User Guide

19-14
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 19 S/MIME Security Services
Verifying, Decrypting, or Decrypting and Verifying Incoming Messages using S/MIME
Signing, Encrypting, or Signing and Encrypting a Message upon Delivery using
a Content Filter
Create a content filter to sign, encrypt, or sign and encrypt a message on delivery, which means that the
message continues to the next stage of processing, and when all processing is complete, the message is
signed, encrypted, or signed and encrypted, and delivered.
Before You Begin
• Understand the concept of building conditions for content filters. See Overview of Content Filters,
page 11-1.
Procedure
Step 1 Go to Mail Policies > Outgoing Content Filters.
Step 2 In the Filters section, click Add Filter.
Step 3 In the Conditions section, click Add Condition.
Step 4 Add a condition to filter the messages that you want to sign, encrypt, or sign and encrypt. For example,
to encrypt sensitive material, you might add a condition that identifies messages containing particular
words or phrases, such as “Confidential,” in the subject or body.
Step 5 Click OK.
Step 6 In the Actions section, click Add Action.
Step 7 Select S/MIME Sign/Encrypt on Delivery from the Add Action list.
Step 8 Select the sending profile to associate with the content filter.
Step 9 Click OK.
Step 10 Submit and commit your changes.
What To Do Next
After you add the content filter, you need to add the filter to an outgoing mail policy. You may want to
enable the content filter on the default policy, or you may choose to apply the filter to a specific mail
policy, depending on your organization’s needs. For information about working with mail policies, see
Overview of Mail Policies, page 10-1.
Verifying, Decrypting, or Decrypting and Verifying Incoming
Messages using S/MIME
• S/MIME Verification and Decryption Workflow in Email Security Appliance, page 19-15
• How to Verify, Decrypt, or Decrypt and Verify Incoming Messages Using S/MIME, page 19-16
• Setting Up Certificates for Decrypting Messages, page 19-16
• Setting Up Public Keys for Verifying Signed Messages, page 19-17
• Enabling S/MIME Decryption and Verification, page 19-19
• Configuring an Action for S/MIME Decrypted or Verified Message, page 19-20