PBE (Policy Based Encryption) on Symantec.Cloud

Hello Folks,

Here is a small synopsis.

My client wants to have PBE for users sending email to external domains.

Currently using Symantec Message Labs (Symantec.Cloud) as a gateway for anit spam and anti malware.

Questions:

1. Do i need a third party SSL cert to enable or activate PBE on message labs (post i purchase the PBE solution)

2. What type of certificate is required if required.

Regards

Paul Sathya