Defining Which Connections Will Use SSL

After you've defined the Internet Agent's certificate and key file (see Defining the Certificate File), you can configure which connections you want to use SSL. You can enable SSL connections to other SMTP hosts and the Internet Agent Web console, which means that an SSL connection will be used if the other SMTP host or the Web browser (running the Web console) supports SSL. You can also enable or require SSL connections to POP3 and IMAP4 clients. If SSL is enabled, an SSL connection is used if the client supports SSL; if SSL is required, only SSL connections will be accepted.

To configure connections to use SSL:

  1. In ConsoleOne, if the Internet Agent object's property pages are not already displayed, right-click the Internet Agent object, then click Properties.

  2. Click GroupWise > Network Address to display the Network Address page.


    Network Address page

  3. Configure the SSL settings for the following connections:

    HTTP: Select Enabled to enable the Internet Agent to use a secure connection when passing information to the Internet Agent Web console. The Web browser must also be enabled to use SSL; if it is not, a non-secure connection will be used.

    SMTP: Select Enabled to enable the Internet Agent to use a secure connection to other SMTP hosts. The SMTP host must also be enabled to use SSL or TLS (Transport Layer Security); if it is not, a non-secure connection will be used.

    POP: Select from the following options to configure the Internet Agent's use of secure connections to POP clients:

    • Disabled: The Internet Agent will not support SSL connections. All connections will be non-SSL through port 110.

    • Enabled: The POP client determines whether an SSL connection or non-SSL connection is used. The Internet Agent will listen for SSL connections on port 995 and non-SSL connections on port 110.

    • Required: The Internet Agent will force SSL connections on port 995 and port 110. Non-SSL connections will be denied.

    IMAP: Select from the following options to configure the Internet Agent's use of secure connections to IMAP clients:

    • Disabled: The Internet Agent will not support SSL connections. All connections will be non-SSL through port 143.

    • Enabled: The IMAP client determines whether an SSL connection or non-SSL connection is used. The Internet Agent will listen for SSL connections on port 993 and non-SSL connections on port 143.

    • Required: The Internet Agent will force SSL connections on port 993 and port 143. Non-SSL connections will be denied.