WEBVTT

1
00:00.000 --> 00:00.630 align:middle line:84%


2
00:00.630 --> 00:02.670 align:middle line:90%
There may be times when
we're sending an email

3
00:02.670 --> 00:05.580 align:middle line:90%
and based on the
categorization of that email

4
00:05.580 --> 00:07.230 align:middle line:90%
or certain attributes
of that email,

5
00:07.230 --> 00:10.410 align:middle line:90%
we want the email security
appliance to take it, encrypt

6
00:10.410 --> 00:11.203 align:middle line:84%
it, and protect it.

7
00:11.203 --> 00:12.870 align:middle line:90%
In this video, I'd
like to introduce you

8
00:12.870 --> 00:15.793 align:middle line:90%
to those capabilities on the
email security appliance.

9
00:15.793 --> 00:17.460 align:middle line:90%
So here on the email
security appliance,

10
00:17.460 --> 00:20.130 align:middle line:90%
the first step we would take
is go to Security Services,

11
00:20.130 --> 00:23.940 align:middle line:90%
and then go down to Cisco
Ironport Email Encryption

12
00:23.940 --> 00:24.930 align:middle line:84%
right here.

13
00:24.930 --> 00:27.660 align:middle line:90%
If it's not enabled, you'd
go ahead and enable it

14
00:27.660 --> 00:29.760 align:middle line:90%
by clicking Edit
Settings, enable it,

15
00:29.760 --> 00:32.790 align:middle line:90%
and then we would create an
email encryption profile simply
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

15
00:29.760 --> 00:32.790 align:middle line:90%
and then we would create an
email encryption profile simply

16
00:32.790 --> 00:36.630 align:middle line:90%
by clicking on Add,
specifying a profile name.

17
00:36.630 --> 00:39.690 align:middle line:90%
The key service type is Cisco
Registered Envelope Service,

18
00:39.690 --> 00:42.210 align:middle line:90%
there's the service
URL, and then regarding

19
00:42.210 --> 00:45.300 align:middle line:90%
envelope settings, we have
high, medium, and low specifying

20
00:45.300 --> 00:48.270 align:middle line:90%
what can and can't be done with
those and additional options

21
00:48.270 --> 00:50.280 align:middle line:90%
regarding what can
happen with that email.

22
00:50.280 --> 00:52.290 align:middle line:90%
So we click on
Submit, and now I've

23
00:52.290 --> 00:54.010 align:middle line:84%
got this profile called Test.

24
00:54.010 --> 00:55.560 align:middle line:90%
Now to make this
actually work, you

25
00:55.560 --> 00:59.460 align:middle line:90%
have to register your ESA with
Cisco, so they're expecting you

26
00:59.460 --> 01:00.790 align:middle line:84%
and can make it all work.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

26
00:59.460 --> 01:00.790 align:middle line:84%
and can make it all work.

27
01:00.790 --> 01:03.060 align:middle line:90%
So the provision status
says not provisioned.

28
01:03.060 --> 01:05.099 align:middle line:90%
If we click on commit
changes, and if we

29
01:05.099 --> 01:07.980 align:middle line:90%
had registered with
Cisco for their service,

30
01:07.980 --> 01:10.330 align:middle line:90%
then these encryption
profiles could then be used.

31
01:10.330 --> 01:12.600 align:middle line:90%
Now let's imagine for a
moment that this ESA was all

32
01:12.600 --> 01:14.680 align:middle line:90%
registered and these
were available.

33
01:14.680 --> 01:17.670 align:middle line:90%
How do we then use these
email encryption profiles?

34
01:17.670 --> 01:19.950 align:middle line:90%
What we would do is
go to Mail Policies

35
01:19.950 --> 01:22.410 align:middle line:90%
and specify Outgoing
Content Filters,

36
01:22.410 --> 01:25.230 align:middle line:90%
and we would create an
outgoing content filter.

37
01:25.230 --> 01:27.610 align:middle line:90%
This is basically
specifying what to look for.

38
01:27.610 --> 01:31.080 align:middle line:90%
So in this high security encrypt
content filter that I made,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

38
01:27.610 --> 01:31.080 align:middle line:90%
So in this high security encrypt
content filter that I made,

39
01:31.080 --> 01:34.110 align:middle line:90%
we can specify what to look
for, and then what to do.

40
01:34.110 --> 01:36.080 align:middle line:90%
So basically looking
for a subject header

41
01:36.080 --> 01:37.080 align:middle line:84%
or some other attribute.

42
01:37.080 --> 01:38.800 align:middle line:90%
In fact, if we click
on the condition,

43
01:38.800 --> 01:41.410 align:middle line:90%
there's just a laundry list
of what we can match on.

44
01:41.410 --> 01:46.320 align:middle line:90%
So if we say we're looking
for super secret in the text

45
01:46.320 --> 01:49.170 align:middle line:90%
as a condition, and
I'll click on OK,

46
01:49.170 --> 01:50.640 align:middle line:90%
we would then
specify the action.

47
01:50.640 --> 01:53.070 align:middle line:90%
And so under the action, I
have encrypt on delivery,

48
01:53.070 --> 01:54.690 align:middle line:84%
which is one of many actions.

49
01:54.690 --> 01:56.225 align:middle line:90%
But for the benefit
of encryption,

50
01:56.225 --> 01:57.600 align:middle line:90%
this would trigger
the encryption

51
01:57.600 --> 01:59.220 align:middle line:84%
based on that text being found.

52
01:59.220 --> 02:00.940 align:middle line:84%
So we'll click on OK there.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

52
01:59.220 --> 02:00.940 align:middle line:84%
So we'll click on OK there.

53
02:00.940 --> 02:02.460 align:middle line:90%
So once we have
this content filter,

54
02:02.460 --> 02:04.470 align:middle line:90%
then if we get
email Mail Policies,

55
02:04.470 --> 02:07.870 align:middle line:90%
and we go to Outgoing Mail
Policies, it's at this point,

56
02:07.870 --> 02:10.970 align:middle line:90%
we can apply that content
filter that will then,

57
02:10.970 --> 02:12.810 align:middle line:90%
based on the content
of the message,

58
02:12.810 --> 02:15.690 align:middle line:90%
apply the encryption before
sending that message out.

59
02:15.690 --> 02:17.390 align:middle line:90%
So that's how you
would apply it.

60
02:17.390 --> 02:19.380 align:middle line:90%
So it's basically a
three step process.

61
02:19.380 --> 02:22.920 align:middle line:90%
Security services first, then
going to Cisco Ironport Email

62
02:22.920 --> 02:26.070 align:middle line:90%
Encryption, make sure you have
at least one profile to use.

63
02:26.070 --> 02:29.010 align:middle line:90%
Under Mail Policies, we go
to Outgoing Content Filters,

64
02:29.010 --> 02:31.110 align:middle line:90%
create the content
filter, which would
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

64
02:29.010 --> 02:31.110 align:middle line:90%
create the content
filter, which would

65
02:31.110 --> 02:32.670 align:middle line:90%
include the conditions
to look for,

66
02:32.670 --> 02:34.650 align:middle line:90%
and then the action
of encrypting.

67
02:34.650 --> 02:37.200 align:middle line:90%
And then going back to Mail
Policies, and our Outgoing Mail

68
02:37.200 --> 02:40.943 align:middle line:90%
Policy, including it here as
part of our content filters.

69
02:40.943 --> 02:42.360 align:middle line:90%
So in this video,
we've identified

70
02:42.360 --> 02:44.790 align:middle line:90%
that if we have our ESA
that's registered with Cisco,

71
02:44.790 --> 02:47.310 align:middle line:90%
we can take advantage of
the encryption services

72
02:47.310 --> 02:49.800 align:middle line:90%
by looking for certain
conditions in an email message,

73
02:49.800 --> 02:52.020 align:middle line:90%
and then based on that,
encrypting that email

74
02:52.020 --> 02:53.885 align:middle line:84%
before sending it on its way.

75
02:53.885 --> 02:55.510 align:middle line:90%
So thanks for joining
me in this video.

76
02:55.510 --> 02:56.718 align:middle line:84%
I'll see you in the next one.

77
02:56.718 --> 02:58.950 align:middle line:90%
Meanwhile, I hope this has
been informative for you,

78
02:58.950 --> 03:02.390 align:middle line:90%
and I'd like to thank
you for viewing.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

78
02:58.950 --> 03:02.390 align:middle line:90%
and I'd like to thank
you for viewing.