SPX Encryption

SPX (Secure PDF Exchange) encryption is a next-generation version of email encryption. It is clientless and extremely easy to set up and customize in any environment. Using SPX encryption, unencrypted email messages and any attachments sent to Sophos UTM are converted to a PDF document, which is then encrypted with a password. You can configure Sophos UTM to allow senders to select passwords for the recipients, or the server can generate the password for the recipient and store it for that recipient, or the server can generate one-time passwords for recipients.

When SPX encryption is enabled, there are two ways how emails can be SPX-encrypted:

At the email recipient’s side, the recipient can decrypt the message by means of Adobe Reader with the password that was used to encrypt the PDF. SPX-encrypted email messages are accessible on all popular smartphone platforms that have native or third-party PDF file support, including Blackberry and Windows Mobile devices.

Using the SPX reply portal, the recipient is able to answer the email in a secure way. It is possible to set expiry times for secure reply and unused passwords (see chapter Email Protection > SPX Encryption > SPX Configuration).

SPX encryption can be activated in both SMTP configuration modes, Simple mode and Profile mode. In Simple mode, a global SPX template can be chosen that defines the layout of the PDF file, password settings, recipient instructions, and SPX reply portal settings. In Profile mode, you can define different SPX templates for different SMTP profiles. So, if you are managing various customer domains, you can assign customized SPX templates containing for example different company logos and texts.

Cross Reference – Find information about configuring email encryption with SPX on Sophos UTM in the Sophos Knowledge Base.

Related Topics Link IconRelated Topics