Add an SPX template

You can create or edit SPX templates for email encryption.

When you apply SPX templates to email policies or when senders trigger encryption, XG Firewall converts emails and attachments into PDFs and encrypts them.

Go to Email > Encryption > SPX templates and click Add.
Enter a name.

Note Don’t use these characters (’/,\”).
Enter the organization name to show in SPX notifications.
Select the encryption standard.
Select the PDF page size.

In Password type, select the method of generating the password.

Option	Description
Specified by sender	Applied by senders in the email header. Sender must enter a password in the email subject in the format `[secure:<password>]<subject text>`, for example, [Secure:secretp@ssword]. Sender must share the password securely with the recipient. Note XG Firewall removes the password when sending the email and doesn’t store the password. Note You can use this method with any SPX encryption trigger. To encrypt emails, senders must follow these steps: Microsoft Outlook Go to the user portal. Download and install Sophos Outlook Add-in. In Outlook, click Encrypt for each email that you want to encrypt. Other mail clients: Set the email header field X-Sophos-SPXEncrypt to `yes`. Note When XG Firewall finds the SPX header in emails, it applies the specified SPX template.
Generate one-time password for every email	XG Firewall generates a password and emails it to the sender. Sender must share the password securely with the recipient. Note Password isn’t stored.
Generated and stored for recipient	XG Firewall generates recipient-specific password and emails it to the sender. Sender must share the password securely with the recipient. The password is stored and used until it expires.
Specified by recipient	To recipients who aren’t registered for a password, XG Firewall emails a password registration link. When the recipient registers, it sends an encrypted email to the recipient, using the recipient’s password. It stores the password until expiry. Recipients decrypt emails from the organization with this password.

Note If a recipient receives different emails with a password generated through Generated and stored for recipient and Specified by recipient, they must use the appropriate passwords to decrypt the emails.

Note To reply, recipients must click the reply button in SPX-encrypted emails and go to the SPX reply portal..

Optional Customize the notification subject and body.
Optional Specify recipient instructions. XG Firewall emails these to the recipient with the encrypted email.

Note To revert to the default notification, click .

Note You can use simple HTML markup, hyperlinks, and variables, for example, %ORGANIZATION_NAME%.
Click Save.