domains and public IP address specified in the Encryption Service page. 4. The Encryption Service Server sends a notification to the recipient. This also includes a URL to the secure message. Encryption Service 165

2 5. The Secure recipient clicks the URL and is required to log in to the Encryption Service Server to retrieve the message. Enabling the Secure Mail Policy In order to begin using the Secure Mail Service, you must first enable the default outbound policy to Send Secure Mail. Follow the procedures listed below to successfully enable the Secure Mail policy. To enable Outbound Secure Mail: 1. Navigate to the Policy & Compliance > Filters page of your Security appliance. 2. Click the Outbound tab. 3. Locate the Send Secure Mail: Deliver Message via Encryption Service filter, and click the Edit button. The Edit Filter screen displays. 166 Dell SonicWALL Security Administrator Guide

3 4. Click the Enable this filter checkbox. You can either keep the default settings or edit the settings for this filter. When finished, click Save This Filter. Licensing Secure Mail Encryption Service Because Secure Mail Encryption is a subscription service, you must purchase a license by logging in to your MySonicWALL account or by contacting your Dell SonicWALL reseller. Note The Encryption Service subscription license must match the User (Node) count. If not, you will receive an error message. To license the Secure Encryption Service, follow the procedures listed: 1. Navigate to the System > Licence Management page of your Security appliance, and click the Activate link for Encryption Service. 2. Enter the information required on the Encryption Service Subscription page: Encryption Service Activation Keys Enter the Encryption Service Activation Key(s) provided upon purchase on MySonicWALL or by your Dell SonicWALL reseller. For multiple activation keys, separate each key by using a comma. Encryption Service 167

4 Data Center nearest to you Select your respective Data Center from the drop down list. Company Name Enter the company name associated with the Encryption Service. Admin Address Enter the address of the designated Secure Mail administrator. This administrator is responsible for adding, editing, or deleting Secure Mail users. Note that you will be able to add multiple administrators in another screen. Auto Sender Domains Enter the list of domains to be Secure Mail users will be sending messages from, for example dell.com. Messages from the listed domains are auto-provisioned as Secure Mail senders. For multiple domains, separate each domain by using a comma. 3. Click Submit. Configuring Encryption Service Once you have successfully enabled the Secure Mail outbound policy and licensed the Secure Mail Encryption Service through the License Management screen, you can begin configuring settings for the service. 1. Navigate to the Encryption Service page on your Dell SonicWALL Security appliance. 2. Enter the Company Name, if needed. The Company Name field auto-populates with the name specified in Licensing Secure Mail Encryption Service on page Enter the Auto Sender Domains in the space provided, if needed. The Auto Sender Domains field auto-populates with the domains specified in Licensing Secure Mail Encryption Service on page Enter the list of public IP addresses to be Whitelisted from the Secure Mail Encryption Service in the field provided. The addresses listed are responsible for delivering mail outside of your organization. 168 Dell SonicWALL Security Administrator Guide

5 5. Select the checkbox to enable using TLS to deliver secure mail messages. If you decide to enable this feature, verify that your inbound path has TLS enabled, located in the Network Architecture > Server Configuration page. 6. Click Apply Changes when finished. Users in Encryption Service Dell SonicWALL recommends that the administrator should add users to the Encryption Service. If any mail messages are sent to the Secure Mail Server from a sender account not already created, Security will automatically create a sender account. Adding a New User To add a new user to the Secure Mail Encryption Service, follow the directions listed below: 1. Navigate to the Encryption Service page on the Dell SonicWALL Security appliance. 2. Scroll down to the User View Setup section, and click the Add button. 3. Enter the following fields: Address Enter the address for the user. First Name Enter the first name of the user. Last Name Enter the last name of the user. Role Select the role of the user from the drop down list. The available options are User or Admin. 4. Click Add to finish. The new user displays in the User View Setup list. Note You may need to click the Refresh button to synchronize user accounts and settings from the Secure Mail Encryption server if it does not automatically display. Encryption Service 169

6 Adding an Existing User If you have LDAP configured, you can add existing users to the Secure Mail Encryption Service. To add existing users, follow the directions below: 1. Navigate to the Encryption Service page on the Dell SonicWALL Security appliance. 2. Click the Add Existing Users button. 3. A list of users displays based on what you have configured for your LDAP directory. You can search for an existing user by address in the search field. 4. Select the user you wish to add, then click the Add button. The new user displays in the User View Setup list. Importing Users You can import a.txt list of users to be added to the Secure Mail Encryption Service. The.txt file must use a <TAB> delimiter between the primary address, first name, last name, and role of each user. You must use <CR> to separate entries. See the following example: primary_ @company.com<tab>firstname<tab>lastname<tab>admin<cr> primary_ @company.com<tab>firstname<tab>lastname<tab>user<cr> Note that the Primary address is mandatory, while the other fields are optional. To import users, follow the directions below: 1. Navigate to the Encryption Service page on the Dell SonicWALL Security appliance. 2. Click the Import Users button. 3. Click the Choose File to select the file containing the list of users. 4. Click Import. Exporting Users You can export the list of Secure Mail Encryption Service users by performing the following steps: 1. Navigate to the Encryption Service page on the Dell SonicWALL Security appliance. 2. Click the Export Users button. The list exports a.txt file and saves to your local system. Co-Branding and Reporting The Secure Mail Encryption Service allows you the option to customize features on the management console. You can also customize reports from the Secure Mail Encryption Service. The following are Co-Branding and Reporting settings you can configure through the Secure Encryption server portal: Company and User Type Properties on page Dell SonicWALL Security Administrator Guide

7 Cobrand Management Console on page 171 Message Tracking Report on page 172 User Logon Report on page 173 User Reports by Message Size, Volume, Date, and Summary on page 173 Total View Report on page 174 Form Tracking Report on page 175 Company and User Type Properties The Company Configuration > Company Information page allows you to edit your organization s information. The following fields are editable: Company Name This is the Company Name specified in the Dell SonicWALL Security System > License Management page upon licensing the Encryption Service. Address This is the Admin Address specified in the Dell SonicWALL Security System > License Management page upon licensing the Encryption Service. The Company Configuration > Company Properties page allows you to edit the Automatically Create Sender Accounts setting. Select one of the following options: Off, On, or Off Send Plain Text. Cobrand Management Console The Cobrand Management Console page allows you to edit your organization s existing cobrand settings or create a new cobrand. Perform the following steps: 1. Under the Cobrand Information section, select (Create a New Cobrand) from the drop down list to create a new cobrand. To edit an existing cobrand, select it from the drop down list. 2. Specify the following cobrand settings: Company Name A descriptive name that is associated with the cobrand and will be displayed in the drop down list for editing. Default URL The URL where users are directed when they click the cobrand image. Note that you must include the protocol/scheme ( ) in the URL. Cobrand Color The web color used for the login panel, top and bottom ribbon bars (menu and status bars) for Webpages on the server portal. The web color is identified with 6-character hexadecimal number, commonly used with HTML, CSS, and other applications. You can also identify the cobrand color using the Color Selector box that displays upon editing the hexadecimal number. Encryption Service 171

8 Top HTML (Optional) Allows you to specify a block of HTML coding to be used in place of the cobrand image in the page header. The HTML can contain text, links, graphics, and columns, or follow an HTML style sheet. Note that if the Top HTML field contains boilerplate code, do not delete it unless you intend to replace it with customized HTML. Loaded Image (Optional) Displays the database server path and internal filename for the uploaded cobrand image. Click the Clear Image button to immediately remove the image from the cobrand. Allow users to stay signed in Select the checkbox to enable, and then specify the amount of time for users to stay signed in. 3. Filter Messages Allows you to limit the messages that users see in their mailbox to messages related to the cobranded company. If enabled, the Secure Mail recipient s mailbox only displays messages from or to the cobranded company, as long as the recipient accesses the server using the notification link. 4. Select Image Select a cobrand image, such as an organization or company logo, that displays at the top of all the server portal pages. This is an efficient and easy way to create professional branding without requiring the use of HTML. Click the Choose File button to select the image you want assigned to the cobrand. 5. Click the Save button to save your changes and apply the cobrand to your organization. Message Tracking Report The Message Tracking Report enables you to search through addresses and subject lines of Secure Mail messages (message bodies are not included in the search). To generate a Message Tracking Report: 1. Click the Message Tracking Report link from the Secure Mail Encryption Service portal. 2. Enter the search parameters into the Address or Pattern, Start Date, and End Date fields. The To/From drop down list specifies whether to search for the parameters in the To or From field of messages. 172 Dell SonicWALL Security Administrator Guide

9 3. Click Generate Report link. The report displays all messages matching the specified criteria. User Logon Report The User Logon Report generates reports about user log on activity. You can search activity based on specific users, defined timeframes, and also how the user logged into the service. To generate a User Logon Report: 1. Click the User Logon Report link from the Secure Mail Encryption Service portal. 2. Enter the search parameters into the Address or Pattern, Start Date, and End Date fields. The Logon Source drop down list specifies which service the user accessed. The default is All, which includes every service the user may have used. 3. Click the Generate Report link. The report generates all log on events for the user, based on the specified criteria. User Reports by Message Size, Volume, Date, and Summary There are several types of user reports, each of which can be filtered for sent or received messages (or both) for each user. These reports are summaries of user statistics, differing from the more detailed reports such as the Message Tracking Report. The following types of reports can be generated: Report Type Message Size Statistics Description Shows the size of messages sent and received by each user Encryption Service 173

10 Report Type Message Date Statistics Message Volume Statistics Message Summary Data Description Shows when messages have been sent by the users (first and last messages for each user) Shows the number of messages sent/received by the user Shows the fields of the other statistics reports on one screen. To access any User Report: 1. Click the User Reports by Message Size, Volume, Date, and Summary link from the Secure Mail Encryption Service portal. 2. Click on the Report to view the information. Total View Report The Total View Report provides complete tracking of all messages sent through the Secure Mail system. The report contains a record of every messages sent along with the tracking data for the message (and attachments) in a single report. This report is provided as a CSV file. The Total View Report includes the following fields: Message ID Date From To Subject Notification Timestamp Message Status (Opened / Not Opened) Message Open Time Attachment Name 174 Dell SonicWALL Security Administrator Guide

11 Attachment (Accessed /Not Accessed) Attachment Open Time Note Each message and every attachment within a message is reported separately. For example, a message to two recipients with two attachments will generate four rows of data: Two for each recipient, with one attachment listed on each line per recipient. To generate a Total View Report: 1. Click the Total View Report link from the Secure Mail Encryption Service portal. 2. Specify the Date range for the report. For more efficiency, you can click one of the quick links: Last day, 30 days, or 60 days. This will automatically select the specified time period. 3. Click the Generate Report link. 4. Click the Download Report link to save the CSV file to your local system. Click Select Different Dates to return to the previous screen and conduct a new search with different dates. Form Tracking Report The Form Tracking Report shows all eforms that have been sent through the Secure Mail server, as well as the tracking information associated with the eform. This report is provided as a CSV file. To generate a Form Tracking Report: 1. Click the Form Tracking Report link from the Secure Mail Encryption Service portal. 2. Specify the Date range for the report. For more efficiency, you can click Generate Report for Last Month to automatically calculate the last month. 3. Click the Generate Report link. Encryption Service 175

12 4. Click the Download Report link to save the CSV file to your local system. Click Select Different Dates to return to the previous screen and conduct a new search with different dates. 176 Dell SonicWALL Security Administrator Guide