https://community.cisco.com/t5/network-security/smtp-command-overflow-from-cisco-esa-cloud/m-p/3834243#M18142 <P>Our FMC server is constantly detecting this intrusion (<SPAN>SMTP_COMMAND_OVERFLOW)</SPAN> from the same host which is our cloud-based Cisco ESA appliance.</P><P>How should I deal with this?</P><P>My inclination is to trust this host, but not sure if I should just whitelist the IP or what?</P><P>Looking for some guidance on this?</P><P>Is there a way to have this host bypass ONLY this detection but still leaving it in play for file/malware inspection?</P><P>Thanks in advance.</P><P>NM</P> Mon, 08 Apr 2019 13:49:36 GMT N3t W0rK3r 2019-04-08T13:49:36Z https://community.cisco.com/t5/network-security/smtp-command-overflow-from-cisco-esa-cloud/m-p/3834243#M18142 <P>Our FMC server is constantly detecting this intrusion (<SPAN>SMTP_COMMAND_OVERFLOW)</SPAN> from the same host which is our cloud-based Cisco ESA appliance.</P><P>How should I deal with this?</P><P>My inclination is to trust this host, but not sure if I should just whitelist the IP or what?</P><P>Looking for some guidance on this?</P><P>Is there a way to have this host bypass ONLY this detection but still leaving it in play for file/malware inspection?</P><P>Thanks in advance.</P><P>NM</P> Mon, 08 Apr 2019 13:49:36 GMT https://community.cisco.com/t5/network-security/smtp-command-overflow-from-cisco-esa-cloud/m-p/3834243#M18142 N3t W0rK3r 2019-04-08T13:49:36Z