Practice - Creating a Mandatory TLS Policy

This example creates a TLS only encryption policy. If TLS is not available on the receiving end of the transmission, the message send will fail.

To create a mandatory TLS encryption policy:

Set up your TLS exceptions on the TLS tab.

  1. On the Status tab, select a cluster.
  2. Select Configure Server > TLS
  3. Enter your TLS Private Key and Server Certificate files.
  4. In the Global Authentication & Encryption section, set the encryption level to High.

Now set up your TLS Encryption Policy.

  1. Select Manage Policies > Encryption.
  2. Enter “TLS_Policy” in the Label field.
  3. Select the arrow next to the From field and select Enable All Patterns to indicate that the policy applies to any user at any sending domain or sub-domain.
  4. Select the arrow next to the To field and enter “*@zixpartner.com”, then click Add Pattern. This indicates that messages sent to the zixpartner.com domain will use this policy.
  5. Select TLS in the Delivery Method row.
  6. Click <Apply>.
  7. Deploy and Cycle the cluster.

Main Topic