Secure Messaging - Overview

This page provides an overview of Secure Messaging and Secure Messaging - Lite, as well as how to set up and use Secure Messaging - Lite.

Secure Messaging

Mimecast's Secure Messaging Service enables confidential messages to be sent to recipients securely by encrypting the connection between servers. An SSL-encrypted tunnel is used to deliver messages, thereby reducing the risk of

• Eavesdropping
• Interception
• Alteration of the message's content.

The recipient accesses the message using the Secure Messaging Portal. As the recipient requires a login and password, this ensures that only they can access the message.
See Secure Socket Layers (SSL) Certificates. 

Key Secure Messaging Functionality

Secure Messaging offers the following messaging features:

• Recall Messages: If a message is sent in error to the wrong recipient, the sender can recall the message at any time, preventing the recipient from reading it.
• Expire Messages: The sender has the option to set the period of time that the secure message can be accessed by the recipient. After that time, the message cannot be read. The sender can also expire or extend the expiry date at any time.
• Compose Messages: The Secure Messaging Portal allows users to compose secure messages to anyone in the customer's organization.
• Read Receipt: The sender can request to receive a notification when the recipient reads the secure message.
• Control Replies: The sender can select if the recipient can reply to the message, and if they can only reply to the sender or reply all.
• Custom Definitions: Secure Messaging definitions can be created with the required attributes through the Mimecast Administration Console.

Secure Messaging - Lite 

Secure Messaging and Secure Messaging - Lite are both services that allow users to send confidential messages that can only be accessed via the Secure Messaging Portal. This ensures that only the intended recipients can access the information.

Secure Messaging - Lite is a restricted version of the Secure Messaging product that was provided as a replacement for the Closed Circuit Messaging product. Secure Messaging - Lite is not available to new customers.

Secure Messaging - Lite Versus Secure Messaging Functionality

The following table describes the features and changes available with the Secure Messaging - Lite product, compared to Secure Messaging.

Feature	Secure Messaging - Lite	Secure Messaging
Mimecast for Outlook support	Yes	Yes
Mimecast Personal Portal support	Yes	Yes
Mimecast Mobile Apps Support	No	Yes
Mimecast Mac App Support	No	Yes
Secure Message Portal - Mobile Access	Yes	Yes
Secure Message Portal - Response	Reply and Reply to all	No Reply allowed, Reply, Reply to all, Compose, Print email body
Secure Message Portal - Branding	Yes (Optional package)	Yes (Optional package)
Exchange Server	Client PC	outlook profile being used.
Configure Message Definitions	No	Yes
Recipient Mark Messages as Read and Delete Messages	Yes	Yes
Sender Request Read Receipt	No	Yes
Message Expiry	No (account retention period)	Yes, and user can extend
Message Recall (End user)	No	Yes
Admin Recall	No	Yes
Attach Files to Replies	No	Yes

Benefits

Secure Messaging - Lite provides the following benefits:

• Secure messages can be sent from inside Mimecast for Outlook or the Mimecast Personal Portal.
• Content Examination Definitions and/or Secure Delivery Definitions can be created to automatically send messages via Secure Messaging - Lite, based on the message's content (e.g., the word Confidential in the message's subject).
• Recipients can access the Secure Messaging Portal on mobile devices.
• Recipients can mark messages as read and unread.
• Recipients can delete messages from the Secure Messaging Portal. The message will remain in the archive.
• Recipients can send secure responses using the Secure Messaging Portal.
• Recipient notifications and the Secure Messaging Portal can be branded if Mimecast's Branding package has been installed.

Setting up Secure Messaging - Lite

Before you can use Secure Messaging - Lite to send and receive messages securely, you need to perform some tasks. There are some of these that are mandatory, and there are others that are optional. The optional tasks allow you to automate the sending of secure messages based on the content of the message. This involves configuring Content Examination Definitions and Policies, which are described in further detail in Secure Messaging - Definitions & Policies.

Mandatory Tasks

Enabling Secure Messaging - Lite

Enabling Secure Messaging - Lite requires a change to your Application Settings. Any change made can take up to 15 minutes to propagate and take effect. You'll also need to restart Mimecast to see the change.

You can enable Secure Messaging - Lite, by using the following steps:

1. Log in to the Mimecast Administration Console.
2. Navigate to Users & Groups | Applications.
3. Click on either the:

• • • Default Application Settings record to setup Secure Messaging - Lite for all users.
    • New Application Settings button to setup Secure Messaging - Lite for a limited group of users.

4. Complete the following General section fields as indicated below:

Field / Option	Description
Group	Click on the Lookup button to select a group of users to which the application settings will apply.
Authentication Profile	Click on the Lookup button to select an authentication profile that will apply to the application settings.

5. Complete the following Gateway Settings section fields as indicated below:

Field / Option	Value
Send as Secure Message	Selected

6. Click on Save and Exit.

Using Secure Messaging - Lite

You can send a message using Secure Messaging - Lite by using the following steps:

1. Either create:

• • • A secure message using Mimecast for Outlook, or the Mimecast Personal Portal. See The Secure Messaging Portal.
    • A message that meets the requirements of a Content Examination Definition or Secure Delivery Definition. 

2. The message is passed to the Mimecast Gateway.
3. A Secure Messaging - Lite notification, containing a link to the Secure Messaging Portal, is sent to the message's recipient.
4. The recipient clicks the notification's link to open and log in to the Secure Messaging Portal.
5. The recipient enters their email address and Secure Messaging Portal password.

If this is the first time a user has received a secure message, they'll receive a temporary password in a separate notification. When they log in, they'll be prompted to set a new password.

6. The message is accessed.