Configuring TLS Settings for Incoming Messages

Procedure

1. Go to Administration → Mail Settings → TLS.
   The Incoming Messages screen appears.
2. Do one of the following:
   • Click Add to create a new entry.
   • Click an entry.
3. Select a status option.
4. Specify the IP address of, subnet, or the domain of target email senders.

   Note You cannot change the IP address or domain setting for the default entry.

5. Select a security level.

   Security level	Description
   Never	Deep Discovery Email Inspector does not use TLS for the specified IP address or domain.
   Opportunistic	Deep Discovery Email Inspector declares support for TLS for the specified IP address or domain. The client can choose whether to start a TLS connection.
   Must	Deep Discovery Email Inspector requires TLS for communication for the specified IP address or domain. Communication between Deep Discovery Email Inspector and the client is encrypted.
   Verify	Deep Discovery Email Inspector requires the client to start a TLS connection for the specified IP address or domain and send its certificate to Deep Discovery Email Inspector for client identification.

6. Select a cipher grade option.

   Note This field is not applicable if you select the Never security level.

   Cipher grade	Description
   Medium	Communication between Deep Discovery Email Inspector and clients uses "medium" and "strong" encryption cipher suites.
   High	Communication between Deep Discovery Email Inspector and clients uses "strong" encryption cipher suites.

7. Click Save.