SPX encryption in legacy Mode?

Hi Dirk,

You can setup SPX encryption in Legacy mode, refer to, Sophos XG Firewall: How to configure SPX Encryption for emailand let me know if it helps. 

Thanks,

Hi Sachingurung,

I can't find reference SPX setting in legacy mode.

Does SPX encryption really work in legacy mode?

Shunze

Hi ShunzeLee 

I have confirmed and found that SPX encryption is working in legacy mode.

Please refer the given link- https://community.sophos.com/kb/en-us/123114#How%20to%20enable%20SPX%20encryption%20for%20SMTP

Hi Dirk,

There is no "Add SMTP Policy" option in Legacy Mode. You must use "SMTP spam scan".
1) You need to define the SPX template (Emali / Encryption / SPX template / Add), then
2) Set the SPX configuration with the defined SPX template, SPX portal, then
3) Add the email policy "SMTP spam scan" to name it, specify the senders and recipients, and most importantly,
specify the key in Message header / Subject, e.g. "!! SPX !! __", set the "accept" action and the previously defined SPX template .

Now in sent emails, the subject should be given: !! SPX !! __ [secure: <pass>] <normal subject>

Password (without <>) should be long enough, minimum 8 characters.

Regards
Jan

Hi JanSadlik 

May I know the current firmware version of the XG device you are using?

I would request you to contact our technical support and open a service request and they will assist you further.

Hi Keyur,

I have, inter alia, XG125 with the SFOS 17.5.7 MR7 system. I have configured SPX in Legacy mode as I wrote earlier and everything works. KB 123114 which you point to describes the configuration in some older version of SFOS in MTA mode. In MR7, there is no "Add SMTP Policy" option in either Legacy or MTA mode.

Regards
Jan

Hi Jan,

Could you please be more specific on how to do it?

You could PM me if you want.

I am wondering what should be the SPX portal?

Also I am testing with different policies but without any success.

Thanks in advance!

Hi,

In addition to what I wrote earlier, the configuration screens below. In the SPX Portal section, enter the IP address of the WAN interface accessible from the Internet..

Regards
Jan

Hi Jan

Thank you very much for the screenshots!

My config is identical but...it is NOT working :(

Somewhere somehow something along the road is not working.(I tought it will be simple)

Interesting is that in my organization we are using Exchange. I ma using XG135 in bridge mode(1 IP LAN to WAN).

In our client(last week I installed XG310) is using Kerio mail server.

Any other advice or suggestion?

Your help is HIGHLY appreciated! Thanks again!

P.S: maybe I am not writing description correctly or matching headers error?(I suspect it).

I have tried everything like "!! SPX !! _ [secure: pass]" and different combinations with spaces or not.

Hi Jan,

I am 100% sure I am missing something.

Is there some prerequisites for this?