This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

email scan - POP3S and IMAPS

I am trying to make a new role to scan incoming and outgoing emails, the mail server is not internal, it is an external server on the internet.

i noticed that users are now unable to recieve emails due to encrption issue. so i disabled pop3s and imaps scan, and it worked.

should i buy a certificate from a third party and add it to sophos firewall to be able to scan incoming encrypted emails (pop3s and imaps)? or it can be done without buying a certificate?

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 6 years ago

Hi Elias,

adding a certificate the XG will not help, you need to install the XG certificate on your users devices.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 ELIAS over 6 years ago in reply to rfcat_vk

Hi,

thank you for your reply.

the certificate is already installed on users devices, but if i enable POP3S or IMAPS scan, users will not receive emails, email scan is in legacy mode. the email server is external server, i got this error in outlook:

"your server does not support the connection encryption type you have specified, try changing the encryption method"
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 ELIAS over 6 years ago in reply to rfcat_vk

Hi,

thank you for your reply.

the certificate is already installed on users devices, but if i enable POP3S or IMAPS scan, users will not receive emails, email scan is in legacy mode. the email server is external server, i got this error in outlook:

"your server does not support the connection encryption type you have specified, try changing the encryption method"
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 rfcat_vk over 6 years ago in reply to ELIAS

You need to review whether the server uses TLS or startTLS and on which ports.

Because you cannot change that on the XG, just the users device.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 ELIAS over 6 years ago in reply to rfcat_vk

they are using Microsoft outlook, and there is only one option:

and if i disable scanning POP3s and IMAPS, it works normally. if i enable it, all users will stop receiving emails, even gmail users.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to ELIAS

Hi,

I checked my wife's MAC v16 outlook and can setup connection details, so I suspect you are limited in your AD configuration for mail users.

Ian
Cancel
Vote Up 0 Vote Down

Cancel