SecurityInsight settings · Settings > Mail & notifications
Encrypted mail connection
| Key | SMTP_UseSSL |
|---|---|
| Where | Settings > Mail & notifications > Mail server |
| Type | On / off |
| Default | Not set: Risk Analysis mail fails (run continues); the daily close-loop mail sends unencrypted |
| Edition | Community |
| Confirmation | SecurityInsight asks you to confirm before it is switched off. |
What it does
Whether report e-mails are sent to the mail server over an encrypted (SSL/TLS) connection.
When enabled
the connection is encrypted, as most cloud relays require.
When disabled
plain connection, typical for an internal relay on port 25. A mismatch with the server makes sending fail.
Risk and how to reverse it
Report mails (with asset and finding details) travel unencrypted to the mail server: only acceptable on an internal relay. Reversible at once.
Requires
Read by: risk-analysis.
Recommended
On.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack