<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic PIX causing problems with TLS esmtp session in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/pix-causing-problems-with-tls-esmtp-session/m-p/1215818#M875581</link>
    <description>&lt;P&gt;There is one particular outside mail server we're having trouble sending to. Basically, our server (Groupwise) does an EHLO, and the other server offers STARTTLS. Our server sends a STARTTLS, sends a few bytes of encrypted data, and then the other server sends a RST. &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If we try a test server outside the PIX, everything is fine.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I've looked at "no fixup protocol smtp 25" and "no inspect esmtp" and those already seem to be in place.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Could the pix be doing something with the certificate? Could esmtp inspection still be on?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks!&lt;/P&gt;</description>
    <pubDate>Mon, 11 Mar 2019 14:58:39 GMT</pubDate>
    <dc:creator>spfister336</dc:creator>
    <dc:date>2019-03-11T14:58:39Z</dc:date>
    <item>
      <title>PIX causing problems with TLS esmtp session</title>
      <link>https://community.cisco.com/t5/network-security/pix-causing-problems-with-tls-esmtp-session/m-p/1215818#M875581</link>
      <description>&lt;P&gt;There is one particular outside mail server we're having trouble sending to. Basically, our server (Groupwise) does an EHLO, and the other server offers STARTTLS. Our server sends a STARTTLS, sends a few bytes of encrypted data, and then the other server sends a RST. &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If we try a test server outside the PIX, everything is fine.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I've looked at "no fixup protocol smtp 25" and "no inspect esmtp" and those already seem to be in place.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Could the pix be doing something with the certificate? Could esmtp inspection still be on?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2019 14:58:39 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/pix-causing-problems-with-tls-esmtp-session/m-p/1215818#M875581</guid>
      <dc:creator>spfister336</dc:creator>
      <dc:date>2019-03-11T14:58:39Z</dc:date>
    </item>
    <item>
      <title>Re: PIX causing problems with TLS esmtp session</title>
      <link>https://community.cisco.com/t5/network-security/pix-causing-problems-with-tls-esmtp-session/m-p/1215819#M875582</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;You may try bypassing the spam server just to make sure that it is not theone causing to filter out few esmtp commands.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 05 Mar 2009 22:30:02 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/pix-causing-problems-with-tls-esmtp-session/m-p/1215819#M875582</guid>
      <dc:creator />
      <dc:date>2009-03-05T22:30:02Z</dc:date>
    </item>
  </channel>
</rss>

