Egress Switch Client User Guide V4.x

Transcription

1 Egress Switch Client User Guide V4.x Egress Software Technologies Ltd

2 Table of Contents System Requirements... 4 Installation... 4 Getting Started... 8 Welcome Screen... 8 The System Tray... 9 The System Tray > Settings Sign in to the Egress Switch Network Create Secure Switch Package Creator To... Field Description Tags Restrictions Classifications Adding Files & Folders Data Exchange Mechanisms Egress Switch CD/DVD Egress Switch attachment Egress Switch file package Internet Server MS Outlook Add-in Package Restrictions My Packages Package Properties Offline Access Delivery Reports Audit Events Silent Installation Configuration File (customsettings.reg) Switch Support Center Useful Contact Information: Egress Software Technologies Ltd Page 2

3 Introduction Egress Switch is a simple to use data security solution that allows an information owner to package their sensitive information on any type of media (file attachment to , CD/DVD, USB stick or drive, FTP site, cloud storage, etc.). The secured information, once packaged can be sent to a recipient either electronically (e.g. , web, FTP/HTTP etc) or physically (e.g. in-person, mail, etc). The owner can specify security policies independent of the package through a web-based system. Egress Switch also provides an extensive audit trail showing who, where and when information has been accessed as well as unauthorised access attempts. This real time identity based protection enables businesses to extend their visibility over what actually happens to corporate information, while offering the ability to instantly revoke data that is mishandled or suspected lost/stolen. How it Works Egress Software Technologies Ltd Page 3

4 System Requirements The product requires the following: Microsoft Windows 2003, XP, Vista or 7 operating systems (32/64 bit) Microsoft.NET 2.0 SP1 Runtime Libraries. Microsoft Outlook 2003/2007/2010 (not required) Latest OS Service Packs and patches are recommended. Up to date anti-virus software including latest definition files. Internet Connection The installation does not require you to reboot your workstation. Once the installation has completed Egress Switch is ready to use. Installation Installation is a simple click-through installer delivered in an MSI package. An optional Setup.exe stub is provided for machines that do not meet the operating system requirements. If your machine meets the minimum requirements the MSI package can be executed or deployed using software distribution applications. The installer will require administrator rights on the machine (Local admin rights will be sufficient). Important Note: Egress Switch can be deployed silently using any software deployment application including Active Directory Group Policy and MS SCCM. For further information please see the Egress Switch Client Deployment Guide. Egress Software Technologies Ltd Page 4

5 To install the Egress Switch client software please complete the following simple steps: 1) Logon with local administration rights and launch setup.exe, the following dialog will be displayed: 2) Select I agree to accept the Egress Software Technologies Ltd license agreement and click Next to continue: Egress Software Technologies Ltd Page 5

6 3) Select the required installation path and click Next to continue: 4) The Switch Outlook Add-in provides seamless integration with MS Outlook 2003/2007/2010 for Package creation. This option will only be available if MS Outlook is detected during the installation. Egress Software Technologies Ltd Page 6

7 5) To begin the installation click Next : 6) To complete the installation click Close. The Egress Switch system tray icon should appear automatically. Egress Switch is now installed and ready to create secure packages. Egress Software Technologies Ltd Page 7

8 Getting Started Egress Switch has now installed 3 primary components on to your workstation: Switch Package Creator Enables the creation of Secure Packages Switch My Packages Allows you to view previously created secure packages and change security settings, add/remove recipients, change access restrictions, perform revocation, manage internet server uploads as well as view the package audit trail. Switch Outlook Add-in Integration with MS Outlook 2003/2007/2010 Welcome Screen The welcome screen is displayed on first logon and offers 2 options: Create Account If you do not already have a Switch ID click the link to visit the Egress Switch website and register for a free Switch Account. Sign in If you already have a Switch ID click the link to sign in to Switch with your credentials. Once you have signed into the Switch Client the welcome screen offers the following options: Create Package Opens the Switch Package Creator My Packages Opens the Switch My Packages Egress Software Technologies Ltd Page 8

9 The System Tray The Egress Switch System Tray allows quick access to the main features of the product. To access the system tray right click on the Grey (if not signed in) or Orange (if signed in) Switch logo in the Windows system tray: Create Package Opens the Package Creator and enables you to create new secure packages. Create Message - If MS Outlook is installed this will open a New Outlook message. If MS Outlook is not installed it will open a new secure message via Switch Web Access. My Packages - Allows you to browse previously created secure packages and configure access rights. Settings From within the settings tab you can update your personal information and configure Transfer settings for ftp(s) & http(s) uploads. Sign in/sign out - Allows you to sign in/out of the Switch network. NOTE: The Switch Package Creator and Switch My Packages can also be accessed from the System Tray and Start>Programs>Egress Egress Software Technologies Ltd Page 9

10 The System Tray > Settings The Settings screen allows you to view information about the user currently signed in, the Account Type which you are currently subscribed to as well as customise Transfer settings for ftp(s) & http(s) uploads. Refresh: Click the refresh button to connect to the Egress Server Infrastructure and download the latest policies. Concurrent uploads alter how many uploads can take place at the same time. Retry attempts configure how many times the Switch Client should retry uploading a package which has failed to upload. Delay between retries set the delay between retry attempts for failed uploads. NOTE: The more uploads you attempt at one time, the higher the impact on your bandwidth. You should only increase this setting if you are using ADSL broadband or quicker. Egress Software Technologies Ltd Page 10

11 Sign in to the Egress Switch Network Before you can use Egress Switch you must create an account on the Egress Switch network (Switch ID). You can sign up for an ID as follows: Go to or Click the link on the Switch sign-in screen after you have installed the agent Follow the simple sign up process online and create an account. To share Egress Switch secure packages with your friends and business contacts you will need an account with credit or a subscription. In order to get you started your new account has 5 free credits included. To sign in select the Sign in link from the system tray menu: Remember me - Stores your Switch ID automatically for the next time you sign in Remember my password - Stores your Switch ID and password for automatic sign in. Sign in automatically - Will automatically sign you in to the Switch network after logging on to Windows NOTE: You will require connection to the internet to sign in for the first time. NOTE: Use the Remember my password feature with caution on shared machines with a shared Windows login. Egress Software Technologies Ltd Page 11

12 Create Secure Egress Switch provides a secure and simple mechanism for creating secure s. From the System Tray Icon or buttons within 'My Packages' select 'Create Message'. If you are an MS Outlook user please see the MS Outlook Addin section for further details. If you do not have MS Outlook installed when you select 'Create Message' it opens the Switch Secure Mail Compose. Switch Secure Mail Compose looks like any standard client except all messages are automatically encrypted. Add recipients, message content and any attachments and click 'Send Secure'. Once your message has been sent you can either compose another message or close the dialog. Egress Software Technologies Ltd Page 12

13 Switch Package Creator The Switch Package Creator application allows you to create secure packages (CD/DVDs, Encrypted Files, Attachments, FTP(s)/HTTP(s) uploads etc) and assign the intended recipient(s) and access rights to the package. The main window for the Egress Switch Package Creator application resembles that of an client such as Microsoft Outlook. Egress Software Technologies Ltd Page 13

14 To... Field This field allows you to assign recipients to access secure packages in the same way you would allocate recipients in an . Enter a user s address (e.g. [email protected]) here as you would in an client such as Microsoft Outlook. Egress Software Technologies Ltd Page 14

15 Click the To button to open the Egress Switch address book (see below). The address book enables you to create your own recipients and also integrates with the MS Exchange/Outlook address book if available. Description Users of Switch are encouraged to provide a description of the package they are creating. This will help them to manage the package later in 'My Packages'. Tags The Tag feature allows arbitrary key words to be assigned to the package. Tags are a useful tool to locate package items in the library at a later date. Restrictions The Package Restrictions button allows you to configure Valid from and Valid until dates/times restrictions for the packaged information. Please note that these restrictions can be changed at any point even after the package has been sent: Egress Software Technologies Ltd Page 15

16 Classifications At the heart of the Egress Switch infrastructure is a powerful policy & classification engine. The policy engine is centrally managed allowing administrators to enforce decisions on how data should be sent, what security policies are required and how data access is audited. If allowed, users can choose their own level of security when exchanging information but centrally defined policies can override the user s decision. Egress Software Technologies Ltd Page 16

17 Adding Files & Folders Files and folders can be added to the Package Creator application using any standard Windows protocol including drag & drop, copy & paste, or by simply using right click context menus. The Package Creator application deals with the complexity of burning optical packages. For example it does not require the user to choose CD or DVD at the start of the project if the package you define has less than ~650MB you can burn it to either CD or DVD, if the contents exceed the capacity of your CD package you will be prompted to provide a blank DVD. The following CD/DVD media is fully supported: CD-R, CD+R, DVD-R, DVD+R, CD-RW, CD+RW, DVD-RW, DVD+RW, Blue Ray Once you have added the required files and folders to the Package Creator application click the Create Package button to create the secure package. Egress Software Technologies Ltd Page 17

18 Data Exchange Mechanisms After clicking the Create Package button the following dialog will be displayed. From within this dialog you can choose the type of secure package you wish to create. The Data Exchange mechanisms available are based on server policy and contain rules defined by the system administrator: Egress Switch CD/DVD An encrypted CD/DVD which can only be accessed by approved recipients Normal CD/DVD An unencrypted CD/DVD. This option is only available when no restrictions are set. Secure Attachments Creates a secure file package and automatically attaches to a new . This option is currently only available for MS Outlook 2003/2007 /2010 users. Egress Switch file package Creates a secure package file that can be distributed via any mechanism. Upload to Egress Cloud Automatically upload to the secure hosted Egress Cloud (if enabled in account). Internet Server Create and manage your own FTP(s) and HTTP(s) upload locations Egress Software Technologies Ltd Page 18

19 Egress Switch CD/DVD If Egress Switch CD/DVD is selected as a Data Exchange Mechanism (DEM) the following dialog will be displayed: Eject on Completion The package will be automatically ejected on completion of the burn process Verify on Completion This will perform a complete check of the disc to confirm the data has been written correctly without errors or corruption. Refresh Drives Will refresh the drive and check for new writable media Rewritable Discs If you are using re-writable CD/DVD media the Package Creator will automatically erase the media prior to burning your files. Egress Software Technologies Ltd Page 19

20 Click Next to create a secure CD/DVD. If you have selected re-writable CD/DVD that is not erased the following message will be displayed. Click Erase to continue: The secure CD/DVD package will be created. Please note this may take some time for large amounts of data: Egress Software Technologies Ltd Page 20

21 On completion of the burning process the following dialog is displayed. A summary of the completed actions is displayed as well as further configuration options: Send to package recipients Select this option to create an to send to the recipient(s) of the package to inform them of the imminent package delivery. Modify package properties Select this option to modify the package properties including access restrictions and recipient(s). Burn disc again Select this option to burn additional copies of the disc. Click Close to return to the main Package Creator window. Egress Software Technologies Ltd Page 21

22 Egress Switch attachment If the Egress Switch Secure or Secure Attachment Data Exchange Mechanisms (DEM) are selected the package contents are transparently encrypted and compressed: A new outlook message is created with the secure package attached. Add the required message text and click send. A summary of the package settings is displayed: NOTE: Depending on your Outlook security settings you maybe be required to allow temporary access to the Package Creator from the Outlook dialog. Egress Software Technologies Ltd Page 22

23 Egress Switch file package The Egress Switch file package creates a secure file package for distribution via any transport mechanism (Network, FTP, HTTPS, USB, etc). You will be required to select a destination folder where the secure package will be created: Egress Software Technologies Ltd Page 23

24 Click Create to build the secure package. The data will be compressed and encrypted as part of the process: A summary of the completed actions is displayed as well as further configuration options: Egress Software Technologies Ltd Page 24

25 Modify package properties Select this option to modify the package properties including access restrictions and recipient(s). Send to package recipients Select this option to create a sample to send to the recipient(s) of the package to inform them of the imminent package delivery. Show package in Explorer Navigates to the new secure package in Windows Explorer Internet Server The Internet Server data exchange mechanism allows you to create and configure upload locations for the following types of internet server: Egress Cloud Storage Standard FTP FTP over SSH FTPS FTP over implicit TLS/SSL FTPES FTP over explicit TLS/SSL HTTP web server (WebDAV) HTTPS web server (WebDAV) If you are permitted to create your own locations you will see the Internet Server data exchange mechanism. Egress Software Technologies Ltd Page 25

26 Select Internet Server and click next to open the Upload Location configuration screen: Click Add to create a new upload location, the server properties dialog is opened: Egress Software Technologies Ltd Page 26

27 Description Specify a name and description for upload server location. URL Specify the server URL address (DNS or IP address). Use the browse button to select the server type, address and port number. Type Internet server locations can be configured for anonymous access if permitted or a username and password can be specified. Use passive FTP For FTP server you can specify whether Passive FTP mode is required. Use custom proxy configuration If you are connecting to the internet via a corporate network with a proxy server you may need to specify proxy server credentials. Address The server name or IP address of the proxy server. Proxy server requires authentication If the proxy server requires additional authentication credentials specify a username and password. Show this server on the first screen If this option is selected the server will be displayed in the DEM selection screen. Egress Software Technologies Ltd Page 27

28 Skip SSL certificate verification Select this option to skip the SSL verification check when uploading to a web server. This can pose a security risk so use with caution Notification options When you upload files to internet server locations you are given the option to send an notifying the recipient(s) that a new package has been uploaded. You can specify an alternative external address which maybe different to the internal address used for upload. Test Connection Once you have added your required internet server credentials click Test Connection to verify the details. If the connection is successful a green tick will be displayed. Once you have configured your required internet servers you can create and upload Switch protected data by selecting the required upload server. Click Next to continue. You will be prompted to select the required upload folder, select the required destination and click next to begin the package creation and upload: Please see the My Packages section below for further information about managing uploads and package security settings. Egress Software Technologies Ltd Page 28

29 MS Outlook Add-in The Egress Switch Outlook Add-in provides transparent package creation from within MS Outlook 2003/2007/2010. You can simply use MS Outlook in the normal way but will notice a few additional options. To create a secure simply create a new and add any attachments you wish to the message: There are two additional buttons available on the MS Outlook tool bar: MS Outlook 2007/2010 MS Outlook 2003 Egress Software Technologies Ltd Page 29

30 Package Restrictions The Package Restrictions button allows you to configure Valid from and Valid until dates/times restrictions for the attached information. Please note that these restrictions can be changed at any point even after the has been sent: Classification At the heart of the Egress Switch infrastructure is a powerful policy & classification engine. This engine is centrally managed allowing administrators to enforce decisions over how data should be sent, what security policies are required and how data access is audited. If permitted, users can choose their own level of security when exchanging information but centrally defined policies can override the user s decision. Any number of classifications or policies can be defined to suit your organisation s workflow. This includes completely automating the classification process for end users, allowing users to make their decisions as to whether the information being sent is safe enough for public access, or controlling highly sensitive data so it cannot be accessed outside the organisation. Egress Software Technologies Ltd Page 30

31 Egress Switch Business Accounts can be supplied with four default policies which are explained below. However, each one of these policies can be tailored to suit your individual needs or the administrator can define a customised set of policies, unique to the organisation: Unclassified send the including any attachment(s) in clear text. This policy is suitable for non-sensitive data. Protect encrypt both the body and the attachments using 256 AES encryption. This policy is suitable for sensitive data where both the attachment and the body contain sensitive information. Restricted This policy is similar to Encrypt with the added benefit of enforcing a policy rule where the recipient must either accept or deny a legal disclaimer agreeing to your terms for accessing your information. The recipient is also not allowed to extract data from the secured Switch package to their local machine. This policy is suitable for sensitive to highly sensitive data. Confidential This policy is similar to 'Restricted' and should be used for highly sensitive data where the recipient should not be permitted to extract files, save copies, print, copy/paste or print screen. This classification acts as a safeguard against accidental or intentional data theft. Policies can be enforced centrally based on a number of criteria defined by the administrator. Examples of these can include: 1. Data being sent internally within an organisation will automatically be classified as public. All external s are automatically classified as sensitive and therefore apply the Encrypt policy. 2. Data which originates from a certain location on the corporate network cannot be sent to external recipients. Egress Software Technologies Ltd Page 31

32 3. Data over a certain file size being sent to an internal address will automatically be uploaded to the company internal FTP server. 4. Data which contains Microsoft Word documents being sent to an internal recipient are automatically uploaded to the company internal SharePoint server. Any variety of policies can be configured and we encourage our users to work with the Egress Account Management team ([email protected]) to tailor specific policies to suit your individual organisation s requirements. Once the user has chosen their classification level or the level has been enforced centrally, the user may be shown one of two options (this is dependent on the policy set by the administrator). Either the Data Exchange Mechanisms will be displayed. The available mechanisms are controlled by the system administrator who defines policy rules centrally. E.g. to send a standard encrypted attachment select Send Secure and click Next : Alternatively, the user will not be presented with any options such as the Data Exchange Mechanism dialog and the will be sent as normal via Microsoft Outlook. Egress Software Technologies Ltd Page 32

33 My Packages When you create Egress Switch packages you remain in control of the package even after it has left your physical control. In order for you to manage the life cycle of the package the Egress Switch My Packages provides a way for you to connect into the Switch network and administer the package items. You can open My Packages from the system tray icon, the Windows Start Menu or from within the Package Creator: Package Types Secure attachments Secure CD/DVD Secure File Package Secure Upload Package (HTTP(s)/FTP(s) Packages are organised into smart folders on the left hand side, you can easily locate packages based on date, type and classification. The following folders are created by default: All Packages Displays a complete list of all packages created and registered with the Egress Switch server. Today Displays a list of packages created and registered with the Egress Switch server on the current day. Egress Software Technologies Ltd Page 33

34 This week Displays a list of packages created and registered with the Egress Switch server within the last 7 days. Last week Displays a list of packages created and registered with the Egress Switch server within the previous 7 days. This month Displays a list of packages created and registered with the Egress Switch server within the current calendar month. Last month Displays a list of packages created and registered with the Egress Switch server within the previous calendar month. Expired Displays a list of packages that have time restrictions that have expired. Revoked Displays a list of packages where all access rights have been revoked. Pending Requests The pending requests folder displays a list of packages that have pending access requests. Search When trying to locate package items in the Library you can use the search features to identify packages based on a simple or advanced search. Outbox The Egress Switch client software includes a full ftp(s)/http(s) upload manager that performs connections to defined servers. The Outbox displays all active file package uploads. Egress Software Technologies Ltd Page 34

35 By selecting an active package you can perform the following tasks: Start > The upload of packages will start automatically however if for any reason you have paused an upload you can restart by clicking Start. Pause > FTP/FTPS package uploads can be paused at any time if supported by the server. This is not supported on HTTP & HTTPS uploads. Cancel > HTTP/HTTPS package uploads can be cancelled at any point during upload. Remove > After you have paused a package upload you can delete it from the upload queue by clicking Remove. To manage a package item in the Library double click on it to display the following window: Package Properties From the Package Properties view you can edit the description and package validity settings. Even though the package maybe out of your physical control all of the access rights can be controlled remotely: Egress Software Technologies Ltd Page 35

36 Package label Every package created is issued a unique package label. Registered at The package registration date and time Contents You can view the file contents/structure of any existing packages. Subject The package description. Tags You can create a set of words to categorise your data. This can make searching for packages of defined content easier. Status The package status can be configured as: Active the package is accessible to the list of recipients in the To field. Revoked Package access is revoked for all recipients. Egress Software Technologies Ltd Page 36

37 Important Note: The effectiveness of revocation will be down to the level of policy you have in place. For further information please contact your Egress Technical Account Manager. Classification Change the classification level even after the data has left your physical control To Any package that has been created by Egress Switch can be controlled irrespective of physical location. From the To field you can add/remove recipients on the fly providing real time access control of the package: By clicking the To button you can select recipients from the Egress Address book: Send notification to recipients If you forget or simply want to send another to the recipient about the package, simply click this link. Offline Access If offline access has been enabled in your Switch Policy you will see this tab. In the event that a recipient is unable to access a Switch package because they are offline you can issue a secure password to enable full offline access. Egress Software Technologies Ltd Page 37

38 Click 'Show passwords' to reveal the secure passwords. Different levels of access can be granted based on policy. Important Note: This feature should only be used when there is no opportunity for online access as once the password has been issued it is no longer possible to change access permissions or revoke the package. Delivery Reports The recipient history tab shows a summary of who has accessed a secure package. The Switch ID and time of first access is displayed for each user. For more detailed information you can view the Audit Events tab. Egress Software Technologies Ltd Page 38

39 Audit Events The Audit Events tab contains detailed information about the lifecycle of the secure package. You can view authorized/unauthorized access attempts. Date The date when the audit event occurred Details Shows details of the event. IP Address Records the internet IP address where the audit event occurred. The link shows a geographic summary of where the event occurred. Egress Software Technologies Ltd Page 39

40 Silent Installation The Egress Switch client is supplied as an MSI file that can be silently deployed and configured using Group Policy or any other software deployment application. For detailed information about silent deployment please see the Egress Switch Client Deployment Guide. As part of the deployment a number of options can be configured either directly in the registry or using a configuration file (customsettings.reg) as part of the installer. You can obtain the latest copy of the Egress Switch Client MSI from the following location: Configuration File (customsettings.reg) When silently deploying the Switch Client you can either configure settings using group policy ADM templates (see ADM templates configuration documentation) or by deploying with a customsettings.reg file. To create/edit the customsettings.reg use notepad or any other text editor. The following configuration options are available: Egress Software Technologies Ltd Page 40

41 Value Name Type Default Value Description HKEY_LOCAL_MACHIN E\SOFTWARE\EGRESS\ SWITCH or HKEY_LOCAL_MACHIN E\SOFTWARE\Wow643 2Node\EGRESS\SWITC H - 64 Bit Machines HideTrayIcon DWORD 1 Hide the system tray icon for all users. UseStandardTrayUI DWORD 1 Modified system tray that can be switched to use a standard notify Icon UI for menus and tooltips (To work with Citrix published apps) OutlookAddin DWORD 1 Disable/enable Outlook Addin LotusNotes DWORD 0 Disable/enable Lotus Notes MaxUploads DWORD 3 Transfer Settings RetryAttempts DWORD 10 Transfer Settings RetryInterval DWORD 3 Transfer Settings Allowedlogins String *@domain. com;*@do main.com; AnonymousSend DWORD See Description OutlookErrorLevel DWORD Suppress Outlook Error Messages Allowed Switch ID's to login to Switch Client. Each Switch ID is to be separated by ; If a user is not signed in to Switch, and cancels the sign-in prompt, the default action is "no send". 0 = Do not set (Current Behaviour) 1= Ask user to sign in to Switch, but if cancelled send plain text. 2 = If user is not signed in to Switch, send plain text. Available in both HKLM and HKCU and defines how verbose the error messaging should be. 0 = Only most critical error messages are displayed (e.g. Cannot connect to Switch, out of disk space). 1 = Current behaviour - All messages are displayed (This is the default value if OutlookErrorLevel is not set) Egress Software Technologies Ltd Page 41

42 ShowLabelIconsInXP OutlookForward DisableAutoSignIn DWORD See Description DWORD See Description DWORD See Description By default, Outlook Addin will use native office icons when it detects Office XP installation. This can be overriden. 0 = Do not show Switch and use native icons (Default behaviour) 1 = Show Switch icons When signature with images is enabled for replies/forwards a Member not found error is found. The workaround is to internally forward the message and then discard. This is not always desirable therefore there is a DWORD registry setting that enables this to stop the error message. This setting is available in both HKLM and KKCU and can be set to disable the auto sign-in features on the client login. 0 = Enabled (Default) 1 = Disabled GatewayAddress STRING See Description ForceGatewayMode MinimumSizeKB DWORD See Description DWORD See Description Outlook Addin may be used in Gateway mode where no encryption is performed on the client. In this mode the Addin will add X-$Switch header to the message instead. Anything in this string will turn the Addin into Gateway mode. This ForceGatewayMode key allows the client to process s locally but never encrypt. For example, it may be desirable to scan an for certain keywords and mark for encryption. This key must be used in conjunction with GatewayAddress and will add an X- $Switch header to the message if encryption is selected or policy dictates. There are 2 values: 1=Only Allow Gateway Encryption and never encrypt locally 2=Allow both local and Gateway encryption dependent on policy By default when the client is enabled in gateway mode and ForceGatewayMode is not enabled the client will not Egress Software Technologies Ltd Page 42

43 HKEY_LOCAL_MACHIN E\SOFTWARE\EGRESS\ FIPS Normal mode, FIPS not enabled Full FIPS Mode - Open SSL Crypto + all SSL DWORD 0 process any policy rules. It may be desirable to process rules at the client when a message and attachment is greater than X size. This feature is particularly useful if you wish to automate cloud uploads over a defined size. Specify a size in KB. Normal mode - FIPS not enabled 1 Full FIPS Mode - Everything is encrypted. NB: Expect some issues with authenticated proxies. Limited FIPS Mode 2 Packages are created using FIPScompliant OpenSSL, but server communication goes through normal.net HTTP and encrypted with Microsoft SSPI. Easier to get through proxies in this mode. HKEY_CURRENT_USER\ SOFTWARE\EGRESS\S WITCH ShowWelcome DWORD 1 LastSwitchID String *@domain. com OutlookForward DWORD See Description Welcome Screen Displays the last signed in Switch user When signature with images is enabled for replies/forwards a Member not found error is found. The workaround is to internally forward the message and then discard. This is not always desirable therefore there is a DWORD registry setting that enables this to stop the error message. HKEY_CLASSES_ROOT\. SWITCH Egress Switch Package String N/A HKEY_CLASSES_ROOT\.S WITCH\Egress Switch Package\Shell\Open\Com mand String Windows Shell Extensions Egress Software Technologies Ltd Page 43

44 HKEY_CLASSES_ROOT\.S WITCH\Egress Switch Package\Shell\Open\Defa ult String "C:\Progra m Files\Egress \Switch\SD XCreator.ex e" "%1" Windows Shell Extensions Customsettings.reg? Installer Egress Software Technologies Ltd Page 44

45 Switch Support Center Should you encounter any problems with Egress Switch please visit the Egress Software Technologies Ltd Support Center Egress Software Technologies Ltd Page 45

46 Useful Contact Information: Egress Main Switchboard: +44 (0) Egress Fax: Egress Website Address: Egress Sales: Account Services: Support: Follow Egress Online: +44 (0) Twitter Facebook LinkedIn Egress Blog Egress Software Technologies Ltd Page 46