RE: Email Encryption Between Servers

["Michael Leigh" <mleigh () austin rr com>]

I think the easiest way to do this would be with IPSEC tunnels, between
either your firewalls, routers or mail servers explicitly.

-----Original Message-----
From: Al Cooper [mailto:alc () 2wh com]
Sent: Monday, March 31, 2003 9:44 AM
To: security-basics () securityfocus com
Subject: Email Encryption Between Servers


We are attempting to set up secure e-mail with our partner companies to
comply with the upcoming HIPAA requirements.  I would like to find a way to
encrypt all e-mail going between our mail server and our partners.  We are
using Exchange.  Some of our partners are also using Exchange and some are
using other SMTP servers.

Is there a way to automatically force all e-mail between our two e-mail
servers (either Exchange to Exchange or Exchange to SMTP) to be encrypted
then decrypted on arrival with no end user intervention?   If there are,
what affect, if any will these encryption methods have on our overall
network security.

Thanks for your help,



-------------------------------------------------------------------
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.securityfocus.com/SurfControl-security-basics


-------------------------------------------------------------------
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.securityfocus.com/SurfControl-security-basics