300-210 1.3.b Implement Email Encryption

Email can be encrypted / unencrypted via the following basic overview.  I will go over specific steps afterwards, but these are the basic steps:

1. Create an encryption profile that specifies characteristics of the encrypted email and connectivity information for the key server.  The key server can be one of the following:

• Cisco Registered Envelope Service (a managed service)
• Cisco Encryption appliance (a managed server

2. Create rules for the following elements to specify traffic to be encrypted:

• content filters
• data loss prevention policies
• message filters

Encryption flow

Once those basics have been configured, the encryption flow takes place as follows:

1. An outgoing message that meets the conditions of the filter is placed in the queue for encryption processing
2. Once encrypted, the encryption key is stored on the key server and the message is queued for delivery
3. If some temporary condition prevents the email from being sent, it remains in the queue and will be sent later