Offer Specifications Dell Management Services (EMS): Policy Based Encryption-E

Transcription

1 Dell Management Services (EMS): Plicy Based Encryptin-E Offer Specificatins Dell Management Services (EMS): Plicy Based Encryptin-E Service Overview The Plicy Based Encryptin-E service ( PBE-E r the Service(s) ), prvides the ability fr rganizatins t send sensitive cntent safely and in cmpliance with regulatins by autmatically encrypting specific s based n a Custmer s security plicy that is, a set f rules designed t analyze all utbund , and encrypt any that matches the pre-defined cnditins. In rder t receive PBE- E, the Custmer must subscribe t the fllwing services included in the ffer: Cntent Cntrl Service The Cntent Cntrl Service enables the Custmer t cnfigure, in line with its acceptable cmputer use plicy r equivalent, a rule-based filtering strategy fr filtering incming and utging . A rule is an instructin set up by the Custmer that identifies specified cntent r a particular frmat f message/attachment and fllws the curse f actin prescribed fr that cntent r frmat. Plicy Based Encryptin uses Cntent Cntrl rules t identify which needs t be encrypted. Bundary Encryptin Service The Bundary Encryptin Service ( BE ) prvides encrypted cmmunicatin channels that enable the Custmer t frm a secure private netwrk (SPEN) with nminated partner rganizatins. This cnfiguratin is knwn as enfrced encryptin. The Custmer can als receive encrypted s sent frm rganizatins that have transprt layer security (TLS)-capable mail servers, but n enfrced encryptin with the Custmer. This cnfiguratin is knwn as pprtunistic encryptin. exchanges between the Dell EMS Security Service, (pwered by Symantec.Clud frmerly MessageLabs), and Custmer s Secure Cnnectin mail servers shall be secured by TLS encryptin. Whether nward ruting will be perfrmed in unencrypted r encrypted frmat will depend n (i) Custmer specified TLS enfrcements and (ii) destinatin server capability t receive s ver Opprtunistic TLS. If the Custmer is using BE in cnjunctin with the PBE Service, the recmmended best practice is fr the Custmer t implement the Secure Cnnectin mdel f BE n all its mail servers. CUSTOMER ACKNOWLEDGES AND ACCEPTS THAT IF THE SECURE CONNECTION MODEL IS NOT APPLIED TO A PARTICULAR MAIL SERVER, CUSTOMER S INBOUND AND OUTBOUND S ORIGINATING FROM OR RECEIVED BY THAT MAIL SERVER SHALL NOT BE SECURED BY TLS ENCRYPTION. ACCORDINGLY, THE CUSTOMER 1

2 Dell Management Services (EMS): Plicy Based Encryptin-E ACKNOWLEDGES AND ACCEPTS THAT IT SHOULD NOT SEND OR RECEIVE SENSITIVE DATA VIA SUCH MAIL SERVERS AND DOES SO ENTIRELY AT ITS OWN RISK. Plicy Based Encryptin-E prvides the fllwing functinality: Ability t use the Cntent Cntrl Service t define utbund encryptin plicies fr s. Delivery f encrypted s t the external recipient s inbx. Recipient access t encrypted via a secure web prtal. Recipient access t the secure web prtal t respnd t in an encrypted frmat. Plicy Based Encryptin-E prvides the fllwing features: Push Pull PBE allws the Custmer t send an encrypted directly int a recipient s inbx withut the need t dwnlad sftware. The PBE Push variant f the PBE-E Service sends the recipient an ntificatin with the riginal saved within it as an encrypted attachment. Fllwing initial registratin nline, the recipient is able t view the decrypted ffline using a Java applicatin n their desktp. An recipient retrieves via a secure web based prtal. The custmer can cnfigure the encryptin methd t either Push r Pull. The default encryptin methd fr the Plicy Based Encryptin-E ptin is Pull but can be changed t Push by the recipient by dwnlading the Secure Reader functinality within the recipient s secure web prtal. The PBE Pull variant f the Service sends the recipient an ntificatin. The recipient is able t view the decrypted nline via a secure SSL sessin in their brwser when they lg n t a secure web prtal and enter their passwrd. PBE als enables a recipient t enter a secure web prtal and respnd t an encrypted in an encrypted frmat. Branded Prtal The Custmer may brand the prtal that recipients use t read their encrypted s (fr example t include the Custmer s lg). Secure reply and cmpse The recipient f an encrypted may als send a brand new t any f the Custmer s PBE Users. Nte: A third party Outlk Plug-In is available which adds an encrypt icn t the recipient s Outlk tlbar. The Custmer acknwledges and agrees that Dell is nt respnsible fr such third party sftware. 2

3 Dell Management Services (EMS): Plicy Based Encryptin-E Plicy Based Encryptin-E prvides the fllwing additinal capabilities: A recipient can chse the language f the recipient s secure web prtal and ntificatin s frm a list f supprted languages. Recipients can lg int their accunts withut pening a specific message, even if they have n active messages. Recipients can view all f their previus messages (that have nt been permanently deleted) in their inbx, including messages they have sent. If using the Pull methd, a message cmpsed in the web prtal may have multiple recipients prvided that such recipients share a dmain frm which the User has previusly received a secure . If using the Push methd, recipients can reply t any address under the same dmain. Initial ntificatins t new Users are available in mre than ne language. It is pssible t use a third party certificate/key t encrypt an utbund using the recipient s public key and decrypt an inbund using the recipient s private key, rather than the default certificates/keys generated by the PBE Service. Service Parameters: Plicy Based Encryptin E The number f secure s the Custmer may send in any mnth using PBE-E may nt exceed fur hundred and eighty (480) times the Registered Usage fr PBE. When sending t multiple recipients, each unique address will be cunted as a secure . In the event that the Custmer exceeds the number f permitted secure s in any mnth, Dell shall increase the Registered Usage accrdingly. s ruted thrugh PBE E are limited t a maximum size f fifty megabytes (50 MB) per pst-encryptin. PBE ONLY OPERATES WHEN USED IN CONJUNCTION WITH THE BOUNDARY ENCRYPTION AND CONTENT CONTROL SERVICES. THE CONTENT CONTROL SERVICE IS AVAILABLE FOR CUSTOMERS WHO PURCHASE PBE AS A STANDALONE SERVICE OR FOR CUSTOMERS THAT PURCHASE PBE AS AN ADD ON TO THE DELL EMS SECURITY SERVICE. EACH INDIVIDUAL PBE USER MUST BE AN CONTENT CONTROL USER. Supprt Prcedures Prvisin f Services: The Custmer will receive a welcme with a request fr prvisining infrmatin. Once the infrmatin has been received, it will be used t prvisin the Custmer nt the Services. As part f the prvisining prcess, the Custmer will receive n-barding infrmatin and a training sessin t review the applicatin s functinalities. 3

4 Dell Management Services (EMS): Plicy Based Encryptin-E Custmer Respnsibilities Prvide all necessary infrmatin, and authrizatins as required and ensuring that a dedicated technical resurce with administrative rights is available fr prvisining f service including editing f Custmer s public Mail Exchanger (MX) recrds within the Dmain Name System (DNS). Setting and managing security plicies. The Custmer is respnsible fr implementing the cnfiguratin f PBE accrding t the Custmer s needs. The Custmer cnfigures PBE via ClientNet by selecting the ptins available under the Cntent Cntrl Service. Custmer needs t have a X.590V3 digital certificate issued by a recgnized public Certificate Authrity such as Verisign fr establishing the TLS cnnectin between the custmer and the Dell EMS Security Service. Dell emphasizes that the cnfiguratin f PBE is entirely under the cntrl f the Custmer and that the accuracy f such cnfiguratin will determine the accuracy f PBE. Dell can therefre accept n liability fr any damage r lss resulting directly r indirectly frm any failure f PBE t fulfill the Custmer s encryptin bligatins. Depending n the deplyment ptin chsen, Custmer may be required t execute a disclsure agreement related t exprt cmpliance. Data Privacy Acknwledgement Custmer acknwledges that infrmatin prcessed in the curse f perfrming the Services may cntain persnally identifiable infrmatin f individuals and assciated metadata and that the prcessing f such infrmatin may therefre invlve the prcessing f persnal data. With respect t any and all data, including, but nt limited t, third party data, persnally identifiable infrmatin and assciated metadata btained by Dell and its licensr Symantec pursuant t Custmer s use f the Services (cllectively, the Data ), Custmer shall take all necessary measures t ensure that it, and all its emplyees, are aware that their persnal data may be prcessed as part f the Services and that they have given their cnsent t such prcessing as well as cmplied with their respnsibilities as data cntrller r data subjects, as applicable, in accrdance with applicable privacy laws and/r regulatins ( Privacy Laws ). Custmer understands and agrees that Dell has n cntrl r influence ver the cntent f the Data prcessed by Dell and its licensr Symantec and that Dell perfrms the Services n behalf f Custmer. Ntwithstanding the generality f the freging bligatin, as required by the Privacy Laws, Custmer shall use all reasnable effrts t ensure that it infrms individuals wh use any cmmunicatins system cvered by the Services that cmmunicatins transmitted thrugh such system may be intercepted. Custmer Agreement Custmer s purchase and use f this Service is gverned by and subject t the fllwing terms and cnditins: 1) the Dell Clud Slutins Agreement (r Custmer s separate-signed services agreement); 2) this Specificatin Sheet; and 3) an Order Frm fr this Service. Cllectively, these dcuments cmprise Custmer s Dell Management Services Plicy Based Encryptin-E Service Agreement r the Agreement. 4

5 Dell Management Services (EMS): Plicy Based Encryptin-E The Dell Clud Slutins Agreement The Dell Clud Slutins Agreement is available via and in hardcpy upn request. The parties acknwledge having read and agree t be bund by such terms. In lieu f the Dell Clud Slutins Agreement, Custmers may purchase these Services under their separate-signed services agreement with Dell, but nly t the extent such agreement explicitly authrizes Custmer t purchase these Services, as identified n the Order Frm r ther mutually-agreed upn frm f invice, rder acknwledgement, r purchase rder. Imprtant Supplemental Terms & Cnditins These supplemental prvisins als apply t Custmer s use f this Service. If there is a cnflict between the terms f this Specificatin Sheet and any f the ther dcuments that cmprise the Agreement ( Cnflicting Terms ), the terms f this Specificatin Sheet ( Prevailing Terms ) will take precedence ver the Cnflicting Terms slely with respect t Custmer s use f this Service. Mrever, the Prevailing Terms shall be cnstrued as narrwly as pssible t reslve the cnflict while preserving as much f the Agreement as pssible, including but nt limited t preserving nn-cnflicting prvisins cntained within the same paragraph, sectin r sub-sectin as the Cnflicting Terms. 1. If, at any time, cntinued prvisin f the Services wuld cmprmise the security f the Services, due t (withut limitatin) hacking attempts, denial f service attacks, mail bmbs, r ther malicius activities either directed at r riginating frm Custmer s dmains, Custmer agrees that Dell r its licensrs, sftware suppliers, and delivery partners may suspend Services t Custmer. In such an event, Dell will prmptly infrm Custmer and will wrk with Custmer t reslve such issues and reinstate the Services. 2. Dell, thrugh its licensr Symantec, may update the Service at any time in rder t maintain the effectiveness f the Service. 3. Unless therwise agreed t in writing with Dell, the Services are prvided t Custmer fr its internal use nly, and Custmer shall nt resell the Services t any third party. 4. Custmer agrees t prvide and maintain a list f all addresses registered t receive the Services (the Validatin List ). It is Custmer s respnsibility t verify the Validatin List prir t the Services being made available and thrughut the term f the Agreement. Custmer acknwledges that inbund sent t addresses nt specified r incrrectly entered in the Validatin List will be blcked autmatically. Custmer agrees that neither Dell nr Dell s suppliers will be liable fr damages arising ut f r in cnnectin with t the nn-delivery f resulting frm the Custmer s errrs in r missins f addresses. 5. Custmer will prvide Dell with all technical data and ther infrmatin Dell r its licensr Symantec may reasnably request frm time t time t allw Dell t supply the Services t Custmer. All infrmatin Custmer supplies will be cmplete, accurate, and given in gd faith. 6. Custmer shall nt allw its systems t: (i) act as an Open Relay r Open Prxy; (ii) send r receive Vlume Mail instigated by Custmer (unless the Custmer has purchased the Vlume Mail Service, in which case the Custmer may send and receive Vlume Mail strictly in accrdance with the terms and 5

6 Dell Management Services (EMS): Plicy Based Encryptin-E cnditins applicable t the Vlume Mail Service); r (iii) send spam. Dell reserves the right at any time t verify Custmer s cmpliance with this sectin. Custmer agrees t indemnify Dell and its suppliers against, and hld Dell and its suppliers harmless frm, any and all claims, actins, lsses, csts, and expenses Dell and its suppliers may incur as a result f Custmer s breach f this sectin. 7. Custmer acknwledges that infrmatin sent t and frm Custmer will pass thrugh the Service. Accrdingly, Custmer agrees t use the Service fr legitimate and lawful business purpses nly. 8. IN NO EVENT WILL EITHER PARTY OR ITS SUPPLIERS BE LIABLE, WHETHER IN CONTRACT, TORT OR OTHERWISE, FOR ANY INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY OR INDIRECT DAMAGES, LOSSES, EXPENSES OR COSTS OF ANY KIND, COSTS OF PROCUREMENT OF SUBSTITUTE OR REPLACEMENT GOODS OR SERVICES, LOST BUSINESS PROFITS OR REVENUE OR LOST OR CORRUPTED DATA ARISING OUT OF THIS AGREEMENT OR USE OF THE SERVICES OR DELIVERABLES, EVEN IF ADVISED OF THE POSSIBILITY. NOTHING IN THIS AGREEMENT WILL LIMIT EITHER PARTY S LIABILITY FOR ANY DAMAGE THAT CANNOT BE EXCLUDED BY LAW. EXCEPT FOR BREACHES OF THIS AGREEMENT RELATING TO INDEMNITY OBLIGATIONS OR ACTS OF FRAUD DETERMINED BY A COURT OF FINAL JURISDICTION, DELL S AND ITS SUPPLIERS TOTAL LIABILITY UNDER THIS AGREEMENT WILL BE LIMITED TO THE FEES PAID BY CUSTOMER FOR THE SERVICES GIVING RISE TO THE LIABILITY. 9. The intellectual prperty rights in the Services and any hardware r sftware used in cnnectin with the Services is and will at all times remain Dell s prperty r that f Dell s licensrs. 10. Custmer agrees t cmply with all relevant laws including, withut limitatin, the U.S. Exprt Administratin Regulatins (EAR) and the laws f any cuntry frm which the Services are exprted r re-exprted. 11. Custmer agrees t indemnify Dell and its suppliers against, and hld Dell and its suppliers harmless frm, any and all claims, actins, lsses, csts, and expenses Dell and its suppliers may incur as a result f: (i) any third party claim in relatin t infrmatin passing thrugh the Services t r frm the Custmer; (ii) any third party claim in relatin t the interceptin f cmmunicatins by the Services; and/r (iii) any third party claim in relatin t the Custmer s use f the Services in breach f privacy laws. 12. The Custmer acknwledges that: (a) Dell is the reseller f the Services described herein and the sublicensr f wrldwide intellectual prperty rights that are wned by third-party licensrs; and (b) the acknwledgements, bligatins, restrictins, and undertakings given r accepted by the Custmer are fr the benefit f Dell and its licensrs, and such licensrs are third-party beneficiaries under this Agreement and may enfrce thse prvisins directly against the Custmer r thrugh Dell. Fr mre infrmatin abut any f ur service fferings, please cntact yur Dell representative r visit dell.cm/services. Availability varies by cuntry. T learn mre, custmers and Dell Channel Partners shuld cntact yur sales representative fr mre infrmatin. 6

7 Dell Management Services (EMS): Plicy Based Encryptin-E 2012 Dell Inc. All rights reserved. Trademarks and trade names may be used in this dcument t refer t either the entities claiming the marks and names r their prducts. Specificatins are crrect at date f publicatin but are subject t availability r change at any time, withut ntice. Dell and its affiliates are nt respnsible fr errrs r missins in typgraphy r phtgraphy. Dell service fferings d nt affect a cnsumer s statutry rights. Dell Management Services: Plicy Based Encryptin-E Offer Specificatins; September 6,