Setting-up Email Encryption Filters
Situation |
|
---|---|
Solution |
How to enable Encryption and create filters manually.
|
Prerequisite:
Ensure Encryption is enabled a feature on your account and your outbound mail flow is set to use the Proofpoint Essentials smarthost.
Spam Scanning:
All outbound messages are still spam scanned. There is a possibility that an email you want encrypted could still get quarantined.
Standard default subject filter
How to create the standard subject filter with [encrypt]
- Under Security Settings, click Email.
- Click Filter Policies.
- Select the Outbound tab.
- Click on New Filter.
- Choose a name for your filter (e.g. Encryption - subject).
- Click Continue.
- Ensure Scope is set to Company.
- If statement
- First parameter: Email Subject
- Second Paraemter: CONTAIN(S) ANY OF
- Text box: [encrypt]
- Do statement
- Select Encrypt
- Click ADD ANOTHER ACTION
- Select Strip Subject Line Encryption Terms
- Click Save.
Filter tip
Like the standard filter rules, at step 9, you may want to add in another condition, then set it to: Stop Processing Additional Filters.
Email Logs
- Logs will not show that the subject term has been stripped. The logs shows the email prior to the stripping of the subject term. We will show the subject term to ensure that it should meet the criteria.
- Recipients of the encrypted email will not see the subject term in the notification.
Plug-in filter
How to create the filter with the Outlook Plug-in.
- Under Security Settings, click Email.
- Click Filter Policies.
- Select the Outbound tab.
- Click on New Filter.
- Choose a name for your filter (e.g. Encryption - plug-in).
- Click Continue.
- Ensure Scope is set to Company.
- If statement
- First parameter: Email Headers
- Second parameter: CONTAIN(S) ANY OF
- Text box: x-proofpointencryptdesktop
- Do statement
- Select Encrypt
- Click Save.
Plug-in must
In order to use this filter, you must have the plug-in installed. Please download the plug-in.
Other Subject filter
This is similar to Standard default subject filter, but you can input any word terms you want.
- Follow the same general steps in Standard default subject filter; the change is in step 8-3.
- From this step, you can alter the Text Box information.
- Enter in any key words you would like to have encryption triggered on.
- Example: [Private], [secure], etc
Filter Tip
Entering in multiple key words is fine, but each needs to have a comma and single space to run correctly.
Create DLP filter
A majority of customers will create a DLP filter to protect privacy data.
DLP Combination sets
When selecting DLP, it would be best to use both Dictionary and Smart Identifier Scan to use like terms
- Smart Identifier: Financial Information > Credit Card Number
- Dictionary: Personal Information > Credit Card Terms
- Utilizing both terms in the same IF statement will help ensure less false positives on a single term being used.
- Under Security Settings, click Email.
- Click Filter Policies.
- Select the Outbound tab.
- Click on New Filter.
- Choose a name for your filter (e.g. Encryption - DLP[term]).
- Click Continue.
- Ensure Scope is set to Company.
- If statement
- First Parameter: Dictionary Scan or Smart Identifier Scan
- Second Parameter: Cannot be changed from "CONTAIN(S) ANY OF"
- Third Paremeter:
- Click Manage.
- In the pop-up, click the arrow to see the DLP term.
- Check the box for the appropriate term.
- Repeat steps 2-3 as needed to pair your Dictionary Scan or Smart Identifier Scan.
- Click Close.
- Do statement
- Select Encrypt
- Click Save.
Filter tip
In step 9, it is optional here to Add Another Action, then also set: Stop Processing Additional Filters.