1) ZIP加密运算

HENNGE One 使用的是相容于ZIP2.0的传统的“PKWARE加密”格式。电子邮件的附件会自动被加密，密码也会自动被寄出。

2) 加密的流程

您可以选择启用或是停用加密功。您更可以选择是否要以固定密码“Fixed”或是随机密码“Random”加密。

例如您可以将寄至同一个客户的电子邮件附件固定以一个密码加密。您也可以针对单一客户停用附件加密功能。

加密的流程如下：

step1 - 使用筛选器

在此步骤，您在“Filter”-“Define Filters”所做的设定会影响到有附件的电子邮件。

step2 - 确认“略过加密的附档名”

您可以检查是否有您想要略过加密的扩展名。

step3 - 启用加密原则

在此步骤，您在“Encryption”-“Define Encryption Policy”所做的设定会影响到有附件的电子邮件。

加密原则可以针对“寄件者”、“收件者”和“加密方式”来过滤并可以依原则优先序做处理。

• 寄件者和收件者
  you can set "Sender" and "Recipient" that are created in "Filter" - "Define Mail Group".
• 加密方式
  您可以按照以下设定：
     - 密码类型（固定密码／随机密码）
•    - 收件者密码通知
     - ZIP档的扩展名

此文章撰写如何对您的公司有效的设定您的ZIP档案加密功能。

There are three parts of settings in Email DLP Admin Guides: Data Loss Prevention Settings, Sending Approval Settings and Password Protected Zip File Encryption Settings. As for this particular article, only the Password Protected Zip File Encryption Settings will be explained. The Sending Approval Settings and Password Zip File Encryption Settings can be found in separate documents.

This Setting Guide contains three parts:
1) Define Encryption Type
2) Define Encryption Policy
3) Define Common Setting 

1) Define Encryption Type

☆ 1 - Click "Encryption" - "Define Encryption Type" in the left pane, and click "New Encryption Type" in the toolbar.

☆ 2 - Enter "Encryption Type Name" and "Comment".

The setting contents:

1) Encryption Type Name : Enter any name of Encryption Type Name.
2) Comment : Enter any explanation of Encryption Type Name.

☆ 3 - Select "Password Type".

The setting contents:
1) Password Type : Specify a type of password which is used for automatic attachment encryption.

• Fixed Password : A password in fixed format will be used. A notification message for recipient is not sent if fixed password is used.
  
• Random Password : A randomly generated password is used as default encryption. However, you can switch notification message for recipient.

☆ 4 - If you select "Fixed Password", enter "Format" as below. (If you select "Random Password", proceed to next step.)

The setting contents:
1) Format : If you select "Fieed Password", specify a password which is used for automatic attachment encryption. It must be within 60 characters, which you can use as below:

• Alphabet :   Upper case and Lower case.
• Number :   0123456789
• Symbol :   `~!@#$%^&*()_+-={}|[]\:;'<>?,./"
• Tag :
     ((%YEAR%))  :   The year which an mail send on(2010, 2011, 2012...)
     ((%MONTH%))  :   The month which an mail send on(01, 02, 03, ..., 12)
     ((%DAY%)) :   The day which an mail send on(01, 02, 03, ..., 31)

☆ 5 -  If you select "Random Password", enter "Generate password individually" as below. (If you select "Fixed Password", return to the previous step.)

The setting contents:
1) Generate password individually : If you select "Random Password", check "Generate password individually".

2) Notification Message (for Recipient) : Specify the notification message sent to the recipient.

☆ 6 - After setting "Generated ZIP Extension", click "Register".

The setting contents:
1) Generated ZIP Extension : Specify the file extension of the generated ZIP file. It must be within 5 characters which you can use as below:

• Alphabet :   Upper case and Lower case.
• Number :   0123456789
• Symbol :   _ (Underscore) 

☆ 7 - Depending on your need, you can delete the "Encryption Type" by checking the type and push "Delete" button.

*Note - When you delete a Encryption Type, the Encryption Policy that this type depends on is also removed at the same time.

2) Define Encryption Policy

☆ 1 - Click "Encryption" - "Define Encryption Policy" in the left pane, and click "Add Encryption policy" in the toolbar.

☆ 2 - Set "Priority" value.

The setting contents:
1) Priority : It must be between 1 and 99999. A lower value corresponds to a higher priority. 

☆ 3 - Select values of "Sender" and "Recipient".

The setting contents:
1) Sender : Judged by the SMTP envelope sender value rather than the value of the From: header. You can create a mail group in "Define Mail Group" menu if you want to register email addresses to be applied an Encryption Type.
2) Recipient : Judged by the SMTP envelope recipient value rather than the value of the To: header. You can create a mail group in "Define Mail Group" menu if you want to register email addresses to be applied an Encryption Type.
For the instructions on how to setting up Mail Group, 
please refer to this link :  Data Loss Prevention Settings

☆ 4 - After setting "Encryption Type", click "Register".

The setting contents:
1) Encryption Type : You can create a Encryption Type in "Define Encryption Type" menu if you want to make it.

☆5 - Depending on your need, you can delete the "Encryption Policy" by checking the type and push "Delete" button.

3) Define Common Settings

☆ 1 -  Click "Encryption" - "Common Settings" in the left pane.

☆ 2 - Set up "Length" and "Available Character Set" in the "Random Password Settings" field.

The setting contents:
1) Length : Specify the length of the random password. Max value is 30 characters and Minimum is 8.
2) Available Character Set : The password is generated by random combinations from the selected character sets as below.

• Number :   23456789
• Alphabet(Upper Case) :   ABCDEFGHJKLMNPQRSTUVWXY
• Alphabet(Lower Case) :   abcdefghijkmnpqrstuvwyz
• Symbol :   ~!%^&()+={}|[]:;?,./

☆ 3 - Enter "File Extensions Skipped Encryption" in the "Exclude Options" field.

1) File Extensions Skipped Encryption : If there are file extensions you want to exclude from encryption processing specifically, you can specify their extension. The encryption is not applied to attachment files with the specified extension. 

☆ 4 - Specify whether the password notification message is sent to the sender or the recipient.

The setting contents:
1) Notify to Sender : This notification is always enabled while Single Sign-On is disabled in "Account"-"Single Sign-On" menu. Even if this notification is disabled, the sender can check the information in "Encryption"-"History" menu.
For the instructions on how to setting up Mail Group, 
please refer to this link :  HENNGE Email Security User Guides
2) Notify to Recipient : If the notification is disabled, notification message is never sent to the recipient regardless of Encryption Policy settings. Then, the sender has to tell the recipient what the password is somehow or other.

☆ 5 - Depending on your need, you can modify a template of the message body to inform the random password which can be used to extract the encrypted attachments.

☆ 6 - Click "Register" button.