Transport Layer Security (TLS) is a protocol that helps to secure data and ensure communication privacy between endpoints. Trend Micro Email Security allows you to configure TLS encryption policies between Trend Micro Email Security and specified TLS peers. Trend Micro Email Security supports the following TLS protocols in descending order of priority: TLS 1.3, TLS 1.2, TLS 1.1 and TLS 1.0.
To prevent against man-in-the-middle attacks on TLS connections, DNS-based Authentication of Named Entities (DANE) is introduced to bind X.509 digital certificates, commonly used for TLS, to domain names using Domain Name System Security Extensions (DNSSEC). With the authentication inherently in DNSSEC, DANE enables a domain administrator to affirm TLS credentials to mitigate certificate authority (CA) vulnerabilities and breaches.
Trend Micro Email Security allows you to use DANE authentication between Trend Micro Email Security and specified TLS peers during outbound mail delivery.
The Transport Layer Security (TLS) Peers screen uses the following important terms:
Term |
Details |
---|---|
Managed Domain list |
|
Status (Managed Domain) |
|
Default (for unspecified domains) |
This configuration applies to all domains that are not in the managed domain list |
Domain TLS Peers list |
|
Status (TLS Peer) |
|
TLS peer |
Trend Micro Email Security can apply your specified TLS configuration with this peer during network communications. |
Security level |
|
Default (for unspecified peers) |
This configuration applies to all peers that meet any of the following criteria:
|