Getting Started with Cisco Secure Email Threat Defense Join us as our experts walk you through some of the fundamentals, key concepts, and outcomes of the Cisco Secure Email Threat Defense product. We will help you gain the insight needed to create a...
Forum Posts
The customer reports me the following alarm:“An update Failure notification is sent when a service fails to update properly. This notification contains the opaque type for the update Service Name of the update service that has failed.” information be...
Is there any way to automate this search and download a CSV, or at least create a URL that can be run at any time to download the results as CSV? Or, is there a commandline query or API call, or recommended search pattern in the log files, that will...
how do I set or add an email to get a notification before the anti-virus in ironport expired?
I see how to integrate Cisco Threat Response with an SMA, AMP for endpoints, Threatgrid, etc. What I don't see is how to integrate with an ESA - ironport device directly. Is this possible, or do I need an SMA to take advantage of this?
Hello,I would like to to check internal e-mail address validity with ldap check or smtp in a Message Filters and only at Message Filter level.According the documentation, it is not possible. Do you know if Cisco as any plan for a such possibility in ...
Resolved! DMARC can reject, SPF can not. Why?
Hi,with DMARC we can reject mails during SMTP dialog (according to DMARC policies). However, with SPF and DKIM we can only drop/quarantine/bouce, but not reject. Acting on SPF results is only possible in message/content filters (which happen after SM...
Hello,we see an increasing count of PDF attachments which contain links to malicious URLs. All security measures fail.AMP doesn't scan/upload the PDF because of non-existing active/dynamic contents.Is there any way to detect such URLs inside of PDF a...
Hi,I keep wondering about ESA's reporting. For instance, we currently have about 15.000 emails with malicious URLs in a policy quarantine. This quarantine holds mails for 30 days and then deletes them. If I go to the URL Filter Report and select the ...
Hello Gurus I am new to cisco email security appliance , Hence looking for expert opinion. Due to COVAD-19, I assume companies are seeing large number of SPAM attack. I would like to know what you expert are searching in order to filter out maliciou...
Resolved! Quarantine notification language
Hi people, I hope you doing well , I have a little question , If I change the Spam Quarantine language I will receive the emails notification in this language or it is english by default? Thank you so much. Regards
Resolved! CISCO ESA C190 NOT RECEIVING EMAILS
I have a cisco ESA C190 running with OS version 13.0.0-392 My challenge is, my device is able to send emails, but I am unable to receive emails. This was working fine till yesterday the 16th of March 2020 at 4 pm. we did no changes on our end and am ...
I need to find all emails containing an attachment (.doc) received by the organization in the last 30 days.I have already tried to run the GUI on the SMA, but a max it returns if 1000 entries and we have more than 1000.Hence is there a backend query ...
Hi to all, Is there is a rate limit which allows to limit the maximum number of recipients per hour from host and from envelope sender and a way to limit the number of messages instead of the number of recipients?We want to avoid a faulty application...
I read through various documents and it's not clear to me what is the difference between "Incoming Relay" under "Network" an when to use a Relay list under HAT. To me, they served the same purpose. I need help to distinguish when to use one and whe...
Is there a way to submit suspect messages to Cisco directly from IronPort? It can be difficult to get a copy of a suspect message for submitting to the various e-mail addresses, and it would be a lot more efficient if we could just submit from IronPo...
