Re: Email Encryption Between Servers

["Net Shark" <netshark () sexmagnet com>]

hi there,
Try using a Network layer encryption solution , like IPsec.
It would create a secure connection (VPN tunnel) between your mail server,
and
your partners's endpoint (it would require sysadm intervention in your
partners's networks).
Checkout MS papers about IPsec, they got loads of documentation as it is
fully suported by
win2k (it's a proposed standard to IETF).

At a higher level you can choose someting like PGP, but this would require
user intervention.

Alex

----- Original Message -----
From: "Al Cooper" <alc () 2wh com>
To: <security-basics () securityfocus com>
Sent: Monday, March 31, 2003 6:44 PM
Subject: Email Encryption Between Servers


> We are attempting to set up secure e-mail with our partner companies to
> comply with the upcoming HIPAA requirements.  I would like to find a way
to
> encrypt all e-mail going between our mail server and our partners.  We are
> using Exchange.  Some of our partners are also using Exchange and some are
> using other SMTP servers.
>
> Is there a way to automatically force all e-mail between our two e-mail
> servers (either Exchange to Exchange or Exchange to SMTP) to be encrypted
> then decrypted on arrival with no end user intervention?   If there are,
> what affect, if any will these encryption methods have on our overall
> network security.
>
> Thanks for your help,
>
>
>
> -------------------------------------------------------------------
> SurfControl E-mail Filter puts the brakes on spam,
> viruses and malicious code. Safeguard your business
> critical communications. Download a free 30-day trial:
> http://www.securityfocus.com/SurfControl-security-basics




-------------------------------------------------------------------
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.securityfocus.com/SurfControl-security-basics