Solved

Email Encryption

Posted on 2013-01-07
11
309 Views
Last Modified: 2013-02-14
Hi Experts,

I need the ability for my users to send encrypted emails, there seems to be a lot of options TLS PGP. I understand that outlook can also do this with certificates....

Is anyone aware of a simple way of doing this, we dont mind buying a product but it needs to be easy at the recipients end too.

Or is there any good documentation on how to use the Outlook version. We run Office 2010 Pro atm.

Kind Regards,

CJ
0
Comment
Question by:carlnys
11 Comments
 
LVL 13

Accepted Solution

by:
imkottees earned 250 total points
ID: 38753315
0
 
LVL 3

Assisted Solution

by:jodiddy
jodiddy earned 250 total points
ID: 38753347
I have done work with a few financial institutions. Those institutions have always used a third party product to encrypt the messages.  Of course the most secure is not send at all, but to send a message with a link to a protected system that your recipients log into to access the messages sent to them.  Much like your banks that have a secure mailbox for you. ZixCorp offers a box like this that I have found works very well.

Barracuda's Spam & Virus Firewall includes an encryption service.
Appriver - Outlook Encryption in One-Click
ZixCorp is another service I have used.
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 38753751
It will be the security vs convenience sliding scale..
you can use certificates but there must be a way of each user and recipient exchanging certificates, same with pgp you need the recipients public key and they need yours.

you could use winrar/winzip to encrypt a file which contains the message and pass the password to the recipient via different method of communication (would be worthless if sent in the same message)
0
Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

 
LVL 33

Expert Comment

by:Dave Howe
ID: 38753950
Ok, the key is always, not what the sender can send, but what the recipient can accept.

jodiddy is correct in that most large institutions use what is called an "oracle" based solution (not related to the database company) of which the three big names are pgp inc (now owned by symantec), zixcorp and cisco - for the pgp enterprise gateway, zixmail, and CRES (ironport) solutions respectively

the down side of many such solutions is that the data (or at least the keys to the data) are held by a third party; that is good in many respects (in that the recipients don't need to remember different logins for different sites) but bad in others (in that there is then a single point of failure, a single basket containing all the eggs most attractive to hackers).  PGP do offer the option of having a local server to hold the keys *and* data, but that gets you back to the downside (of users having to set up and maintain an account on your server, in addition to the hundreds of others they have to maintain)

Seriously though, go with setting up your own internal CA and issuing keys to your own outlook users - that is free, and if you use the MS CA and group policy, can be done transparently (so your users find it "just works"). From there, they can get experience on sending and receiving mails between themselves. Then, investigate your intended recipients, see what THEY can support. It is possible they can do the same thing, saving them (and you) the expense of buying in a solution.

HOWEVER

you may need to bear in mind any regulatory requirements you might have on discovery, s/mime is notoriously hard to gain authorized administrative access to, as it was not designed with corporate access "built in" - but that's true of almost anything other than the corporate version of pgp, and even there, there is a "gentleman's agreement" that the sender won't deliberately strip the corporate recovery key from the target list before sending.  Gateways are more efficient for that (in that they encrypt/decrypt at the network boundary, so that your internal mailstore remains unencrypted for discovery and/or DLP) but are significantly more expensive than desktop solutions.
0
 
LVL 59

Expert Comment

by:LeeTutor
ID: 38838860
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.
0
 
LVL 33

Expert Comment

by:Dave Howe
ID: 38838861
Three posters (myself included) each gave meaningful information; If you delete on the basis that there isn't enough to "confirm" a given answer, you could delete 90% of the questions on here without giving out any points, and alienate most of your experts.

Might I suggest you get someone with experience in this area (such as Tolomir?) to review?
0
 
LVL 33

Expert Comment

by:Dave Howe
ID: 38843253
Not sufficiently arrogant to vote for myself , so I recommend

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/Windows_7/Q_27987805.html#a38753315

as the answer (as the queriant explicitly asked for info on setting up outlook) and

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/Windows_7/Q_27987805.html#a38753347

as an assisted answer, as oracle based crypto is a better solution than s/mime (almost nobody ends up using s/mime in the real world, as it requires the recipient to create and distribute the key in advance, usually once per year, and getting your customers to do that is a nightmare)
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You may have a outside contractor who comes in once a week or seasonal to do some work in your office but you only want to give him access to the programs and files he needs and keep privet all other documents and programs, can you do this on a loca…
There are many Password Managers (PM) out there to choose from. PM's can help with your password habits and routines, but they should not be a crutch you rely on too heavily. I also have an article for company/enterprise PM's.
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now