Google Message Security for Google Apps Administration Guide - Manual (Page 296)

296 Message Security for Google Apps Administration Guide
Setting Up Transport Layer Security
Set up Transport Layer Security using the Administration Console. For outbound
TLS, you will also need to contact Google Apps Support.
• “Setting Up Inbound TLS” on page 301. Steps for setting up TLS for
incoming mail in the Inbound Servers tab.
• “Setting Up Outbound TLS” on page 304. Steps for setting up TLS for
outgoing mail in the Outbound Servers tab. You will also need to set up
Outbound TLS in your Google Apps Mail by contacting Google Apps support.
• “Setting Up Policy Enforced TLS” on page 311. Steps for setting up
Domain Specific TLS in the Inbound Servers or Outbound Servers tab.
About Transport Layer Security
The message security service includes several TLS and encryption options. Click
the links below to see detailed information about each.
• “Transport Layer Security for Inbound Mail” on page 296. Encryption of
mail that outside senders send to your Google Apps Mail. The first step of mail
— from the sender to the message security service — is always encrypted if
the sender attempts to encrypt the message. Mail in the next step — from the
message security service to you — is encrypted according to your settings.
• “Transport Layer Security for Outbound Mail” on page 304. Encryption of
mail that your users send from your Google Apps Mail. See “ Configuring
Outbound Servers” on page 507 for more information on Outbound Services.
• “About Policy Enforced TLS” on page 307. Also called Domain Specific
Settings. Special TLS rules for specific domains that require additional
security. For more information, see “About Policy Enforced TLS” on page 307
and “Setting Up Policy Enforced TLS” on page 311.
Transport Layer Security for Inbound Mail
This section provides a technical overview of TLS encryption for inbound mail
delivery, with details of data flow and the features of TLS in the message security
service.
For information on how to set up TLS with inbound mail, see “Setting Up Inbound
TLS” on page 301.