Google Message Encryption Administration Guide - Manual (Page 31)

32 Postini Encryption Services Administration Guide
Activation Specialist Adds Domains and Portal
Once you have specified your domain (and, if you are using Custom Portal, portal
options), your account representative will work with portal designers to create your
custom Secure Portal. This process requires special implementation and testing
and may take up to 10 days.
Add DNS Records for Your Domain
Message Encryption uses ZixCorp encryption technology, which provides
encryption services and message portal access. These DNS records assure that
if another ZixCorp customer sends secure mail to you, it will be routed correctly.
To assure that all incoming mail routes properly, add the following MX records to
your DNS records with first priority:
zixvpm.[domain].com. MX IN 3600 mx35241.zixworks.com
zixvpm.[domain].com. MX IN 3600 mx35242.zixworks.com
This domain needs to be queried explicitly, including the zixvpm subdomain. If this
MX record is not added, replies and some other encrypted traffic will not be routed
properly. This MX record does not affect the filtering of an inbound message.
Contact your DNS server to change this setting. Because these are new MX
records, changes take place immediately. You do not need to add an A record.
Configure TLS Settings in the Administration Console
In the Administration Console, configure TLS to specify the requirements for
encrypting outbound mail through the email protection service. We recommend
setting outbound TLS to accept only TLS connections, and to attempt to deliver
TLS to the recipient server. This assures that all of your mail is as secure as
possible throughout transmission.
To set TLS in Administration Console:
1. Log in to the Administration Console.
2. In the Outbound Servers tab, click TLS in the top menu.
3. In section 1, click “Accept Only TLS.”
4. In section 2, click “Send by TLS if possible.”
5. Click Save to store your settings.