SaaS Email Encryption Enablement for Customers, Domains and Users Quick Start Guide Email Encryption Customers who are provisioned for SaaS Email Encryption can easily configure their Content Policies so that outbound messages meeting certain policy criteria are automatically encrypted. McAfee offers several options for enabling seamless email encryption including: Assigning a new action Encrypt Message to any of the existing Content Groups. Creating a new Content Group and assigning the Encrypt action to the Group. Customers can also utilize an option, turned on by default, that will automatically encrypt any message with [encrypt] in the subject line or body copy. Important: To provide even greater security for your users, McAfee recommends that you enable Transport Layer Security (TLS) on your Outbound MTA. Email Encryption for Content Groups Group Names As a subscriber to McAfee s system you are able to send regular email based on your selected policies but, you may also encrypt messages for a specific Group Name under Content Groups if desired. Select the group name you wish to encrypt, from the Action drop-down list select to have that Group encrypted. More Options If a Customer or Domain subscribes to Email Encryption, then selecting this option can be used to enforce Email Encryption if the outbound message contains the string [encrypt]. This string, [encrypt] can reside in the message Subject line or the body of the outbound message. This option can be found under Email Protection > Policies > Outbound (default) > Content >Content Groups.
IMPORTANT: If your organization previously enabled any of the five former content keyword groups, it is necessary to reset the Action (Quarantine, Deny, Allow, Tag Subject, Encrypt Message, and Silent Copy settings for the corresponding new content keyword group and select the Enable checkbox in order to resume filtering on the desired set of keywords Note: This option is only available on the Outbound Policy Content Group page. The combination for maximum encrypted message size includes the message header, body and attachment cannot exceed 30 MB for encrypted messages. Traffic Encryption Report The Traffic: Encryption Report window displays information about all Outbound Email Traffic, percentages and bandwidth for the designated Domain(s) during the selected date or date range sent out to be encrypted. The Reporting Period for all report data is viewable on either a day, week, or month basis for the current month, or the previous month. Note: Additional information can be found under Help. Email Encryption Recipient Recipients who have not registered for Email Encryption and who receive an email that has an encrypted message will receive a notification to activate their account. This is a one-time activation process in which they will have access to their encrypted messages via the Pick-up Portal.
Pick-Up Portal Activation The following notification displays if the recipient receives an encrypted email message but has not activated their account. Welcome Message for a non McAfee user A non McAfee user will receive the following notification for an email containing an encrypted message. 1. A user should click Read Message to go to their login page. 2. The user will also receive the following message the first time they receive an encrypted message. 3. The recipient should click on the highlighted link to activate the account. This will launch the Encryption Console Registration page. Registration Page for a non McAfee user A non McAfee user must complete the following information in the Registration page to setup an account for their encrypted email account.
The non McAfee user must complete the registration information in order to access their Encryption Inbox. Once the user has registered, they must click the Register button to login to the Encryption Console. Encryption Console Sign In screen for a non McAfee user The non McAfee user may now use their registered password to login to the Encryption Console. 1. The non McAfee user must click Sign In. The Encryption Console Inbox for a non McAfee user displays.
2. After the user has registered for Encryption, they may now view, manage and coordinate their encrypted mail. Note: The recipient of an encrypted email has access to online help to guide them through this process. They can manage their encrypted email using one of the following items: Inbox Draft Delete Sent The Encryption Inbox automatically populates as the recipient receives encrypted mail. They may manage this mail using the folder and tools provided. 1. The user may highlight the email they wish to view and either double-click on that email or click the Open icon. This will open a separate email window pane for that email with its own tab header. 2. They may Reply to an email, Delete an email, or Flag it to highlight its importance. They may also Flag tasks and contacts. To apply an action to an email, complete the following: a. A user may highlight the email they want to Flag, Reply, or Delete. b. A user may click the appropriate icon for the action required in the toolbar. 3. To navigate between the encryption inbox panes, a user may simply highlight the email they wish to view, and click the Reading Pane icon. This will open a separate window for the email with the designated icons to apply for that email. Setup Preferences for a non user As a new user to the Encryption Console, a user can set up their personalized preferences and delivery methods.
The Encryption Preferences window allows a user to set their Password Entries per page Encryption Message Delivery Method. Preferences window field descriptions for a non McAfee user Preferences window field descriptions Option Definition Password At the Password field, click Change. Type a new password in the Password field. Type a new password in the Confirm Password field. Password rules are the following: There must be a minimum of 8 characters. Alpha, numeric, and special character types are allowed. There must be at least one character that differs in character type (alpha, numeric, or special) from the majority of characters. Thus, if the password contains mostly alpha characters, then at least one character must be either a special character or numeric. For example, majordude is invalid, but majordude9 is valid. The password cannot contain any spaces. Both uppercase and lowercase letters are allowed.
Preferences window field descriptions Passwords are case-sensitive (for example, Password, password, and PASSword would be different passwords) Any of the following symbols are allowed: ( ) ` ~! @ # $ % ^ & * - + = \ { } [ ] : ; " ' < >,.? / Entries per page From the Entries per page drop-down menu, select the number of items to be displayed in lists on the Control Console, for example, quarantined email lists for users and Email Protection log reports for administrators. The default list length is 25. Message Delivery Method From the drop-down list, select an option for delivering encrypted mail: Encryption Console - Store encrypted message content on the encryption server. Send to my Inbox - Store encrypted message content in your email client. Preferences Window Toolbar for a non user Preferences window toolbar Option Definition Apply Click the Apply icon to save your changes in the Control Console. If you don't want to save your changes, click any tab or link to exist the Preferences window. Reset Click the Reset icon to clear your information in the Control Console. Once you are registered for Encryption and you begin to manage your inbox, you may receive the following warning that you have encrypted mail.
User Welcome Page A user who already has set up their Encryption Inbox account would receive the following notification for an email containing an encrypted message. 1. A user should click Read Message to go to their login page. 2. The user will also receive the following message the first time they receive an encrypted message, which also sends them to their login page for the Encryption Console. 3. The user will click the link entitled: They should activate their personal account. This will launch the Encryption Console Login Page. McAfee Login page for a McAfee user To access the Encryption Inbox the user may use their existing McAfee login and password.
1. Type your McAfee password. 2. Click Sign In. The user Encryption Console inbox displays. The Encryption Inbox automatically populates as the user receives encrypted mail, but they may manage this mail using the folder and tools provided. 1. The user may highlight the email they wish to view and either double-click on that email or click the Open icon. This will open a separate email window pane for that email with its own tab header. 2. They may Reply to an email, Delete an email, or Flag it to highlight its importance. They may also Flag tasks and contacts. To apply an action to an email, complete the following: c. A user may highlight the email they want to Flag, Reply, or Delete. d. A user may click the appropriate icon for the action required in the toolbar. 3. To navigate between the encryption inbox panes, a user may simply highlight the email they wish to view, and click the Reading Pane icon. This will open a separate window for the email with the designated icons to apply for that email. Preferences for Encryption drop-down selections for a McAfee user The new addition to an existing user preferences account includes a Message Delivery Method for a user s encrypted email.
From the drop-down list, the user may select an option for delivering encrypted mail: Encryption Console - Store encrypted message content on the encryption server. Send to my Inbox - Store encrypted message content in your email client. Once a user is registered for Encryption they begin to manage their inbox, they may receive the following warning that they have received encrypted mail. McAfee Outlook Add-in for Send Encrypted. Users now have the ability to download a Send Encrypted button within Microsoft Outlook to send encrypted outbound messages. This button is an add-in to Outlook, which users can download from http://download.mcafeesaas.com/encryption_addin/, or which can be distributed by administrators as a 32 or 64 bit.msi file. The use of this feature requires subscription to the Email Encryption Service.