How to enforce TLS inbound from and outbound to a specific external domain

Products

• Messaging Gateway

Issue/Introduction

You need to enforce TLS connections inbound from, and/or outbound to a specific external domain

Resolution

1. Add the external domain to Messaging Gateway:
   
   
   1. In the control center, go to (Protocols -> Domains).
   2. Click Add
2. Enter the Domain information:
   
   
   1. Type the domain name (everything after the @ sign) in "Domain or email address"
   2. Uncheck, " Local domain (Accept inbound mail addressed to this domain)"
   3. (Optional, if wanting to enforce TLS for inbound connections from this domain) Check "Reject mail from this domain if not sent using TLS"
3. Configure Delivery settings:
   
   
   1. Click the Delivery tab.
   2. Check "Optional delivery encryption"
   3. Select one of the options below:
      • "Attempt TLS encryption" (Optional TLS)
      • "Require TLS encryption and don't verify certificate" (TLS required, but the certificate won't be verified)
      • "Require TLS encryption and verify certificate" (TLS required and the certificate must be verified)
4. Scroll to the bottom of the page and click "Save"