partner-domains-tls.md

title	pcx_content_type	weight
Partner Domains TLS	how-to	3

Partner Domains TLS

To add additional TLS requirements for emails coming from certain domains, you can enforce higher levels of SSL/TLS inspection. If TLS is required, mail without TLS from the specified domain will be dropped.

Add a domain

To require that email from a specific domain passes SSL/TLS inspection:

1. Log in to the Cloud Email Security dashboard.
2. Go to Settings (the gear icon).
3. On Email Configuration, go to Domains & Routing > Partner Domains TLS.
4. Select New Partner Domain.
5. Enter a Domain and any Notes.
6. Select Save.

Exempt TLS inspection

If you decide to exempt a domain from TLS inspection - by toggling Require TLS Inbound to Off - this will not turn off enforcement against legacy standards like SSLv1, SSLv2, and TLSv1, which is generally considered insecure.