TLS Encryption Exchange 2010

A client of mine used to have TLS encryption setup on their old Exchange 2003 setup for various clients, they now use Exchange 2010 am I right in thinking that all mail is sent using this method where required so no extra work is required unlike on 2003?
Daniel ForresterDirectorAsked:
Who is Participating?
 
BlueComputeCommented:
Yes that's correct.  Exchange 2010 will do opportunistic TLS by default, so long as there is a certificate configured for SMTP.  If you run the Get-ExchangeCertificate cmdlet you can see which certificate you have configured for SMTP.

If you have a certificate enabled for SMTP then exchange will offer the STARTTLS option and where the other server supports it communication will be encrypted.  If the other server doesn't support TLS then exchange will default / fall-back to unencrypted SMTP. (Hence 'opportunistic' TLS.  If you wish to force TLS and never fall-back to unencrypted then you must configure your connectors to 'require TLS')
0
 
Daniel ForresterDirectorAuthor Commented:
But if the server your sending to doesn't support TLS won't the mail not be delivered?
0
 
ChrisCommented:
if you need to force TLS you are best off setting up a scoped send connector to enforce TLS and fail if it can't do it

then you don't affect other mail
0
 
AkhaterCommented:
exchange 2010 uses opportunistic TLS so, if the certificates is correct and the other party supports it, exchange 2010 will use TLS, if not it will failback and user no-encrypted SMTP

all internal emails (within an exchange organization) will be sent with TLS encryption
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.