Local Authority can't receive O365 encrypted emails

[BKGarry]

Ok all,

 

Turns out that our local authority cannot receive O365 (Azure information protection) emails.

 

Actually got a line back saying that their IT team asked a member of staff to find us to get a new way of encrypting emails!

 

Errrr excuse me, you what now?

 

We are not the only school in this situation, I have spoken to a few others, and they are getting the same.

 

So if you guys and gals were told this, what would you do? I am loathed to go and pay for a product because of our LAs IT department, I know there is likely to be other reasons that could stop them doing this but really, they don't give us guidance in encryption and then say we cannot use a big industries players product for this :/

[FN-GM]

I would escalate it within the LA. Its not like there is any special software required.

[BKGarry]

Exactly my thought, especially as I know at least two sections actually send us O365 encrypted documents

[free780]

Unless the LA block Office365 domains. Had this with other 3rd parties before.

[AlanD]

Is the problem that the encrypted emails can't be scanned - and are blocked by filtering?

[BKGarry]

They receive them but they just can't open them. And it is their end as I have checked with 13 other local schools who say the same.

[Reverend_Dan]

I've had the exact same thing happen, claim it's not secure doesn't work, can't open it, bla bla bla. It seems egress have the monopoly on LA and Gov email encryption. You can set up a free account and send to a paid account which our LA has.

[FN-GM]

I've had the exact same thing happen, claim it's not secure doesn't work, can't open it, bla bla bla. It seems egress have the monopoly on LA and Gov email encryption. You can set up a free account and send to a paid account which our LA has.

 

You could argue that Egress isn't on this list but 365 is.

 

https://www.gov.uk/government/publications/cloud-software-services-and-the-data-protection-act

Edited June 29, 2018 by FN-GM

[Oaktech]

I've been getting the same back - I've managed to actually sit down with one of the people who says she can't open them and she's trying to open the attachment that comes with the message instead of clicking the 'read this message online' button which allows her to request an 1 time access code. If she does that it works like a charm.

[Blue_Cookeh]

I'd tell the LA to take a hike and provide their own system if they're being that anal about it. Office365 mail encryption is becoming an industry standard feature.

 

As @Oaktech said though, usually it's some problem with authentication and the OTP option gets around it.

[djrscally]

I've been getting the same back - I've managed to actually sit down with one of the people who says she can't open them and she's trying to open the attachment that comes with the message instead of clicking the 'read this message online' button which allows her to request an 1 time access code. If she does that it works like a charm.

 

This has been the problem every single time I've managed to go through it with someone who's complaining they can't open them.

[DannyG555]

Don't know whether this is relevant, but we have been battling with some individuals at our LEA. They use O365 whilst we use Egress Switch. From speaking with several of the individuals who have said they 'can't open them' it turns out there is no technical issue at all. Seems some have no problem opening them whilst others don't want to. When they send encrypted emails out they expect their recipients to enter a one time passcode or login to access, yet they seem to have an issue with reciprocating with our chosen encryption system. Appears to be the usual LEA mantra of their way or the highway... Just thought I would mention in case there is not a technical reason why they cant access and use the system... Edited July 2, 2018 by DannyG555

[Boredguy]

Well we've found that lots of our local schools are using Egress as the LA required it, which caused lots of confusion for our staff when they started getting it and asking for passwords and accounts to be setup.

 

Shame there is not just a single solution that everyone can use