Encrypting Email for Gmail?

[JRA]

Hi all - in line with the new GDPR commandments bestowed upon us next month, I'm looking seriously at encryption plugins for my users here. I'd pondered going with the Virtru suite, but wondered if any other GAFE schools had anything else in mind. Anything awesome, free (of cost as well as hassle) would also be nice to ponder.

 

Anyone got any good ideas that way?

 

Thanks all.

[Arthur]

I'd pondered going with the Virtru suite, but wondered if any other GAFE schools had anything else in mind.

I am currently waiting for Google to release the hosted S/MIME feature for G Suite for Education (since it's free).

 

Related thread: www.edugeek.net/forums/cloud-services/192522-g-suite-enterprise-education.html

[FN-GM]

You could also create compliance rules to force TLS?

[mavhc]

https://support.google.com/a/answer/7492532?hl=en should tell you how many emails were sent/received using TLS, then you know whether you can force it on

 

Not sure where the same thing is for Office365

[crc-ict]

We looked at Virtru (https://www.virtru.com/gmail-security/) which looks really good and very easy to use/implement. Unfortunately, it's very expensive (annually) and you have to jump through a number of hoops with online meetings and demos before you can find out the pricing.

 

We liked the system, but the investment was vetoed by the powers that be due to the cost.

[crc-ict]

https://support.google.com/a/answer/7492532?hl=en should tell you how many emails were sent/received using TLS, then you know whether you can force it on

 

Not sure where the same thing is for Office365

 

That looks like a really interesting feature, but unfortunately isn't in GAFE, it's only available in the Enterprise version

[synaesthesia]

For what actual purpose? Secure emails to who? Some LEA's for instance buy into products you can use without extra cost such as egress switch, is there any further need for further encryption?

[PrimaryNetMan]

We looked at Virtru (https://www.virtru.com/gmail-security/) which looks really good and very easy to use/implement. Unfortunately, it's very expensive (annually) and you have to jump through a number of hoops with online meetings and demos before you can find out the pricing.

 

We liked the system, but the investment was vetoed by the powers that be due to the cost.

 

Yes was looking into Virtru as well as it look perfect with it's tight G Suite integration. But after 2 phone meetings and them wanting to give an 1h online demo plus the constant requests for who makes the decision, how it is made, when it will be made, what budget figure has been set aside they still won't divulge pricing. Avoid.

[mavhc]

That looks like a really interesting feature, but unfortunately isn't in GAFE, it's only available in the Enterprise version

 

Well, that's annoying. Seems like you can pay $2/$4 per user to have it, if you live in USA

[rob_coles]

With Office 365 adding it as a feature It won't be long before gmail catches up.

 

They have self-destruct option coming soon!

 

Google's Gmail gets self-destruct option ahead of GDPR - BBC News

[mavhc]

Office 365 has 17 different encryption methods, which are free, which cost money, where's the stats on usage? who knows

[JRA]

For what actual purpose? Secure emails to who? Some LEA's for instance buy into products you can use without extra cost such as egress switch, is there any further need for further encryption?

It's for the GDPR-monster coming up. SLT want staff to have blanket-access to a reliable email encryption method. So long as they (and attachments) leave that gmail portal encrypted we're fine, or users have the option to always do so I should say.

 

Our LA have the Egress system, which is kinda nice but for the fact that it's a separate Outlook system and it's perceived as too much for staff here to have two accounts, with one for encrypted email.

 

Virtru have ignored my email-back request so far, which does not bode well for them, but I'm bEggared if I'm sitting through ten online seminars and demos and reams of special account enrichment managers before someone quotes me (un)happy. Having said that, it does look VERY nice indeed as a couple of us have said.

 

Thanks everyone for chiming in though. I do quite fancy Google's own offering but this is indeed the beginning of paying for Google services I reckon.

[rogerdnixon]

That looks like a really interesting feature, but unfortunately isn't in GAFE, it's only available in the Enterprise version

 

Its coming as a standard feature to G Suite for Education very soon along with DLP rules.

[JRA]

Its coming as a standard feature to G Suite for Education very soon along with DLP rules.

Oh boy I wish they'd get a shift on! It's not around yet and my deadline is coming up.

 

Anyone know when/got any goss before I ask Google when it's due?

[JRA]

In case anyone's Googling this and wants to do FN-GM's compliance rule bit to force TLS (which I did) it can be done on subject word, recipient list and all sorts. Brief overview and further to-and-fro here: http://www.edugeek.net/forums/data-protection-information-handling/195847-gmail-do-i-need-encrypted-email-add-gdpr-compliance-2.html#post1675092

[david_1152]

Does anyone who's already jumped through the hoops from Virtru want to share their pricing policy? Ball park PA would be find for me, I'd just like to know if it's a total none starter.

 

Thanks! Oh and happy Friday.

[rogerdnixon]

Just for info S/MIME and DLP rules are now available (at least on our domain). Set a few users up with S/MIME which seems to work as expected.

[mavhc]

Just for info S/MIME and DLP rules are now available (at least on our domain). Set a few users up with S/MIME which seems to work as expected.

 

Where did you get the certs from?

[rogerdnixon]

Comodo do them - can buy in bulk - or free individual one. Did a blog post about it: https://wpsit.blogspot.com/2018/06/smime-email-signature-and-encryption.html