Anyone using Jabber journaling with Ironport?
Jabber sends the journals back in our system spoofing our domain name. Cisco Ironport support says the way it's doing the spoofing, it can't be whitelisted uneless we whitelist our own domain name (what !) or whitelist. Jabber wants us to whitelist by domain name webex.com (anyone using webex.com to spoof will passthrough).
Neither is a good solution.
How could there be such a large security gap within security products? this is against all best practices to spoof domain names.
Anyone have a good workaround?
