Forum Discussion

PavIT5's avatar
PavIT5
Copper Contributor
Oct 17, 2024
Solved

Sensitivity Labels & External Sharing

Can anyone help, please? We've rolled out sensitivity labels for emails and we're experiencing an issue with external recipients accessing downloaded attachments. In particular, when an encrypted email is sent externally (using a label which allows external access and giving Owner rights on the file), recipients can view the email body and open attachments but as soon as they download the attachment the downloaded file converts into an .xml file. We don't have this issue with PDF files.

  • PavIT5 I use these 2 solutions:

    -Microsoft 365 Message Encryption (OME)
    Microsoft 365 Message Encryption (OME) can be a simpler solution to send encrypted emails externally, including attachments. This method ensures that external recipients can access the protected content securely through a web portal, avoiding compatibility issues with on-premises software.
    External recipients access the email through a secure link, open the message in their browser, and view the attachments directly. This reduces the possibility of format conversion issues during download.

     

    -Using a secure portal for external sharing
    Use a secure portal or cloud sharing platform to send encrypted emails with attachments. This allows the recipient to access the files without having to deal with compatibility issues during download.
    Instead of attaching the file directly to the email, you upload it to a secure cloud service (such as OneDrive, SharePoint, or another service), and the recipient accesses the file through a link. You can apply encryption and sensitivity labels to the document in the cloud, but the recipient views it through a web interface, avoiding download conversion issues.
    Recipients can view and download the file without encountering format conversion issues.
    You can control access rights, monitor downloads, and even revoke access if necessary.

    • PavIT5's avatar
      PavIT5
      Copper Contributor

      micheleariis The recipients are external and use all sorts of apps. I was able to replicate the issue with iPhone Gmail app and a Gmail account.

      • micheleariis's avatar
        micheleariis
        Steel Contributor

        PavIT5 Some file types, such as Office documents (Word, Excel, PowerPoint), when encrypted with sensitivity labels, may require a compatible application to open properly. If external recipients do not have the appropriate software or do not have the correct permissions configured, the conversion to .xml issue may occur.

        If recipients use a different email client (for example, not Outlook), they may not handle encrypted files correctly.

        Check your sensitivity label settings to see if there are options to allow easier access for external users, especially for files other than PDF.

Resources