Exchange 2010 Secure Email
Business partner requiring secure email communication. Not a problem, or so I thought. Company has Exchange 2010 with a Barracuda Spam/Virus Firewall filtering inbound mail only. Outbound mail is sent directly from Exchange. fqdn for mail is pointing to Barracuda.
Mail flow is working fine. No problems AFAIK.
I have purchased cert for securing the email. It is using the fqdn of mail. In talking with the tech support at Barracuda, the Barracuda sends the email up to their service for encryption. End user would receive email that encrypted email is available by clicking on link. An additional step or two required by the end user. Not really the way that I wanted it to work.
Not sure if the barracuda will pass encrypted email. I could have the email for the biz partner domain to bypass filtering.
I was planning on configuring encrypted email on the exchange server. Then I remembered that the Barracuda was in the path of the mail flow (inbound only).
Possible work around.
Adding another MX record to bypass the Barracuda, though it would open up email traffic from all servers.
Use a different public IP address for exchange encrypted mail. Filter at the firewall to allow only smtp traffic from biz partner email servers. Setup receive connector with fqdn of mail to allow inbound email.
Use the barracuda to perform the secure communication.
Any ideas that will help, are appreciated.
Thanks!
Mail flow is working fine. No problems AFAIK.
I have purchased cert for securing the email. It is using the fqdn of mail. In talking with the tech support at Barracuda, the Barracuda sends the email up to their service for encryption. End user would receive email that encrypted email is available by clicking on link. An additional step or two required by the end user. Not really the way that I wanted it to work.
Not sure if the barracuda will pass encrypted email. I could have the email for the biz partner domain to bypass filtering.
I was planning on configuring encrypted email on the exchange server. Then I remembered that the Barracuda was in the path of the mail flow (inbound only).
Possible work around.
Adding another MX record to bypass the Barracuda, though it would open up email traffic from all servers.
Use a different public IP address for exchange encrypted mail. Filter at the firewall to allow only smtp traffic from biz partner email servers. Setup receive connector with fqdn of mail to allow inbound email.
Use the barracuda to perform the secure communication.
Any ideas that will help, are appreciated.
Thanks!
http://technet.microsoft.com/en-us/library/bb123843(v=exchg.65).aspx
I believe encrypted mail is unscannable to the Barracuda and can be set to just forward it on.
I am not familiar with Barracuda, but as I know if you like to encrypt the mail communications, use email gateway is the easist approach.
What you discribe there is Https link that will be sent to recipiants, that just like trans the mail to https content.
By I know there are another way to encrypt the mail, like policy rules for certain domain users.
My friends, they use Cellopoint to approch this, maybe you could check this out.
and see if Barracuda has the same thing.
What you discribe there is Https link that will be sent to recipiants, that just like trans the mail to https content.
By I know there are another way to encrypt the mail, like policy rules for certain domain users.
My friends, they use Cellopoint to approch this, maybe you could check this out.
and see if Barracuda has the same thing.
ASKER
Originally my thought was to use Exchange to do the encryption/decryption. Since the barracuda is in the path of the mail flow, I will probably use it to start. This may be the easiest path. Hopefully I can get some time to work it out in a lab. Of course I may never get the chance due to work load.
I am waiting on the other party to contact me, so we can test operation.
Thanks for the help.
I am waiting on the other party to contact me, so we can test operation.
Thanks for the help.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I needed to keep the original configuration due to spam and virus filtering by barracuda. Since barracuda's support was not initially helpful, I turned to Experts Exchange. Thanks!