topic Cisco Firewall FPR 1120 making outgoing emails to queue up and releasing them slowly in Network Security

Cisco Firewall FPR 1120 making outgoing emails to queue up and releasing them slowly

easydee — Fri, 21 Feb 2020 17:53:19 GMT

Hello Community Friends

Please assist i Cisco Firewall FPR 1120 and ever since i put on the network my outgoing emails from Exchange Server 2013 are taking long to be sent out, often queuing at times up to 9 mins. I also have an office 365 protection subscription and my emails are routed through that. My question is do i need to my an exception for the Office protection and if yes, what configuration changes do i have to make?

Re: Cisco Firewall FPR 1120 making outgoing emails to queue up and releasing them slowly

Abheesh Kumar — Tue, 04 Feb 2020 11:59:47 GMT

Hi,
For testing can you bypass the exchange server IP and check.

HTH
Abheesh

Re: Cisco Firewall FPR 1120 making outgoing emails to queue up and releasing them slowly

easydee — Tue, 04 Feb 2020 13:53:02 GMT

Thank you for the response, I am not sure how i can do that. My Exchange server IP address is natted to a public address, how will i be able to achieve that? I have attached my Nat Config, hope it helps

Re: Cisco Firewall FPR 1120 making outgoing emails to queue up and releasing them slowly

Abheesh Kumar — Tue, 04 Feb 2020 19:01:28 GMT

Hi,

Try creating a TRUST rule for incoming & outgoing traffic towards the "Exchg-Private" IP in Access Control Policy and move this rule on top of other rules.

HTH

Abheesh

Re: Cisco Firewall FPR 1120 making outgoing emails to queue up and releasing them slowly

easydee — Wed, 05 Feb 2020 13:39:34 GMT

I have a permit rule that allows outside traffic to the Exchange Private host and it is on the top of the access rule. My main concern with the Trust rule is that it over provision. For example i won't be able to inspect the incoming traffic. Doesn't that open up my system

Re: Cisco Firewall FPR 1120 making outgoing emails to queue up and releasing them slowly

Abheesh Kumar — Fri, 07 Feb 2020 08:53:44 GMT

Hi,
Is this a new deployment..??
While making the rule action as TRUST we can identify Firepower is queuing the emails or not. When the action is in TRUST try sending emails and see check still the emails are queuing for delivery. This is just for testing after that you can revert the changes.

HTH
Abheesh

Re: Cisco Firewall FPR 1120 making outgoing emails to queue up and releasing them slowly

easydee — Mon, 10 Feb 2020 14:00:59 GMT

Sorry for the late reply, i was not in the office. This is a new deployment, i will try to test it then i will get back to you.

Thank you

Re: Cisco Firewall FPR 1120 making outgoing emails to queue up and releasing them slowly

easydee — Thu, 13 Feb 2020 19:28:49 GMT

Wow, i was really surprised that even with the trust configurations, still my mails are still queuing. What can be the problem