iQ.Suite Crypt ? Server-based e-mail encryption
Requirements
- You want to send critical information over the Internet by e-mail, while maintaining confidentiality.
- You are spending a lot of time and money to manage keys and/or certificates on the client servers.
- Encrypted or signed e-mails are potential risks, because they may contain viruses and undesirable contents.
- You need automatic, user-transparent support for the leading encryption standards.
Solution
- Centralized encryption makes it possible to set up safe e-mail communication from server to server, from endpoint to server, and from server to endpoint with minimal administrative effort. Crypt is trans parent and meets requirements for end-to-end encryption.
- Centralized, automated key administration on the server or gateway significantly reduces administrative costs. Software and keys are not distributed to the clients. You can easily incorporate existing public-key infrastructures (PKIs) via LDAP.
- By checking file contents and attachments, even in encrypted and signed e-mails, Crypt works in combination with the Watchdog and Wall modules to guarantee comprehensive content security at all times.
- PGP and S/MIME are supported in parallel operation without any effort required on the part of the user. The encryption method is automatically selected based upon your company policies.
 |
|---|
Highlights
Data security, data integrity, statutory data protection standards and protection from commercial espionage require the encryption of all electronic communications through the Internet. With its flexible configuration options, iQ.Suite Crypt lets you centrally define corporate encryption policies. Strong asymmetrical and symmetrical encryption is implemented with standard methods such as PGP and S/MIME, which can also be used in parallel. For the user, the encryption is fully transparent.
- Server-based, central mail encryption ensures full transparency for users regardless of mail client used: no need for key management or training of end users.
- Assignment of central encryption policies for communication through the Internet and other public networks.
- Targeted encryption through address filtering by sender?recipient combinations, recipient groups and Internet domains.
- Automatic import of new keys.
- Can be incorporated in any key management and public key infrastructure (PKI).
- Separate certificate management for S/MIME in special certificates database.
- Central storage of personal and company public keys on the server.
- Use of existing LDAP directories.
- Support for parallel use of PGP, GnuPG and S/MIME.
- Simultaneous use of different methods with long keys, for example PGP, S/ MIME.
- Server-to-server encryption for establishment of secure communication channels.
- Client-to-server encryption, for example for external end users with clientbased third-party encryption.
- Full compatibility with end-to-end encryption.
