How to allow only POP3 with SSL/TLS emails on XG ?

POP3s (over TLS) works like HTTPs.

So you need to perform the same steps like on the HTTPs inspection.

https://community.sophos.com/kb/en-us/132997

You need to select a certificate. This CA Certificate must be trusted by your email program. 

Hi LuCar,

Actually I have created POP and IMAP Email Clients Business application rule to scan email traffic.I need Spam Filtering too.However We cannot select particular Service/Port on that rule.Is there need to create separate firewall rule ? 

There should be a MTA Rule (Business Application Rule) with POP3s enabled. 

You will need the XG CA installed on all devices.

Ian

So Steps should be,

01) Creating any to any Business Application Rule(POP3 and IMAP Clients Template).

02)Enabling malware scanning on POP3/POP3s/IMAP/IMAPS.

03) Install CA Certificate on outlook or any other email client application.

That's it ?

Hi Amila,

you have the configuration correct.

You could tighten the rule a little bit by changing your destination network to your mail server FQDSN.

The SMTP function doe not cover all the SMTP protocols and you cannot add one which is annoying and means that not all SMTP traffic can be scanned by the business rule.

Ian

Hi Amila,

you have the configuration correct.

You could tighten the rule a little bit by changing your destination network to your mail server FQDSN.

The SMTP function doe not cover all the SMTP protocols and you cannot add one which is annoying and means that not all SMTP traffic can be scanned by the business rule.

Ian